dsql
abf7491d26
both the bounded pass and the unbounded _has_encrypted_field fallback descended only through dict values, so a blob nested inside a list at any depth was invisible and the function returned False. reencrypt() already skips list-nested blobs (documented gotcha), so after rotation such a blob was stranded under the old key while this audit reported the record clean - a rotation-data-loss trap once the old wrapped-key record is deleted. both traversal passes now walk list/tuple items in addition to dict values; the blob-detection predicate is unchanged. bump 0.1.7 -> 0.1.8 Signed-off-by: disqualifier <dev@disqualifier.me>
16 lines
401 B
TOML
16 lines
401 B
TOML
[build-system]
|
|
requires = ["hatchling"]
|
|
build-backend = "hatchling.build"
|
|
|
|
[project]
|
|
name = "envelope_crypto"
|
|
version = "0.1.8"
|
|
description = "Envelope encryption (RSA-OAEP wrapped AES-256-GCM) for dict records — config-free, storage-agnostic, installable."
|
|
requires-python = ">=3.10"
|
|
dependencies = [
|
|
"cryptography>=42.0",
|
|
]
|
|
|
|
[tool.hatch.build.targets.wheel]
|
|
packages = ["src/envelope_crypto"]
|