[dependabot]

Bumps cryptography from 50.0.0 to 50.0.1.

Changelog

Sourced from cryptography's changelog.

50.0.1 - 2026-08-25

* Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 4.0.2.
.. _v50-0-0:

Commits

• ffde75a bump for 50.0.1 + changelog (#15520)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[senzingdevops]

Automated: approving this pull request because it includes a patch update

[github-actions]

🤖 Claude Code Review

PR Code Review

Scope: Single-line dependency bump in pyproject.toml — cryptography pinned from 50.0.0 to 50.0.1 (development dependency group). No application code changes.

Code Quality

• ✅ Style conventions — Diff is a version string change only; conforms to existing formatting in the development dependency list.
• ✅ No commented-out code
• ✅ Meaningful variable names — N/A, no code changes.
• ✅ DRY principle — N/A.
• ✅ Defects/bugs/security — No logic changes to review. cryptography 50.0.1 is a patch release; nothing in the diff indicates a breaking pin change. No way to verify changelog contents without network access, but a patch-version bump on a pinned dev dependency carries low risk.
• ✅ CLAUDE.md consideration — .claude/CLAUDE.md is generic project guidance (build/lint/architecture commands), contains no local-environment-specific details, and is unaffected by this change.

Testing

• N/A — no new functions, endpoints, or logic introduced. Existing CI (Python 3.10–3.13 matrix per CLAUDE.md) will validate the dependency resolves and installs correctly.

Documentation

• ✅ No README/API doc updates needed for a transitive dev-dependency patch bump.
• ⚠️ CHANGELOG.md — Not checked in this diff. If the project maintains a CHANGELOG for dependency bumps (many Dependabot-driven repos don't log these individually), confirm whether this entry is expected. Given the pattern of prior commits (Bump mypy..., Bump wheel..., Bump virtualenv... per git log — none appear to touch CHANGELOG.md), this is consistent with existing repo convention and likely fine as-is.

Security

• ✅ No hardcoded credentials
• ✅ Input validation — N/A
• ✅ Error handling — N/A
• ✅ No sensitive data in logs
• ✅ No .lic files or AQAAAD-prefixed license strings present in this diff.

Summary

This is a routine, low-risk Dependabot-style patch bump with no functional or security concerns. No blocking issues found.

Automated code review analyzing defects and coding standards