build(deps): bump cryptography
Metadata
Current evaluation
Merged PR #356 as commit fcbad5c, bumping cryptography to remediate OSV GHSA-p423-j2cm-9vmq.
Resolution: closed resolved
Reason: PR #356 was approved and merged into the project as commit fcbad5c, updating the cryptography dependency to address the cited OSV vulnerability.
Evaluated by: mr-cal-bot
No scores available.
Issue body
- [ ] Have you followed the guidelines for contributing?
- [ ] Have you signed the [CLA](http://www.ubuntu.com/legal/contributors/)?
- [ ] Have you successfully run `make lint && make test`?
-----
Fixes [an OSV](https://osv.dev/vulnerability/GHSA-p423-j2cm-9vmq)
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed resolved | Merged PR #356 as commit fcbad5c, bumping cryptography to remediate OSV GHSA-p423-j2cm-9vmq. | |
| stealth/space-bunny-alpha | — | closed superseded | Cryptography was bumped to remediate OSV GHSA-p423-j2cm-9vmq; #1055 was superseded by merged PR #1061 (4b0e00ae). | |
| stealth/space-bunny-alpha | — | closed resolved | Merged as 4b0e00ae, bumping cryptography to remediate GHSA-p423-j2cm-9vmq; approved by two reviewers. | |
| qwen/qwen3.6-35b-a3b | — | — | Merged to bump the cryptography dependency and resolve OSV vulnerability GHSA-p423-j2cm-9vmq. Approved by two reviewers and passed CI checks, with one Windows test failure noted. |
Update history
No update history recorded yet.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #1061 build(deps): bump cryptography | craft-application | merged | Merged PR #1061 in commit 4b0e00ae, bumping cryptography to remediate an OSV; two approvals and all reported CI checks passed. | |
| #1098 build(deps): bump cryptography | craft-application | merged | Merged in #1098 via commit 239b3af7, updating cryptography 48.0.0 to 49.0.0 to resolve OSV GHSA-537c-gmf6-5ccf. | |
| #1055 build(deps): bump cryptography | craft-application | merged | Merged PR #1055 (commit df46c84a) bumped the cryptography dependency to fix an OSV advisory, with 2 approvals and all CI checks passing; a later near-identical bump landed as #1061 (4b0e00ae). | |
| #1151 build(auto): bump cryptography | craft-application | merged | Merged PR #1151 as commit 4ff7e624, updating the cryptography dependency to resolve an OSV security vulnerability. | |
| #6135 build(deps): bump cryptography from 46.0.5 to 46.0.6 | snapcraft | merged | Merged #6135 as commit 1acb182bf, bumping cryptography 46.0.5 to 46.0.6 to fix CVE-2026-34073. | |
| #1003 build(auto): bump cryptography | craft-providers | merged | Merged PR #1003 bumps the cryptography dependency to remediate an OSV; both reviews approved and all CI, security, test, lint, and policy checks passed. | |
| #6307 build(deps): bump cryptography | snapcraft | merged | Merged as commit 1cba705c5: bumped the cryptography dependency to patch a CVE. Approved with lint/fast/minimum-dep tests and security scans passing; spread/publish job failures were unrelated to the bump. | |
| #418 build: bump cryptography for OSV | craft-store | merged | PR #418 (maintainer bepri) bumped the cryptography dependency in2 files (+56/-56) to clear an OSV vulnerability. Approved and merged as commit e8fef67, with the OSV-scanner security check passing. | |
| #6029 build(deps): bump cryptography from 46.0.3 to 46.0.5 | snapcraft | merged | Merged as edb2a7453, updating cryptography from 46.0.3 to 46.0.5 to address CVE-2026-26007 and related security fixes. | |
| #6030 build(deps): bump cryptography from 46.0.3 to 46.0.5 | snapcraft | merged | Merged into hotfix/8.14 as 636b6cfaf, bumping cryptography 46.0.3 to 46.0.5 to address an OSV hotfix. |