Skip to content

Bump cryptography from 46.0.5 to 46.0.6#533

Merged
BigSpaceships merged 1 commit intodevelopfrom
dependabot/pip/cryptography-46.0.6
Mar 30, 2026
Merged

Bump cryptography from 46.0.5 to 46.0.6#533
BigSpaceships merged 1 commit intodevelopfrom
dependabot/pip/cryptography-46.0.6

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 29, 2026 •
edited
Loading

Bumps cryptography from 46.0.5 to 46.0.6.

Changelog

Sourced from cryptography's changelog.

46.0.6 - 2026-03-25


* **SECURITY ISSUE**: Fixed a bug where name constraints were not applied
  to peer names during verification when the leaf certificate contains a
  wildcard DNS SAN. Ordinary X.509 topologies are not affected by this bug,
  including those used by the Web PKI. Credit to **Oleh Konko (1seal)** for
  reporting the issue. **CVE-2026-34073**

.. _v46-0-5:

Commits

@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Mar 29, 2026
@BigSpaceships
Copy link
Copy Markdown
Contributor

BigSpaceships commented Mar 30, 2026

@dependabot rebase

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Mar 30, 2026

Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!

If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

@BigSpaceships
Copy link
Copy Markdown
Contributor

BigSpaceships commented Mar 30, 2026

@dependabot recreate

@dependabot
Bump cryptography from 46.0.5 to 46.0.6
b4dcaa3 
Bumps [cryptography](https://github.com/pyca/cryptography) from 46.0.5 to 46.0.6.
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@46.0.5...46.0.6)

---
updated-dependencies:
- dependency-name: cryptography
  dependency-version: 46.0.6
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/pip/cryptography-46.0.6 branch from 256953e to b4dcaa3 Compare March 30, 2026 01:50
BigSpaceships
BigSpaceships approved these changes Mar 30, 2026
View reviewed changes
Copy link
Copy Markdown
Contributor

@BigSpaceships BigSpaceships left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It works

@BigSpaceships BigSpaceships merged commit 05a839c into develop Mar 30, 2026
3 checks passed
@dependabot dependabot bot deleted the dependabot/pip/cryptography-46.0.6 branch March 30, 2026 02:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@BigSpaceships BigSpaceships BigSpaceships approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@BigSpaceships