build(deps): update dependency cryptography to v44 [security] (hotfix/7.5) - autoclosed
Metadata
Current evaluation
Renovate's cryptography 44.0.1 hotfix/7.5 update was autoclosed unmerged after prolonged inactivity; no review, CI result, or resolving commit was recorded.
Resolution: closed stale
Reason: Renovate autoclosed PR #5253 after roughly 596 days of inactivity, with no reviews, comments, CI runs, or merge commit recorded. The dependency bump was not delivered through this PR.
Evaluated by: mr-cal-bot
No scores available.
Issue body
This PR contains the following updates:
| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [cryptography](https://redirect.github.com/pyca/cryptography) ([changelog](https://cryptography.io/en/latest/changelog/)) | `==40.0.2` -> `==44.0.1` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) |
### GitHub Vulnerability Alerts
#### [CVE-2024-12797](https://redirect.github.com/pyca/cryptography/security/advisories/GHSA-79v4-65xg-pq4g)
pyca/cryptography's wheels include a statically linked copy of OpenSSL. The versions of OpenSSL included in cryptography 42.0.0-44.0.0 are vulnerable to a security issue. More details about the vulnerability itself can be found in https://openssl-library.org/news/secadv/20250211.txt.
If you are building cryptography source ("sdist") then you are responsible for upgrading your copy of OpenSSL. Only users installing from wheels built by the cryptography project (i.e., those distributed on PyPI) need to update their cryptography versions.
---
### Release Notes
<details>
<summary>pyca/cryptography (cryptography)</summary>
### [`v44.0.1`](https://redirect.github.com/pyca/cryptography/compare/44.0.0...44.0.1)
[Compare Source](https://redirect.github.com/pyca/cryptography/compare/44.0.0...44.0.1)
### [`v44.0.0`](https://redirect.github.com/pyca/cryptography/compare/43.0.3...44.0.0)
[Compare Source](https://redirect.github.com/pyca/cryptography/compare/43.0.3...44.0.0)
### [`v43.0.3`](https://redirect.github.com/pyca/cryptography/compare/43.0.1...43.0.3)
[Compare Source](https://redirect.github.com/pyca/cryptography/compare/43.0.1...43.0.3)
### [`v43.0.1`](https://redirect.github.com/pyca/cryptography/compare/43.0.0...43.0.1)
[Compare Source](https://redirect.github.com/pyca/cryptography/compare/43.0.0...43.0.1)
### [`v43.0.0`](https://redirect.github.com/pyca/cryptography/compare/42.0.8...43.0.0)
[Compare Source](https://redirect.github.com/pyca/cryptography/compare/42.0.8...43.0.0)
### [`v42.0.8`](https://redirect.github.com/pyca/cryptography/compare/42.0.7...42.0.8)
[Compare Source](https://redirect.github.com/pyca/cryptography/compare/42.0.7...42.0.8)
### [`v42.0.7`](https://redirect.github.com/pyca/cryptography/compare/42.0.6...42.0.7)
[Compare Source](https://redirect.github.com/pyca/cryptography/compare/42.0.6...42.0.7)
### [`v42.0.6`](https://redirect.github.com/pyca/cryptography/compare/42.0.5...42.0.6)
[Compare Source](https://redirect.github.com/pyca/cryptography/compare/42.0.5...42.0.6)
### [`v42.0.5`](https://redirect.github.com/pyca/cryptography/compare/42.0.4...42.0.5)
[Compare Source](https://redirect.github.com/pyca/cryptography/compare/42.0.4...42.0.5)
### [`v42.0.4`](https://redirect.github.com/pyca/cryptography/compare/42.0.3...42.0.4)
[Compare Source](https://redirect.github.com/pyca/cryptography/compare/42.0.3...42.0.4)
### [`v42.0.3`](https://redirect.github.com/pyca/cryptography/compare/42.0.2...42.0.3)
[Compare Source](https://redirect.github.com/pyca/cryptography/compare/42.0.2...42.0.3)
### [`v42.0.2`](https://redirect.github.com/pyca/cryptography/compare/42.0.1...42.0.2)
[Compare Source](https://redirect.github.com/pyca/cryptography/compare/42.0.1...42.0.2)
### [`v42.0.1`](https://redirect.github.com/pyca/cryptography/compare/42.0.0...42.0.1)
[Compare Source](https://redirect.github.com/pyca/cryptography/compare/42.0.0...42.0.1)
### [`v42.0.0`](https://redirect.github.com/pyca/cryptography/compare/41.0.7...42.0.0)
[Compare Source](https://redirect.github.com/pyca/cryptography/compare/41.0.7...42.0.0)
### [`v41.0.7`](https://redirect.github.com/pyca/cryptography/compare/41.0.6...41.0.7)
[Compare Source](https://redirect.github.com/pyca/cryptography/compare/41.0.6...41.0.7)
### [`v41.0.6`](https://redirect.github.com/pyca/cryptography/compare/41.0.5...41.0.6)
[Compare Source](https://redirect.github.com/pyca/cryptography/compare/41.0.5...41.0.6)
### [`v41.0.5`](https://redirect.github.com/pyca/cryptography/compare/41.0.4...41.0.5)
[Compare Source](https://redirect.github.com/pyca/cryptography/compare/41.0.4...41.0.5)
### [`v41.0.4`](https://redirect.github.com/pyca/cryptography/compare/41.0.3...41.0.4)
[Compare Source](https://redirect.github.com/pyca/cryptography/compare/41.0.3...41.0.4)
