fix: warn on key-id mismatch in list; pin envelope_crypto v1.1.0, mongo v1.1.0

envelope_crypto 1.1.0 raises KeyMismatchError (a ValueError) instead of
InvalidTag for a flag sealed under another key, which fell into the silent
ValueError arm of _can_authorize and dropped the D5 warning. catch it first
and warn naming both key ids. the mongo extra pin moves to the current
release so it co-installs with consumers on mongo v1.1.0.

Signed-off-by: disqualifier <dev@disqualifier.me>
This commit is contained in:
dsql committed 2026-10-16 02:41:29 -04:00
1 parent 30a2b9b2a6
commit 3ca2764750
2 files changed
+14 -6

No files matched your search

+2 -2
View File
@@ -8,14 +8,14 @@ version = "1.1.0"
description = "CLI key-authorization manager for envelope_crypto"
requires-python = ">=3.10"
dependencies = [
"envelope_crypto @ git+https://git.rethinkstudios.io/rethink-public/envelope_crypto.git@v1.0.0",
"envelope_crypto @ git+https://git.rethinkstudios.io/rethink-public/envelope_crypto.git@v1.1.0",
"cryptography>=42.0",
"tomli>=2.0; python_version<'3.11'",
]
[project.optional-dependencies]
mongo = [
"mongo @ git+https://git.rethinkstudios.io/rethink-public/mongo.git@v1.0.0",
"mongo @ git+https://git.rethinkstudios.io/rethink-public/mongo.git@v1.1.0",
]
[project.scripts]