From 5dd2ad532b135963868f5eb4ef068026f5e6346d Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 8 Apr 2026 22:39:24 +0000 Subject: [PATCH 1/2] chore(deps): bump cryptography from 46.0.6 to 46.0.7 Bumps [cryptography](https://github.com/pyca/cryptography) from 46.0.6 to 46.0.7. - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](https://github.com/pyca/cryptography/compare/46.0.6...46.0.7) --- updated-dependencies: - dependency-name: cryptography dependency-version: 46.0.7 dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements.txt b/requirements.txt index ec800cd7e..f33fd73c2 100644 --- a/requirements.txt +++ b/requirements.txt @@ -8,7 +8,7 @@ ta-lib==0.6.8 technical==1.5.4 ccxt==4.5.47 -cryptography==46.0.6 +cryptography==46.0.7 aiohttp==3.13.5 SQLAlchemy==2.0.48 python-telegram-bot==22.7 From 85ce0a18408cc1191abb9040aad86576b93fb010 Mon Sep 17 00:00:00 2001 From: Matthias Date: Thu, 9 Apr 2026 19:21:21 +0200 Subject: [PATCH 2/2] chore: allow cryptography security upgrades --- pyproject.toml | 1 + 1 file changed, 1 insertion(+) diff --git a/pyproject.toml b/pyproject.toml index fd23460bb..b62878fad 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -222,6 +222,7 @@ exclude-newer = "1 week" [tool.uv.exclude-newer-package] ccxt = false +cryptography = "1 days" [tool.ruff] line-length = 100