From 0c794ae68dd758fbbe89b7555d98ef8144db3028 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 24 May 2026 19:53:01 +0000 Subject: [PATCH] chore(deps): bump cryptography from 46.0.7 to 48.0.0 Bumps [cryptography](https://github.com/pyca/cryptography) from 46.0.7 to 48.0.0. - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](https://github.com/pyca/cryptography/compare/46.0.7...48.0.0) --- updated-dependencies: - dependency-name: cryptography dependency-version: 48.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- pyproject.toml | 2 +- requirements.txt | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/pyproject.toml b/pyproject.toml index aa7573f..0d99314 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -11,7 +11,7 @@ dependencies = [ "databricks-sdk>=0.106.0", "mlflow-skinny==3.12.0", "requests", - "cryptography>=46.0.7", + "cryptography>=48.0.0", # Security floors — make CVE-driven minimums explicit so future resolves # can't silently downgrade. See PR description for advisory IDs. "gitpython>=3.1.49", diff --git a/requirements.txt b/requirements.txt index a009bcc..a44b14c 100644 --- a/requirements.txt +++ b/requirements.txt @@ -42,7 +42,7 @@ click==8.3.3 # uvicorn cloudpickle==3.1.2 # via mlflow-skinny -cryptography==46.0.7 +cryptography==48.0.0 # via # coda (pyproject.toml) # google-auth