Bump cryptography from 46.0.6 to 46.0.7

[dependabot]

Bumps cryptography from 46.0.6 to 46.0.7.

Changelog

Sourced from cryptography's changelog.

46.0.7 - 2026-04-07

* **SECURITY ISSUE**: Fixed an issue where non-contiguous buffers could be
  passed to APIs that accept Python buffers, which could lead to buffer
  overflow. **CVE-2026-39892**
* Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.5.6.
.. _v46-0-6:

Commits

• 622d672 46.0.7 release (#14602)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[senzingdevops]

Automated: approving this pull request because it includes a patch update

[github-actions]

🤖 Claude Code Review

Code Review

PR Summary: Bumps cryptography from 46.0.6 to 46.0.7 in pyproject.toml.

---

Code Quality

• ✅ Style guide: Single-line version bump, no style concerns.
• ✅ No commented-out code
• ✅ Meaningful variable names: N/A
• ✅ DRY principle: N/A
• ✅ Defects: No logic changes; dependency bump only. No bugs introduced.
• ✅ CLAUDE.md: No issues.

Testing

• ✅ Unit/integration tests: No code changes requiring new tests.
• ✅ Coverage: N/A

Documentation

• ✅ README: No update needed for a dependency bump.
• ✅ API docs: N/A
• ✅ Inline comments: N/A
• ❌ CHANGELOG.md: No changelog entry for this dependency update. Depending on project policy, dependency bumps (especially security patches) should be noted.

Security

• ✅ No hardcoded credentials
• ✅ No sensitive data
• ✅ No license files
• ✅ Security note: cryptography 46.0.7 is a patch release — likely a security or bug fix. This is a recommended upgrade.

---

Verdict: Approved with minor note. The missing CHANGELOG entry is the only gap, and whether it's required depends on project policy. The bump itself is clean and appropriate.

Automated code review analyzing defects and coding standards