Bump rsa from 3.4.2 to 4.8 in /.circleci

[dependabot]

Bumps rsa from 3.4.2 to 4.8.

Changelog

Sourced from rsa's changelog.

Version 4.8 - released 2021-11-24

• Switch to Poetry for dependency and release management.
• Compatibility with Python 3.10.
• Chain exceptions using raise new_exception from old_exception (#157)
• Added marker file for PEP 561. This will allow type checking tools in dependent projects to use type annotations from Python-RSA (#136).
• Use the Chinese Remainder Theorem when decrypting with a private key. This makes decryption 2-4x faster (#163).

Version 4.7.2 - released 2021-02-24

• Fix picking/unpickling issue introduced in 4.7 (#173)

Version 4.7.1 - released 2021-02-15

• Fix threading issue introduced in 4.7 (#173)

Version 4.7 - released 2021-01-10

• Fix #165: CVE-2020-25658 - Bleichenbacher-style timing oracle in PKCS#1 v1.5 decryption code
• Add padding length check as described by PKCS#1 v1.5 (Fixes #164)
• Reuse of blinding factors to speed up blinding operations. Fixes #162.
• Declare & test support for Python 3.9

Version 4.4 & 4.6 - released 2020-06-12

Version 4.4 and 4.6 are almost a re-tagged release of version 4.2. It requires Python 3.5+. To avoid older Python installations from trying to upgrade to RSA 4.4, this is now made explicit in the python_requires argument in setup.py. There was a mistake releasing 4.4 as "3.5+ only", which made it necessary to retag 4.4 as 4.6 as well.

No functional changes compared to version 4.2.

Version 4.3 & 4.5 - released 2020-06-12

Version 4.3 and 4.5 are almost a re-tagged release of version 4.0. It is the last to support Python 2.7. This is now made explicit in the python_requires

... (truncated)

Commits

• 47a7db1 More version bump to 4.8
• cf47106 Fix update_version.sh to follow Black-style formatting
• 1ba4a17 Bumped version to 4.8
• 7b52296 Add compat with py3.10 to changelog
• 7ed1b5e Remove obsolete file
• 3e9b338 Fix typos
• a038aef Update dependencies for Python 3.10 compatibility
• 39c30a5 Fix testing with Tox + Poetry
• fe4db61 Run 'poetry lock' to bump typed_ast to support Python 3.10
• 1f77949 Add support for Python 3.10
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

The following labels could not be found: python, dependencies, docs-approved.

[dependabot]

Superseded by #58.