Skip to content

build(deps): bump cryptography from 46.0.6 to 46.0.7 in the uv group across 1 directory#22

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/uv/uv-3344959f9f
Open

build(deps): bump cryptography from 46.0.6 to 46.0.7 in the uv group across 1 directory#22
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/uv/uv-3344959f9f

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot bot commented on behalf of github Apr 8, 2026

Bumps the uv group with 1 update in the / directory: cryptography.

Updates cryptography from 46.0.6 to 46.0.7

Changelog

Sourced from cryptography's changelog.

46.0.7 - 2026-04-07


* **SECURITY ISSUE**: Fixed an issue where non-contiguous buffers could be
  passed to APIs that accept Python buffers, which could lead to buffer
  overflow. **CVE-2026-39892**
* Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.5.6.

.. _v46-0-6:

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps the uv group with 1 update in the / directory: [cryptography](https://github.com/pyca/cryptography).


Updates `cryptography` from 46.0.6 to 46.0.7
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@46.0.6...46.0.7)

---
updated-dependencies:
- dependency-name: cryptography
  dependency-version: 46.0.7
  dependency-type: indirect
  dependency-group: uv
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Apr 8, 2026
@github-actions
Copy link
Copy Markdown

github-actions bot commented Apr 8, 2026

⚠️MegaLinter analysis: Success with warnings

Descriptor Linter Files Fixed Errors Warnings Elapsed time
⚠️ COPYPASTE jscpd yes 2 no 0.98s
✅ JSON jsonlint 1 0 0 0.08s
✅ JSON prettier 1 0 0 0 0.24s
✅ JSON v8r 1 0 0 1.67s
✅ MARKDOWN rumdl 3 0 0 0 0.05s
✅ PYTHON ruff yes yes no no 0.03s
✅ PYTHON ruff-format yes yes no no 0.02s
✅ REPOSITORY git_diff yes no no 0.01s
⚠️ SPELL cspell yes 7 no 2.67s

Detailed Issues

⚠️ SPELL / cspell - 7 errors
CHANGELOG.md:15:54     - Unknown word (bfadeab)    -- install-action digest to bfadeab (#17) - [9dfbf23](https
	 Suggestions: [baeda, Baeda, bade, baden, blade]
CHANGELOG.md:16:21     - Unknown word (codspeedhq) -- - **(deps)** update codspeedhq/action digest to d8
	 Suggestions: []
README.md:44:5      - Unknown word (mypkg)      -- In `mypkg/__init__.py`, wire the
	 Suggestions: [mpeg, mybig, myBig, mypage, Mybig]
README.md:49:3      - Unknown word (getattr)    -- __getattr__, __dir__, __all__
	 Suggestions: [getter, gestate, guttate, getty, Getty]
README.md:55:3      - Unknown word (getattr)    -- __getattr__, __dir__, __all__
	 Suggestions: [getter, gestate, guttate, getty, Getty]
README.md:58:17     - Unknown word (mypkg)      -- In the sibling `mypkg/__init__.pyi`, declare
	 Suggestions: [mpeg, mybig, myBig, mypage, Mybig]
README.md:102:5     - Unknown word (etils)      -- - [`etils.epy.lazy_api_imports
	 Suggestions: [evils, utils, elis, tels, eblis]
CSpell: Files checked: 51, Issues found: 7 in 2 files.


You can skip this misspellings by defining the following .cspell.json file at the root of your repository
Of course, please correct real typos before :)

{
    "version": "0.2",
    "language": "en",
    "ignorePaths": [
        "**/node_modules/**",
        "**/vscode-extension/**",
        "**/.git/**",
        "**/.pnpm-lock.json",
        ".vscode",
        "package-lock.json",
        "megalinter-reports"
    ],
    "words": [
        "bfadeab",
        "codspeedhq",
        "etils",
        "getattr",
        "mypkg"
    ]
}


You can also copy-paste megalinter-reports/LINTER_DEFAULT at the root of your repository
⚠️ COPYPASTE / jscpd - 2 errors
Clone found (python):
 - tests/test_eager_import.py [41:4 - 54:4] (13 lines, 123 tokens)
   tests/test_eager_import.py [9:4 - 22:3]

Clone found (python):
 - tests/test_eager_import.py [60:2 - 72:30] (12 lines, 121 tokens)
   tests/test_eager_import.py [28:2 - 40:27]

┌────────┬────────────────┬─────────────┬──────────────┬──────────────┬──────────────────┬───────────────────┐
│ Format │ Files analyzed │ Total lines │ Total tokens │ Clones found │ Duplicated lines │ Duplicated tokens │
├────────┼────────────────┼─────────────┼──────────────┼──────────────┼──────────────────┼───────────────────┤
│ python │ 12             │ 637         │ 4817         │ 2            │ 25 (3.92%)       │ 244 (5.07%)       │
├────────┼────────────────┼─────────────┼──────────────┼──────────────┼──────────────────┼───────────────────┤
│ Total: │ 12             │ 637         │ 4817         │ 2            │ 25 (3.92%)       │ 244 (5.07%)       │
└────────┴────────────────┴─────────────┴──────────────┴──────────────┴──────────────────┴───────────────────┘
Found 2 clones.
HTML report saved to megalinter-reports/copy-paste/html/
ERROR: jscpd found too many duplicates (3.92%) over threshold (0%)
Error: ERROR: jscpd found too many duplicates (3.92%) over threshold (0%)
    at ThresholdReporter.report (/node-deps/node_modules/@jscpd/finder/dist/index.js:615:13)
    at /node-deps/node_modules/@jscpd/finder/dist/index.js:109:18
    at Array.forEach (<anonymous>)
    at /node-deps/node_modules/@jscpd/finder/dist/index.js:108:22
    at async /node-deps/node_modules/jscpd/dist/bin/jscpd.js:9:5

See detailed reports in MegaLinter artifacts

MegaLinter is graciously provided by OX Security
Show us your support by starring ⭐ the repository

@codecov
Copy link
Copy Markdown

codecov bot commented Apr 8, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 88.95%. Comparing base (82e3494) to head (1cd0f2d).
✅ All tests successful. No failed tests found.

Additional details and impacted files
@@           Coverage Diff           @@
##             main      #22   +/-   ##
=======================================
  Coverage   88.95%   88.95%           
=======================================
  Files           6        6           
  Lines         181      181           
  Branches       23       23           
=======================================
  Hits          161      161           
  Misses         14       14           
  Partials        6        6           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@read-the-docs-community
Copy link
Copy Markdown

Documentation build overview

📚 liblaf-lazy-loader | 🛠️ Build #32176449 | 📁 Comparing 1cd0f2d against latest (82e3494)

  🔍 Preview build  

Show files changed (2 files in total): 📝 2 modified | ➕ 0 added | ➖ 0 deleted
File Status
404.html 📝 modified
reference/index.html 📝 modified

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants