build(deps): bump cryptography from 46.0.6 to 46.0.7
Metadata
Current evaluation
The Dependabot PR updating cryptography to 46.0.7 was closed without merging. After maintainer rebases, Dependabot confirmed it will skip future notifications for this release, effectively abandoning the pull request.
Suggested action: —
No scores available.
Issue body
Bumps [cryptography](https://github.com/pyca/cryptography) from 46.0.6 to 46.0.7.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst">cryptography's changelog</a>.</em></p>
<blockquote>
<p>46.0.7 - 2026-04-07</p>
<pre><code>
* **SECURITY ISSUE**: Fixed an issue where non-contiguous buffers could be
passed to APIs that accept Python buffers, which could lead to buffer
overflow. **CVE-2026-39892**
* Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.5.6.
<p>.. _v46-0-6:<br />
</code></pre></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/pyca/cryptography/commit/622d672e429a7cff836a23c5903683dbec1901f5"><code>622d672</code></a> 46.0.7 release (<a href="https://redirect.github.com/pyca/cryptography/issues/14602">#14602</a>)</li>
<li>See full diff in <a href="https://github.com/pyca/cryptography/compare/46.0.6...46.0.7">compare view</a></li>
</ul>
</details>
<br />
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| qwen/qwen3.6-35b-a3b | — | — | The Dependabot PR updating cryptography to 46.0.7 was closed without merging. After maintainer rebases, Dependabot confirmed it will skip future notifications for this release, effectively abandoning the pull request. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | The dependency update was closed and abandoned after maintainer rebases. Dependabot confirmed it will no longer notify about this release, indicating the cryptography bump to 46.0.7 was not merged and remains unapplied. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | Dependabot PR updating cryptography to 46.0.7 was closed without merging. After maintainer rebasing requests, the bot stopped notifications for this release, indicating the update was superseded or abandoned. |
Update history
No update history recorded yet.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #2609 build(deps): bump cryptography from 45.0.4 to 46.0.5 in /tests/spread/ubuntu-26.04/test-cmd | charmcraft | closed | Closed without merging. The Dependabot update for cryptography to 46.0.5 failed CI checks and received no review. Dependabot acknowledged the closure and will skip further notifications for this release. | |
| #2587 build(deps): bump cryptography from 45.0.4 to 46.0.5 in /tests/spread/ubuntu-24.04/test-cmd | charmcraft | closed | The cryptography dependency bump from 45.0.4 to 46.0.5 was closed without being merged. Dependabot confirmed it will stop notifying about this release, indicating the update was abandoned or superseded. | |
| #2613 build(deps): bump cryptography from 45.0.4 to 46.0.5 in /tests/spread/ubuntu-25.10/test-cmd | charmcraft | closed | Automated cryptography update to 46.0.5 was closed without merging. Maintainers ignored the request, prompting Dependabot to stop notifications for this release. Multiple CI checks failed and no approvals were received. | |
| #2639 build(deps): bump cryptography from 45.0.4 to 46.0.6 in /tests/spread/ubuntu-24.04/test-cmd | charmcraft | closed | Dependabot PR updating cryptography to 46.0.6 was closed without merging. CI failed on several Ubuntu versions and typechecking. The bot confirmed it would stop notifying about this release, indicating the update was abandoned. | |
| #4599 build(deps): bump cryptography from 42.0.2 to 42.0.4 | snapcraft | closed | Dependabot update for cryptography to 42.0.4 was closed after manual recreation. Dependabot confirmed the dependency is already current, making the PR unnecessary. The update was abandoned without merging. | |
| #1395 build(deps): bump cryptography from 41.0.4 to 41.0.6 | charmcraft | closed | Closed without merging. Dependabot automatically closed the update because the cryptography dependency was already at the latest version, making the PR redundant. | |
| #1018 build(deps): bump cryptography from 3.4.8 to 39.0.1 | charmcraft | closed | Dependabot PR to update cryptography from 3.4.8 to 39.0.1 was closed without merging. A maintainer explicitly closed it via the @dependabot close command, rejecting the major version upgrade. | |
| #4280 build(deps): bump cryptography from 41.0.0 to 41.0.2 | snapcraft | closed | Dependabot PR updating cryptography from 41.0.0 to 41.0.2 was approved and passed CI but closed and superseded by pull request #4301. | |
| #2640 build(deps): bump cryptography from 45.0.4 to 46.0.6 in /tests/spread/ubuntu-26.04/test-cmd | charmcraft | closed | Closed after maintainer @lengau ran @dependabot recreate. The bot deferred updates to a future release. CI failures on snap tests and typechecking blocked merging. Dependabot closed the PR to await a newer version. | |
| #4563 build(deps): bump cryptography from 41.0.7 to 42.0.0 | snapcraft | closed | Dependabot update to bump cryptography from 41.0.7 to 42.0.0 was closed and superseded by PR #4564. CI tests passed with maintained coverage. |