1 Commits
Author SHA1 Message Date
5e2fcea990 fix(anonymizer): bump cryptography to >=50.0.0 for GHSA-g6cj-pr64-35w5 (#2231)
* fix(anonymizer): bump cryptography to >=50.0.0 for GHSA-g6cj-pr64-35w5

GHSA-g6cj-pr64-35w5 (CVE-2026-69247) affects cryptography >=44.0.0,<50.0.0
and is first patched in 50.0.0. The <49.0.0 ceiling made presidio-anonymizer
and the patched release mutually exclusive, so downstream projects could not
take the fix without dropping presidio-anonymizer.

Same shape as #2143, resolved by #2144.

Fixes: #2229

* fix(anonymizer): synchronize cryptography 50 lockfile

Regenerate the lock with uv 0.11.6 for cryptography 50.0.1 while preserving the >=50.0.0,<51.0.0 constraint and all other package versions. Canonicalize mirror artifact locations against authoritative public metadata and retain the resolved exceptiongroup typing-extensions marker.

Remove only the PR-added changelog entry, preserving upstream release notes.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Copilot-Session: 827bfc85-5ab8-4ca3-b15c-21a897b0c0dd

---------

Co-authored-by: Sharon Hart <sharonh.dev@gmail.com>
Co-authored-by: Sharon Hart <shhart@microsoft.com>
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Copilot-Session: 827bfc85-5ab8-4ca3-b15c-21a897b0c0dd
2026-09-06 12:57:47 +03:00