From 5233ff1ae9acad14d870e750c1762fda56b46685 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sat, 8 Aug 2026 16:03:06 +0000 Subject: [PATCH] build(deps): bump cryptography from 49.0.0 to 50.0.0 Bumps [cryptography](https://github.com/pyca/cryptography) from 49.0.0 to 50.0.0. - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](https://github.com/pyca/cryptography/compare/49.0.0...50.0.0) --- updated-dependencies: - dependency-name: cryptography dependency-version: 50.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- requirements-lock.txt | 2 +- requirements.txt | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/requirements-lock.txt b/requirements-lock.txt index d42dfdaa9b..9a219c0a7a 100644 --- a/requirements-lock.txt +++ b/requirements-lock.txt @@ -32,7 +32,7 @@ PyOpenGL==3.1.10 flask==3.1.3 # Security & Utilities -cryptography==49.0.0 +cryptography==50.0.0 defusedxml==0.7.1 PyYAML==6.0.3 pillow==12.3.0 diff --git a/requirements.txt b/requirements.txt index b01578c0d1..9d2f31ebc1 100644 --- a/requirements.txt +++ b/requirements.txt @@ -37,7 +37,7 @@ pydantic>=2.0.0 # Data validation using Python type annotations pydantic-settings>=2.0.0 # Settings management for Pydantic v2 # Security & Encryption -cryptography>=49.0.0 # Cryptographic recipes and primitives +cryptography>=50.0.0 # Cryptographic recipes and primitives defusedxml>=0.7.0 # Safe XML parsing (mitigates XML bomb / XXE attacks) pygments>=2.20.0,<2.21.0 # Pinned: CVE-2026-4539 affects 2.19.x (transitive via rich/pip-audit)