### [`v41.0.3`](https://redirect.github.com/pyca/cryptography/compare/41.0.2...41.0.3)
[Compare Source](https://redirect.github.com/pyca/cryptography/compare/41.0.2...41.0.3)
### [`v41.0.2`](https://redirect.github.com/pyca/cryptography/compare/41.0.1...41.0.2)
[Compare Source](https://redirect.github.com/pyca/cryptography/compare/41.0.1...41.0.2)
### [`v41.0.1`](https://redirect.github.com/pyca/cryptography/compare/41.0.0...41.0.1)
[Compare Source](https://redirect.github.com/pyca/cryptography/compare/41.0.0...41.0.1)
### [`v41.0.0`](https://redirect.github.com/pyca/cryptography/compare/40.0.2...41.0.0)
[Compare Source](https://redirect.github.com/pyca/cryptography/compare/40.0.2...41.0.0)
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "" in timezone Etc/UTC, Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/canonical/snapcraft).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xNjQuMSIsInVwZGF0ZWRJblZlciI6IjM5LjE2NC4xIiwidGFyZ2V0QnJhbmNoIjoiaG90Zml4LzcuNSIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=-->
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed stale | Renovate's cryptography 44.0.1 hotfix/7.5 update was autoclosed unmerged after prolonged inactivity; no review, CI result, or resolving commit was recorded. | |
| stealth/space-bunny-alpha | — | closed stale | Renovate autoclosed snapcraft#5253 without merging the cryptography 44.0.1 update for hotfix/7.5; no review, comments, CI results, or resolving commit were recorded. | |
| qwen/qwen3.6-35b-a3b | — | — | The dependency update pull request for cryptography v44 was autoclosed by Renovate without review or merge. No changes were applied. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | Renovate bot proposed updating cryptography to v44.1 to address CVE-2024-12797. The pull request was autoclosed without merging, indicating the security update was abandoned due to inactivity over 520 days. |
Update history
No update history recorded yet.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #2164 build(deps): update dependency cryptography to v44 [security] (hotfix/2.7) - autoclosed | charmcraft | closed | Renovate's cryptography 44.0.1 hotfix update was autoclosed unmerged after inactivity; no review, CI, or resolving commit was recorded. | |
| #2166 build(deps): update dependency cryptography to v44.0.1 [security] (hotfix/3.4) - autoclosed | charmcraft | closed | Renovate's cryptography 44.0.1 security bump for hotfix/3.4 was auto-closed unmerged after 598 days; no resolving commit or CI run was recorded. | |
| #5254 build(deps): update dependency cryptography to v44 [security] (hotfix/8.6) - autoclosed | snapcraft | closed | Renovate’s cryptography 44.0.1 security update for hotfix/8.6 was autoclosed unmerged after 588 days, with no review, CI result, or replacement recorded. | |
| #2569 build(deps): update dependency cryptography to v46 [security] (hotfix/4.0) - autoclosed | charmcraft | closed | Renovate autoclosed the unmerged hotfix/4.0 cryptography v44-to-v46 security update; no review or resolving commit was recorded. | |
| #2165 build(deps): update dependency cryptography to v44.0.1 [security] (hotfix/3.3) - autoclosed | charmcraft | closed | Renovate PR #2165 was autoclosed unmerged without CI or comments; cryptography 44.0.1 was later merged on main through #2189 (bba6a32e). | |
| #2163 build(deps): update dependency cryptography to v44.0.1 [security] (main) - autoclosed | charmcraft | closed | Renovate PR #2163 was autoclosed unmerged; the cryptography 44.0.1 update was instead merged through #2189 at commit bba6a32e. | |
| #2570 build(deps): update dependency cryptography to v46 [security] (hotfix/4.1) - autoclosed | charmcraft | closed | Autoclosed unmerged after 219 days; cryptography 46 later landed on main via #2583 (e66a25b5) and was advanced to 46.0.6 by #2617. | |
| #5011 build(deps): update dependency cryptography to v43 [security] (hotfix/7.5) - autoclosed | snapcraft | closed | Autoclosed unmerged on hotfix/7.5; the same cryptography 43.0.1 security update was merged to main in canonical/snapcraft#5010 via commit 31bec5200. | |
| #5286 build(deps): update dependency cryptography to v44 [security] (main) - autoclosed | snapcraft | closed | Cryptography 44.0.1 update was not merged; PR #5286 was autoclosed after @mr-cal redirected the update to #5290. | |
| #2568 build(deps): update dependency cryptography to v46 [security] (hotfix/3.5) | charmcraft | closed | Cryptography v46 update for hotfix/3.5 was closed unmerged after 219 days without activity or approval; five CI checks failed. The equivalent main-branch update later merged in #2583. |