Upgrade to paramiko 3.4.0 (#373)

* Upgrade to paramiko 3.4.0

This resolves https://terrapin-attack.com/

* generate deps with min supported python

otherwise, I think pip may select dep versions that work on newer but not older pythons

* regen deps on python 3.8

---------

Co-authored-by: Nicholas Chammas <[email protected]>

CONTRIBUTING.md

@@ -78,7 +78,7 @@ There are a few things you should do before diving in to write a new feature or
 
 ### Changing dependencies
 
-If you are changing anything about Flintrock's dependencies, be sure to update the compiled requirements using [pip-tools]:
+If you are changing anything about Flintrock's dependencies, be sure to update the compiled requirements using [pip-tools] and the lowest version of Python that Flintrock supports (Python 3.8):
 
 [pip-tools]: https://github.com/jazzband/pip-tools
 

requirements/developer.pip

@@ -6,7 +6,7 @@
 #
 -e file:.#egg=Flintrock
     # via -r requirements/user.pip
-bcrypt==4.0.1
+bcrypt==4.1.2
     # via
     #   -r requirements/user.pip
     #   paramiko
@@ -29,11 +29,11 @@ click==8.1.7
     # via
     #   -r requirements/user.pip
     #   flintrock
-coverage[toml]==7.3.2
+coverage[toml]==7.4.3
     # via
     #   coverage
     #   pytest-cov
-cryptography==41.0.5
+cryptography==42.0.5
     # via
     #   -r requirements/user.pip
     #   paramiko
@@ -52,11 +52,11 @@ mccabe==0.7.0
     # via flake8
 packaging==23.2
     # via pytest
-paramiko==3.3.1
+paramiko==3.4.0
     # via
     #   -r requirements/user.pip
     #   flintrock
-pluggy==1.3.0
+pluggy==1.4.0
     # via pytest
 pycodestyle==2.11.1
     # via flake8
@@ -70,7 +70,7 @@ pynacl==1.5.0
     # via
     #   -r requirements/user.pip
     #   paramiko
-pytest==7.4.3
+pytest==8.0.1
     # via
     #   -r requirements/developer.in
     #   pytest-cov

requirements/maintainer.pip

@@ -10,7 +10,7 @@ altgraph==0.17.4
     # via
     #   macholib
     #   pyinstaller
-bcrypt==4.0.1
+bcrypt==4.1.2
     # via
     #   -r requirements/developer.pip
     #   paramiko
@@ -26,7 +26,7 @@ botocore==1.32.4
     #   s3transfer
 build==1.0.3
     # via -r requirements/maintainer.in
-certifi==2023.11.17
+certifi==2024.2.2
     # via requests
 cffi==1.16.0
     # via
@@ -39,12 +39,12 @@ click==8.1.7
     # via
     #   -r requirements/developer.pip
     #   flintrock
-coverage[toml]==7.3.2
+coverage[toml]==7.4.3
     # via
     #   -r requirements/developer.pip
     #   coverage
     #   pytest-cov
-cryptography==41.0.5
+cryptography==42.0.5
     # via
     #   -r requirements/developer.pip
     #   paramiko
@@ -58,19 +58,20 @@ flake8==6.1.0
     # via -r requirements/developer.pip
 idna==3.6
     # via requests
-importlib-metadata==6.8.0
+importlib-metadata==7.0.1
     # via
     #   build
     #   keyring
     #   pyinstaller
+    #   pyinstaller-hooks-contrib
     #   twine
 importlib-resources==6.1.1
     # via keyring
 iniconfig==2.0.0
     # via
     #   -r requirements/developer.pip
     #   pytest
-jaraco-classes==3.3.0
+jaraco-classes==3.3.1
     # via keyring
 jmespath==1.0.1
     # via
@@ -89,23 +90,24 @@ mccabe==0.7.0
     #   flake8
 mdurl==0.1.2
     # via markdown-it-py
-more-itertools==10.1.0
+more-itertools==10.2.0
     # via jaraco-classes
-nh3==0.2.14
+nh3==0.2.15
     # via readme-renderer
 packaging==23.2
     # via
     #   -r requirements/developer.pip
     #   build
     #   pyinstaller
+    #   pyinstaller-hooks-contrib
     #   pytest
-paramiko==3.3.1
+paramiko==3.4.0
     # via
     #   -r requirements/developer.pip
     #   flintrock
 pkginfo==1.9.6
     # via twine
-pluggy==1.3.0
+pluggy==1.4.0
     # via
     #   -r requirements/developer.pip
     #   pytest
@@ -127,15 +129,15 @@ pygments==2.17.2
     #   rich
 pyinstaller==6.2.0
     # via -r requirements/maintainer.in
-pyinstaller-hooks-contrib==2023.10
+pyinstaller-hooks-contrib==2024.1
     # via pyinstaller
 pynacl==1.5.0
     # via
     #   -r requirements/developer.pip
     #   paramiko
 pyproject-hooks==1.0.0
     # via build
-pytest==7.4.3
+pytest==8.0.1
     # via
     #   -r requirements/developer.pip
     #   pytest-cov
@@ -178,7 +180,7 @@ tomli==2.0.1
     #   pytest
 twine==4.0.2
     # via -r requirements/maintainer.in
-typing-extensions==4.8.0
+typing-extensions==4.9.0
     # via rich
 urllib3==1.26.18
     # via

requirements/user.pip

@@ -6,7 +6,7 @@
 #
 -e file:.#egg=Flintrock
     # via -r requirements/user.in
-bcrypt==4.0.1
+bcrypt==4.1.2
     # via paramiko
 boto3==1.29.4
     # via flintrock
@@ -21,13 +21,13 @@ cffi==1.16.0
     #   pynacl
 click==8.1.7
     # via flintrock
-cryptography==41.0.5
+cryptography==42.0.5
     # via paramiko
 jmespath==1.0.1
     # via
     #   boto3
     #   botocore
-paramiko==3.3.1
+paramiko==3.4.0
     # via flintrock
 pycparser==2.21
     # via cffi

setup.py

@@ -52,7 +52,7 @@
         'boto3 == 1.29.4',
         'botocore == 1.32.4',
         'click == 8.1.7',
-        'paramiko == 3.3.1',
+        'paramiko == 3.4.0',
         'PyYAML == 6.0.1',
     ],