adam/orchestrator
Archived
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(deps): bump cryptography 46.0.7 -> 48.0.1 (GHSA-537c-gmf6-5ccf)

Browse source 
pip-audit flagged the 46.0.7 pin: wheels before 48.0.1 statically link a
vulnerable OpenSSL. 48.0.1 is the fix version.
This commit is contained in:
Adam Moussa 2026-06-24 18:16:47 -04:00
parent 265e32d9c9
commit ed6520ccfe
1 changed files with 2 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
requirements.txt
View file

@ -14,7 +14,8 @@ uvicorn==0.46.0
# (agent_team/github_app.py): RS256 JWT (PyJWT) signed with the App private key,
# exchanged for a short-lived installation token. cryptography backs RS256.
PyJWT==2.13.0
cryptography==46.0.7
# >=48.0.1: earlier wheels statically link a vulnerable OpenSSL (GHSA-537c-gmf6-5ccf).
cryptography==48.0.1
# Runtime HTTP client for the agent-team P3 App-dispatch seams
# (github_app.mint_installation_token, dispatcher.app_workflow_dispatcher,
# dispatcher.app_run_locator) and the CI fetcher/transport. Pinned first-class