Sourced from bcrypt's changelog.

5.0.0

• Bumped MSRV to 1.74.
• Added support for Python 3.14 and free-threaded Python 3.14.
• Added support for Windows on ARM.
• Passing hashpw a password longer than 72 bytes now raises a ValueError. Previously the password was silently truncated, following the behavior of the original OpenBSD bcrypt implementation.

• 5060bce 5.0.0 release (#1078)
• e43f568 Bump actions/cache from 4.2.4 to 4.3.0 (#1077)
• fc9f680 Bump libc from 0.2.175 to 0.2.176 in /src/_bcrypt (#1075)
• 633f46f Add support for Python 3.14 (#1073)
• a2fefbb Remove pypy310 builds (#1074)
• f60707e Bump wasi from 0.14.5+wasi-0.2.4 to 0.14.7+wasi-0.2.4 in /src/_bcrypt (#1071)
• c790eed Bump unicode-ident from 1.0.18 to 1.0.19 in /src/_bcrypt (#1070)
• 122cbdc Bump target-lexicon from 0.13.2 to 0.13.3 in /src/_bcrypt (#1069)
• 2bd208d Bump wasi from 0.14.4+wasi-0.2.4 to 0.14.5+wasi-0.2.4 in /src/_bcrypt (#1068)
• e1aa9e8 remove poinless cargo cache paths from CI (#1067)
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)