Bump cryptography from 46.0.5 to 46.0.6#3261
Conversation
|
@dependabot rebase |
Bumps [cryptography](https://github.com/pyca/cryptography) from 46.0.5 to 46.0.6. - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](pyca/cryptography@46.0.5...46.0.6) --- updated-dependencies: - dependency-name: cryptography dependency-version: 46.0.6 dependency-type: indirect ... Signed-off-by: dependabot[bot] <[email protected]>
dcb46fa to
a1955ce
Compare
JiwaniZakir
left a comment
There was a problem hiding this comment.
This is a patch-level bump of cryptography in uv.lock (46.0.5 → 46.0.6), which typically indicates a security or bug-fix release. It's worth checking the cryptography changelog to confirm what CVE or fix is addressed, since cryptography patch releases are frequently security-motivated — the PR description doesn't mention the motivation. The lock file change looks mechanically correct (sdist hash and all wheel hashes are updated consistently across platforms), but pyproject.toml or any other manifest that pins cryptography directly should be verified to ensure the constraint allows 46.0.6 (i.e., isn't pinned to an exact version like ==46.0.5). If this bump was triggered by a vulnerability, that context should be captured in the PR body for audit trail purposes.
Bumps cryptography from 46.0.5 to 46.0.6.
Changelog
Sourced from cryptography's changelog.
Commits
91d7288Cherry-pick #14542 (#14543)