build(deps): bump cryptography
Metadata
Current evaluation
Merged in #1098 via commit 239b3af7, updating cryptography 48.0.0 to 49.0.0 to resolve OSV GHSA-537c-gmf6-5ccf.
Resolution: closed resolved
Reason: PR #1098 was approved and merged as commit 239b3af7, applying the security dependency update from cryptography v48.0.0 to v49.0.0.
Evaluated by: mr-cal-bot
No scores available.
Issue body
- [x] Have you followed the guidelines for contributing?
- [x] Have you signed the [CLA](http://www.ubuntu.com/legal/contributors/)?
- [ ] Have you successfully run `make lint && make test`?
- [ ] Have you added an entry to the changelog (`docs/reference/changelog.rst`)?
---
Resolves an [OSV](https://osv.dev/vulnerability/GHSA-537c-gmf6-5ccf)
```
❯ uv lock -P cryptography
Resolved 151 packages in 2.53s
Updated cryptography v48.0.0 -> v49.0.0
```
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed resolved | Merged in #1098 via commit 239b3af7, updating cryptography 48.0.0 to 49.0.0 to resolve OSV GHSA-537c-gmf6-5ccf. | |
| stealth/space-bunny-alpha | — | closed resolved | Merged #1098 via commit 239b3af7, updating cryptography from 48.0.0 to 49.0.0 to remediate OSV GHSA-537c-gmf6-5ccf. | |
| stealth/space-bunny-alpha | — | closed resolved | Merged #1098, bumping cryptography from v48.0.0 to v49.0.0 to resolve OSV vulnerability GHSA-537c-gmf6-5ccf. | |
| qwen/qwen3.6-35b-a3b | — | — | Bumps cryptography from v48.0.0 to v49.0.0 to resolve OSV vulnerability GHSA-537c-gmf6-5ccf. Approved by two reviewers, passed CI checks, and successfully merged. |
Update history
No update history recorded yet.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #356 build(deps): bump cryptography | craft-store | merged | Merged PR #356 as commit fcbad5c, bumping cryptography to remediate OSV GHSA-p423-j2cm-9vmq. | |
| #6135 build(deps): bump cryptography from 46.0.5 to 46.0.6 | snapcraft | merged | Merged #6135 as commit 1acb182bf, bumping cryptography 46.0.5 to 46.0.6 to fix CVE-2026-34073. | |
| #1061 build(deps): bump cryptography | craft-application | merged | Merged PR #1061 in commit 4b0e00ae, bumping cryptography to remediate an OSV; two approvals and all reported CI checks passed. | |
| #6029 build(deps): bump cryptography from 46.0.3 to 46.0.5 | snapcraft | merged | Merged as edb2a7453, updating cryptography from 46.0.3 to 46.0.5 to address CVE-2026-26007 and related security fixes. | |
| #1119 build(deps): bump cryptography from 40.0.2 to 41.0.0 | charmcraft | merged | Merged PR #1119 via commit 42365b41, upgrading cryptography from 40.0.2 to 41.0.0. | |
| #2162 build(deps-dev): bump cryptography from 44.0.0 to 44.0.1 | charmcraft | merged | Merged the cryptography development dependency from 44.0.0 to 44.0.1 in commit e055bf84. | |
| #1055 build(deps): bump cryptography | craft-application | merged | Merged PR #1055 (commit df46c84a) bumped the cryptography dependency to fix an OSV advisory, with 2 approvals and all CI checks passing; a later near-identical bump landed as #1061 (4b0e00ae). | |
| #6030 build(deps): bump cryptography from 46.0.3 to 46.0.5 | snapcraft | merged | Merged into hotfix/8.14 as 636b6cfaf, bumping cryptography 46.0.3 to 46.0.5 to address an OSV hotfix. | |
| #1163 build(deps): bump cryptography from 41.0.0 to 41.0.2 | charmcraft | closed | Closed unmerged as redundant; cryptography 41.0.2 was applied by merged security PR #1164 in commit 6d9dd818. | |
| #1872 build(deps): update dependency cryptography to v43.0.1 [security] (hotfix/3.2) | charmcraft | merged | Renovate security bump of cryptography 43.0.0 -> 43.0.1 merged into hotfix/3.2 as commit a98a8b4f, fixing vulnerable bundled OpenSSL (GHSA-h4gh-qq45-vh27). Sibling bumps landed via #1870 (438cafe0) and #1871. |