Skip to content

Bump cryptography from 46.0.5 to 46.0.7#1862

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/cryptography-46.0.7
Closed

Bump cryptography from 46.0.5 to 46.0.7#1862
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/cryptography-46.0.7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Apr 8, 2026

Copy link
Copy Markdown
Contributor

Bumps cryptography from 46.0.5 to 46.0.7.

Changelog

Sourced from cryptography's changelog.

46.0.7 - 2026-04-07


* **SECURITY ISSUE**: Fixed an issue where non-contiguous buffers could be
  passed to APIs that accept Python buffers, which could lead to buffer
  overflow. **CVE-2026-39892**
* Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.5.6.

.. _v46-0-6:

46.0.6 - 2026-03-25

  • SECURITY ISSUE: Fixed a bug where name constraints were not applied to peer names during verification when the leaf certificate contains a wildcard DNS SAN. Ordinary X.509 topologies are not affected by this bug, including those used by the Web PKI. Credit to Oleh Konko (1seal) for reporting the issue. CVE-2026-34073

.. _v46-0-5:

Commits

@dependabot dependabot Bot added dependencies Run `tox -r` before testing locally, dependencies have changed python Pull requests that update Python code labels Apr 8, 2026
@github-actions

github-actions Bot commented Apr 8, 2026

Copy link
Copy Markdown

Test results

    8 files  1 696 suites   3m 1s ⏱️
  928 tests   927 ✅ 1 💤 0 ❌
7 424 runs  7 416 ✅ 8 💤 0 ❌

Results for commit 2635d99.

♻️ This comment has been updated with latest results.

@codecov

codecov Bot commented Apr 8, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 88.56%. Comparing base (4a55153) to head (2635d99).
⚠️ Report is 2 commits behind head on main.

Additional details and impacted files
@@           Coverage Diff           @@
##             main    #1862   +/-   ##
=======================================
  Coverage   88.56%   88.56%           
=======================================
  Files         145      145           
  Lines        7064     7064           
=======================================
  Hits         6256     6256           
  Misses        808      808           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@dependabot dependabot Bot force-pushed the dependabot/pip/cryptography-46.0.7 branch 2 times, most recently from e3fba6e to ca35149 Compare April 28, 2026 13:36
Bumps [cryptography](https://github.com/pyca/cryptography) from 46.0.5 to 46.0.7.
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@46.0.5...46.0.7)

---
updated-dependencies:
- dependency-name: cryptography
  dependency-version: 46.0.7
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/pip/cryptography-46.0.7 branch from ca35149 to 2635d99 Compare April 29, 2026 07:37
@sonarqubecloud

Copy link
Copy Markdown

@dependabot @github

dependabot Bot commented on behalf of github Apr 29, 2026

Copy link
Copy Markdown
Contributor Author

Looks like cryptography is up-to-date now, so this is no longer needed.

@dependabot dependabot Bot closed this Apr 29, 2026
@dependabot dependabot Bot deleted the dependabot/pip/cryptography-46.0.7 branch April 29, 2026 08:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Run `tox -r` before testing locally, dependencies have changed python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants