chore(deps): update dependency cryptography to v49

renovate-bot commented

2026-06-29 05:17:29 +00:00

Contributor

This PR contains the following updates:

Package	Change	Age	Confidence
cryptography (changelog)	`==44.0.3` → `==49.0.0`

Release Notes

pyca/cryptography (cryptography)

Configuration

📅 Schedule: (in timezone America/New_York)

Branch creation
- "before 6am on monday"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [cryptography](https://github.com/pyca/cryptography) ([changelog](https://cryptography.io/en/latest/changelog/)) | `==44.0.3` → `==49.0.0` | ![age](https://developer.mend.io/api/mc/badges/age/pypi/cryptography/49.0.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/cryptography/44.0.3/49.0.0?slim=true) | --- ### Release Notes <details> <summary>pyca/cryptography (cryptography)</summary> ### [`v49.0.0`](https://github.com/pyca/cryptography/compare/48.0.1...49.0.0) [Compare Source](https://github.com/pyca/cryptography/compare/48.0.1...49.0.0) ### [`v48.0.1`](https://github.com/pyca/cryptography/compare/48.0.0...48.0.1) [Compare Source](https://github.com/pyca/cryptography/compare/48.0.0...48.0.1) ### [`v48.0.0`](https://github.com/pyca/cryptography/compare/47.0.0...48.0.0) [Compare Source](https://github.com/pyca/cryptography/compare/47.0.0...48.0.0) ### [`v47.0.0`](https://github.com/pyca/cryptography/compare/46.0.7...47.0.0) [Compare Source](https://github.com/pyca/cryptography/compare/46.0.7...47.0.0) ### [`v46.0.7`](https://github.com/pyca/cryptography/compare/46.0.6...46.0.7) [Compare Source](https://github.com/pyca/cryptography/compare/46.0.6...46.0.7) ### [`v46.0.6`](https://github.com/pyca/cryptography/compare/46.0.5...46.0.6) [Compare Source](https://github.com/pyca/cryptography/compare/46.0.5...46.0.6) ### [`v46.0.5`](https://github.com/pyca/cryptography/compare/46.0.4...46.0.5) [Compare Source](https://github.com/pyca/cryptography/compare/46.0.4...46.0.5) ### [`v46.0.4`](https://github.com/pyca/cryptography/compare/46.0.3...46.0.4) [Compare Source](https://github.com/pyca/cryptography/compare/46.0.3...46.0.4) ### [`v46.0.3`](https://github.com/pyca/cryptography/compare/46.0.2...46.0.3) [Compare Source](https://github.com/pyca/cryptography/compare/46.0.2...46.0.3) ### [`v46.0.2`](https://github.com/pyca/cryptography/compare/46.0.1...46.0.2) [Compare Source](https://github.com/pyca/cryptography/compare/46.0.1...46.0.2) ### [`v46.0.1`](https://github.com/pyca/cryptography/compare/46.0.0...46.0.1) [Compare Source](https://github.com/pyca/cryptography/compare/46.0.0...46.0.1) ### [`v46.0.0`](https://github.com/pyca/cryptography/compare/45.0.7...46.0.0) [Compare Source](https://github.com/pyca/cryptography/compare/45.0.7...46.0.0) ### [`v45.0.7`](https://github.com/pyca/cryptography/compare/45.0.6...45.0.7) [Compare Source](https://github.com/pyca/cryptography/compare/45.0.6...45.0.7) ### [`v45.0.6`](https://github.com/pyca/cryptography/compare/45.0.5...45.0.6) [Compare Source](https://github.com/pyca/cryptography/compare/45.0.5...45.0.6) ### [`v45.0.5`](https://github.com/pyca/cryptography/compare/45.0.4...45.0.5) [Compare Source](https://github.com/pyca/cryptography/compare/45.0.4...45.0.5) ### [`v45.0.4`](https://github.com/pyca/cryptography/compare/45.0.3...45.0.4) [Compare Source](https://github.com/pyca/cryptography/compare/45.0.3...45.0.4) ### [`v45.0.3`](https://github.com/pyca/cryptography/compare/45.0.2...45.0.3) [Compare Source](https://github.com/pyca/cryptography/compare/45.0.2...45.0.3) ### [`v45.0.2`](https://github.com/pyca/cryptography/compare/45.0.1...45.0.2) [Compare Source](https://github.com/pyca/cryptography/compare/45.0.1...45.0.2) ### [`v45.0.1`](https://github.com/pyca/cryptography/compare/45.0.0...45.0.1) [Compare Source](https://github.com/pyca/cryptography/compare/45.0.0...45.0.1) ### [`v45.0.0`](https://github.com/pyca/cryptography/compare/44.0.3...45.0.0) [Compare Source](https://github.com/pyca/cryptography/compare/44.0.3...45.0.0) </details> --- ### Configuration 📅 **Schedule**: (in timezone America/New_York) - Branch creation - "before 6am on monday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).

renovate-bot added 1 commit

2026-06-29 05:17:29 +00:00

chore(deps): update dependency cryptography to v49

CI / test (pull_request) Failing after 57s

Details

0c7a36c116

rbrooks added 1 commit

2026-07-24 18:40:24 +00:00

Merge remote-tracking branch 'origin/main' into upd-tmp

CI / test (pull_request) Failing after 1m12s

Details

622719f154

claude-bot referenced this pull request

2026-07-24 19:04:49 +00:00

chore(deps): update python minor/patch #31

claude-bot commented

2026-07-24 19:04:53 +00:00

Contributor

Root cause (reproduced in a Python 3.12 container)

cryptography==49.0.0 can't install on current main — ResolutionImpossible at the pip install step (matches CI's ~1m13s early failure):

cryptography 49.0.0 depends on cffi>=2.0.0
timezonefinder 6.5.3 depends on cffi<2 and >=1.15.1

cryptography 49 requires cffi ≥2, but pinned timezonefinder 6.5.3 caps cffi <2. Fix: bump timezonefinder → 8.2.5 (#37) in the same change — it drops the cffi<2 cap.

This bump is also exactly what #31 needs: authlib 1.7.2 → joserfc → cryptography ≥45. Recommend landing #31 + #35 + #37 together.

(Note: the branch was updated with current main during review, which is why CI re-ran and failed here at install.)

## Root cause (reproduced in a Python 3.12 container) `cryptography==49.0.0` can't install on current `main` — `ResolutionImpossible` at the `pip install` step (matches CI's ~1m13s early failure): ``` cryptography 49.0.0 depends on cffi>=2.0.0 timezonefinder 6.5.3 depends on cffi<2 and >=1.15.1 ``` cryptography 49 requires **cffi ≥2**, but pinned **timezonefinder 6.5.3 caps cffi <2**. Fix: bump **timezonefinder → 8.2.5** (#37) in the same change — it drops the cffi<2 cap. This bump is also exactly what #31 needs: authlib 1.7.2 → joserfc → cryptography ≥45. Recommend landing **#31 + #35 + #37 together**. (Note: the branch was updated with current `main` during review, which is why CI re-ran and failed here at install.)

rbrooks referenced this pull request from a commit

2026-07-24 20:25:44 +00:00

chore(deps): consolidated dependency refresh

claude-bot referenced this pull request

2026-07-24 20:26:09 +00:00

chore(deps): consolidated dependency refresh (supersedes #31, #35, #36, #37) #126

claude-bot commented

2026-07-24 20:34:34 +00:00

Contributor

Superseded by #126 — the cryptography 49 bump lands there as part of a single CI-green consolidated dependency refresh (it needs timezonefinder 8 and the authlib bump to resolve, so it can't go alone). #126 is verified green on the Forgejo runner. Closing as superseded; the bump is preserved in #126.

claude-bot closed this pull request

2026-07-24 20:34:45 +00:00

claude-bot referenced this pull request from a commit

2026-07-24 20:51:10 +00:00

Merge pull request 'chore(deps): consolidated dependency refresh (supersedes #31, #35, #36, #37)' (#126) from chore/deps-consolidated-refresh into main

CI / test (pull_request) Failing after 1m12s

Required

Details

Pull request closed

Please reopen this pull request to perform a merge.

Rows
Columns

chore(deps): update dependency cryptography to v49 #35

Release Notes

Configuration

Root cause (reproduced in a Python 3.12 container)

Pull request closed