From be87143e579036b86b55304055a9fc7e9adc1a6a Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 12 May 2026 01:05:38 +0000
Subject: [PATCH] chore(deps): bump the localsetup-python group

Updates the requirements on [pyyaml](https://github.com/yaml/pyyaml), [requests](https://github.com/psf/requests), [cryptography](https://github.com/pyca/cryptography) and [jsonschema](https://github.com/python-jsonschema/jsonschema) to permit the latest version.

Updates `pyyaml` to 6.0.3
- [Release notes](https://github.com/yaml/pyyaml/releases)
- [Changelog](https://github.com/yaml/pyyaml/blob/6.0.3/CHANGES)
- [Commits](https://github.com/yaml/pyyaml/compare/6.0...6.0.3)

Updates `requests` to 2.34.0
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](https://github.com/psf/requests/compare/v2.28.0...v2.34.0)

Updates `cryptography` to 48.0.0
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pyca/cryptography/compare/42.0.0...48.0.0)

Updates `jsonschema` to 4.26.0
- [Release notes](https://github.com/python-jsonschema/jsonschema/releases)
- [Changelog](https://github.com/python-jsonschema/jsonschema/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/python-jsonschema/jsonschema/compare/v4.0.0...v4.26.0)

---
updated-dependencies:
- dependency-name: pyyaml
  dependency-version: 6.0.3
  dependency-type: direct:production
  dependency-group: localsetup-python
- dependency-name: requests
  dependency-version: 2.34.0
  dependency-type: direct:production
  dependency-group: localsetup-python
- dependency-name: cryptography
  dependency-version: 48.0.0
  dependency-type: direct:production
  dependency-group: localsetup-python
- dependency-name: jsonschema
  dependency-version: 4.26.0
  dependency-type: direct:production
  dependency-group: localsetup-python
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 _localsetup/requirements.txt | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/_localsetup/requirements.txt b/_localsetup/requirements.txt
index 12f7cd8..06a30af 100644
--- a/_localsetup/requirements.txt
+++ b/_localsetup/requirements.txt
@@ -5,12 +5,12 @@
 #
 # PyYAML: YAML parsing for PUBLIC_SKILL_INDEX.yaml and other framework docs.
 #   Used by: tools/refresh_public_skill_index.py, tools/skill_index_scrub.py
-PyYAML>=6.0
+PyYAML>=6.0.3
 #
 # requests: HTTP client for URL probing and skill index refresh.
 #   Replaces manual urllib.request usage in scrub and refresh tools.
 #   Used by: tools/skill_index_scrub.py, tools/refresh_public_skill_index.py
-requests>=2.28
+requests>=2.34.0
 #
 # python-frontmatter: YAML frontmatter parsing for skill/PRD markdown files.
 #   Replaces fragile string-split frontmatter extraction.
@@ -19,7 +19,7 @@ python-frontmatter>=1.1
 #
 # cryptography: envelope encryption primitives (AES-GCM, HKDF, PBKDF2) for secure mail payload handling.
 #   Used by: skills/ls-mail-protocol-control/scripts/crypto_engine.py
-cryptography>=42.0
+cryptography>=48.0.0
 #
 # PGPy: pure-Python OpenPGP encryption/decryption support for secure mail exchange.
 #   Used by: skills/ls-mail-protocol-control/scripts/crypto_engine.py
@@ -27,4 +27,4 @@ PGPy>=0.6.0
 #
 # jsonschema: optional runtime validation of Agent Q inner manifest against manifest.schema.json.
 #   Used by: tools/agentq_transport_client/agentq_transport_client/manifest_validate.py
-jsonschema>=4.0
+jsonschema>=4.26.0