From 8b4e822028e19f015b751b67ec0a30e077990a5c Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 5 Apr 2026 10:22:07 +0000 Subject: [PATCH] chore(deps): bump cryptography from 44.0.2 to 46.0.6 in /backend Bumps [cryptography](https://github.com/pyca/cryptography) from 44.0.2 to 46.0.6. - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](https://github.com/pyca/cryptography/compare/44.0.2...46.0.6) --- updated-dependencies: - dependency-name: cryptography dependency-version: 46.0.6 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- backend/requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/backend/requirements.txt b/backend/requirements.txt index 32cb404..fedee32 100644 --- a/backend/requirements.txt +++ b/backend/requirements.txt @@ -16,7 +16,7 @@ xxhash==3.5.0 # ~10 GB/s file hashing for change detection psutil==5.9.8 # disk usage stats, filesystem type # Encryption at rest (AES-256-GCM streaming + Fernet legacy — accounting data compliance) -cryptography==44.0.2 # pinned: msal requires <45; CVE-2026-26007 + CVE-2026-34073 ignored in CI +cryptography==46.0.6 # pinned: msal requires <45; CVE-2026-26007 + CVE-2026-34073 ignored in CI # File watching (real-time sync) watchdog==4.0.1