fix(deps): bump cryptography constraint to >=48.0.1 to match lockfile (#3666)

Dependabot security update #3620 bumped cryptography to 48.0.1 in uv.lock
but left the harness manifest at >=43.0.0, since the dependency lives in
the workspace member packages/harness, not backend/pyproject.toml. The
drift caused 'uv lock' to keep rewriting the recorded specifier. Align the
source constraint with the locked version.
This commit is contained in:
Zheng Feng 2026-06-20 18:36:52 +08:00 committed by GitHub
parent 90328d5651
commit cce794a124
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -36,7 +36,7 @@ dependencies = [
"sqlalchemy[asyncio]>=2.0,<3.0",
"aiosqlite>=0.19",
"alembic>=1.13",
"cryptography>=43.0.0",
"cryptography>=48.0.1",
]
[project.optional-dependencies]