Commit e956a6e
fix(deps): raise the cryptography floor past PYSEC-2026-3552
embodied-action-receipts floored cryptography at >=42.0.8.
PYSEC-2026-3552 is a Bleichenbacher oracle: PKCS#7 EnvelopedData
decryption exposes distinguishable errors. Fixed in 50.0.0, which cmcp
already requires, so this brings the example in line with the runtime it
demonstrates rather than ahead of it.
A floor raise, not a pin. pip already resolves higher today; what this
removes is a resolution that could legally pick a vulnerable version in
an example whose subject is cryptographic receipts.
demos vendors this directory as a submodule, so it follows from here.
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01XbDBXDWWvMFa7c2jGgyq9t1 parent 4d84592 commit e956a6e
1 file changed
Lines changed: 1 addition & 1 deletion
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
1 | | - | |
| 1 | + | |
2 | 2 | | |
0 commit comments