Skip to content

chore(deps): bump cryptography from 48.0.0 to 49.0.0#56

Merged
kj-podonos merged 1 commit into
mainfrom
deps/cryptography-48.0.1
Jun 18, 2026
Merged

chore(deps): bump cryptography from 48.0.0 to 49.0.0#56
kj-podonos merged 1 commit into
mainfrom
deps/cryptography-48.0.1

Conversation

@kj-podonos

Copy link
Copy Markdown
Contributor

Summary

Bumps the transitive dependency cryptography 48.0.0 → 49.0.0 in uv.lock.

Supersedes the stale dependabot PR #50 (targeted 48.0.1; its branch was deleted
after the commitlint fix #51 landed). 49.0.0 is the current latest.

Compatibility

  • Transitive, dev-only, linux-only: pulled in via twine → keyring → secretstorage; secretstorage carries sys_platform == 'linux'. Zero direct usage in src/ or tests/.
  • secretstorage depends on cryptography with no upper bound → 49.0.0 satisfies it (uv resolved 72 pkgs, only cryptography changed).
  • Lock has cp39-abi3 wheels → cryptography 49.0.0 supports Python ≥ 3.9; repo requires >= 3.10. manylinux_2_28/2_34 + musllinux wheels present.
  • Lock-only change; no source touched.

Test plan

  • CI matrix green (Python 3.10–3.14 × ubuntu/macos/windows)
  • fresh-venv-smoke green (real install)
  • lint green (conventional commit)

🤖 Generated with Claude Code

Supersedes the stale dependabot PR #50 (which targeted 48.0.1; its branch was
deleted after the commitlint fix landed). Latest cryptography is now 49.0.0.

cryptography is a transitive dev-only dependency (twine -> keyring ->
secretstorage, linux-only marker) with zero direct usage in this project.
Lock-only change.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
@kj-podonos kj-podonos self-assigned this Jun 18, 2026
@kj-podonos kj-podonos merged commit 8e7111d into main Jun 18, 2026
19 checks passed
@kj-podonos kj-podonos deleted the deps/cryptography-48.0.1 branch June 18, 2026 04:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant