build(deps): bump cryptography from 46.0.5 to 46.0.6 in /tests by dependabot[bot] · Pull Request #12489 · espressif/arduino-esp32

dependabot · 2026-03-29T02:20:22Z

Bumps cryptography from 46.0.5 to 46.0.6.

Changelog

Sourced from cryptography's changelog.

46.0.6 - 2026-03-25

* **SECURITY ISSUE**: Fixed a bug where name constraints were not applied to peer names during verification when the leaf certificate contains a wildcard DNS SAN. Ordinary X.509 topologies are not affected by this bug, including those used by the Web PKI. Credit to **Oleh Konko (1seal)** for reporting the issue. **CVE-2026-34073**

.. _v46-0-5:

Commits

91d7288 Cherry-pick #14542 (#14543)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [cryptography](https://github.com/pyca/cryptography) from 46.0.5 to 46.0.6. - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](pyca/cryptography@46.0.5...46.0.6) --- updated-dependencies: - dependency-name: cryptography dependency-version: 46.0.6 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

CLAassistant · 2026-03-29T02:20:29Z

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}

github-actions · 2026-03-29T02:42:05Z

Test Results

101 files 101 suites 43m 8s ⏱️
95 tests 92 ✅ 0 💤 3 ❌
803 runs 790 ✅ 0 💤 13 ❌

For more details on these failures, see this check.

Results for commit 1a82175.

♻️ This comment has been updated with latest results.

* Fixed USB-CDC menu entry for codecell C3, so default is enabled and other option is 'disabled' (espressif#12477) * feat(board): Add ozobot circuit kit board (espressif#12465) Co-authored-by: ondrap <pilat.ondrej@seznam.cz> * IDF v5.5.4 (espressif#12493) * fix(usb): Fix typo CFG_TUD_ENDOINT > CFG_TUD_ENDPOINT * IDF v5.5.4 73550728 * ci: update dangerjs permissions to contents: read (espressif#12491) * feat(spi): Set power channel on ESP32P4 (espressif#12079) * feat(spi): Set power channel on ESP32P4 * moved changes from SPI.cpp to esp32-hal-spi.c * Check all 10 of the pins on LDO4 * make setLDO function static * ci(pre-commit): Apply automatic fixes --------- Co-authored-by: Jan Procházka <90197375+P-R-O-C-H-Y@users.noreply.github.com> Co-authored-by: Lucas Saavedra Vaz <32426024+lucasssvaz@users.noreply.github.com> Co-authored-by: pre-commit-ci-lite[bot] <117423508+pre-commit-ci-lite[bot]@users.noreply.github.com> * feat(USB): Add support for USB Audio (espressif#12466) * feat(USB): Add support for USB Audio * fix(build): Fix syntax errors * fix(build) Fix CoPilot suggestions * fix(build): Update libraries/USB/src/USBAudioCard.h Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> * fix(build): Implement suggestions and CMakeLists.txt * feat(uac): Add UAC1 descriptors * fix(uac): Fix warnings treated as errors * feat(uac): Add UAC2 descriptors * feat(uac): Update example * feat(uac): Add some comments to explain how the example works * feat(uac): Add documentation to the USBAudioCard class * fix(uac): Apply Copilot suggestions * feat(uac): Clarify chip usage in the example * feat(uac): Add volume handling for all channels * feat(uac): Also handle channels mute * ci(pre-commit): Apply automatic fixes * fix(uac): Revert changes to descriptors by CI * fix(ci): Add USBAudioCardDescriptors.h to pre-commit config --------- Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> Co-authored-by: pre-commit-ci-lite[bot] <117423508+pre-commit-ci-lite[bot]@users.noreply.github.com> * fix(bounty): Provide fixes for reported bugbounty (espressif#12486) * build(deps): bump cryptography from 46.0.5 to 46.0.6 in /tests (espressif#12489) Bumps [cryptography](https://github.com/pyca/cryptography) from 46.0.5 to 46.0.6. - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](pyca/cryptography@46.0.5...46.0.6) --- updated-dependencies: - dependency-name: cryptography dependency-version: 46.0.6 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: Mark Moore <mark@moore.dk> Co-authored-by: opilat <ondrej.pilat@ozobot.com> Co-authored-by: ondrap <pilat.ondrej@seznam.cz> Co-authored-by: Me No Dev <me-no-dev@users.noreply.github.com> Co-authored-by: Tomas Sebestik <tomas.sebestik@espressif.com> Co-authored-by: lbernstone <lbernstone@gmail.com> Co-authored-by: Jan Procházka <90197375+P-R-O-C-H-Y@users.noreply.github.com> Co-authored-by: Lucas Saavedra Vaz <32426024+lucasssvaz@users.noreply.github.com> Co-authored-by: pre-commit-ci-lite[bot] <117423508+pre-commit-ci-lite[bot]@users.noreply.github.com> Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Update CMakeLists.txt * Simplify requirements handling in CMakeLists.txt * Add espressif/usb component for ESP32 targets * Add cjson dependency to idf_component.yml * Add requirement for espressif/cjson in YAML * Add MQTT component version 1.0.0 to dependencies * Cleanup RainMaker dependencies from idf_component.yml Removed deprecated RainMaker components and their versions. * Delete libraries/ESP_SR directory * Delete libraries/Insights directory * Delete libraries/RainMaker directory * Delete libraries/TFLiteMicro directory * Remove unused libraries from CMakeLists.txt * Refactor USB handling to use new wrapper functions * Refactor SPI clock source handling and cleanup * Delete libraries/ESP_I2S directory * Remove ESP_I2S from CMakeLists.txt * Merge pull request #1 from pioarduino/mergev4 Mergev4 * Mergev4 (#2) * Fixed USB-CDC menu entry for codecell C3, so default is enabled and other option is 'disabled' (espressif#12477) * feat(board): Add ozobot circuit kit board (espressif#12465) Co-authored-by: ondrap <pilat.ondrej@seznam.cz> * IDF v5.5.4 (espressif#12493) * fix(usb): Fix typo CFG_TUD_ENDOINT > CFG_TUD_ENDPOINT * IDF v5.5.4 73550728 * ci: update dangerjs permissions to contents: read (espressif#12491) * feat(spi): Set power channel on ESP32P4 (espressif#12079) * feat(spi): Set power channel on ESP32P4 * moved changes from SPI.cpp to esp32-hal-spi.c * Check all 10 of the pins on LDO4 * make setLDO function static * ci(pre-commit): Apply automatic fixes --------- Co-authored-by: Jan Procházka <90197375+P-R-O-C-H-Y@users.noreply.github.com> Co-authored-by: Lucas Saavedra Vaz <32426024+lucasssvaz@users.noreply.github.com> Co-authored-by: pre-commit-ci-lite[bot] <117423508+pre-commit-ci-lite[bot]@users.noreply.github.com> * feat(USB): Add support for USB Audio (espressif#12466) * feat(USB): Add support for USB Audio * fix(build): Fix syntax errors * fix(build) Fix CoPilot suggestions * fix(build): Update libraries/USB/src/USBAudioCard.h Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> * fix(build): Implement suggestions and CMakeLists.txt * feat(uac): Add UAC1 descriptors * fix(uac): Fix warnings treated as errors * feat(uac): Add UAC2 descriptors * feat(uac): Update example * feat(uac): Add some comments to explain how the example works * feat(uac): Add documentation to the USBAudioCard class * fix(uac): Apply Copilot suggestions * feat(uac): Clarify chip usage in the example * feat(uac): Add volume handling for all channels * feat(uac): Also handle channels mute * ci(pre-commit): Apply automatic fixes * fix(uac): Revert changes to descriptors by CI * fix(ci): Add USBAudioCardDescriptors.h to pre-commit config --------- Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> Co-authored-by: pre-commit-ci-lite[bot] <117423508+pre-commit-ci-lite[bot]@users.noreply.github.com> * fix(bounty): Provide fixes for reported bugbounty (espressif#12486) * build(deps): bump cryptography from 46.0.5 to 46.0.6 in /tests (espressif#12489) Bumps [cryptography](https://github.com/pyca/cryptography) from 46.0.5 to 46.0.6. - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](pyca/cryptography@46.0.5...46.0.6) --- updated-dependencies: - dependency-name: cryptography dependency-version: 46.0.6 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: Mark Moore <mark@moore.dk> Co-authored-by: opilat <ondrej.pilat@ozobot.com> Co-authored-by: ondrap <pilat.ondrej@seznam.cz> Co-authored-by: Me No Dev <me-no-dev@users.noreply.github.com> Co-authored-by: Tomas Sebestik <tomas.sebestik@espressif.com> Co-authored-by: lbernstone <lbernstone@gmail.com> Co-authored-by: Jan Procházka <90197375+P-R-O-C-H-Y@users.noreply.github.com> Co-authored-by: Lucas Saavedra Vaz <32426024+lucasssvaz@users.noreply.github.com> Co-authored-by: pre-commit-ci-lite[bot] <117423508+pre-commit-ci-lite[bot]@users.noreply.github.com> Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: Mark Moore <mark@moore.dk> Co-authored-by: opilat <ondrej.pilat@ozobot.com> Co-authored-by: ondrap <pilat.ondrej@seznam.cz> Co-authored-by: Me No Dev <me-no-dev@users.noreply.github.com> Co-authored-by: Tomas Sebestik <tomas.sebestik@espressif.com> Co-authored-by: lbernstone <lbernstone@gmail.com> Co-authored-by: Jan Procházka <90197375+P-R-O-C-H-Y@users.noreply.github.com> Co-authored-by: Lucas Saavedra Vaz <32426024+lucasssvaz@users.noreply.github.com> Co-authored-by: pre-commit-ci-lite[bot] <117423508+pre-commit-ci-lite[bot]@users.noreply.github.com> Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Mar 29, 2026

dependabot Bot requested review from P-R-O-C-H-Y and lucasssvaz as code owners March 29, 2026 02:20

dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Mar 29, 2026

me-no-dev added the Status: Pending Merge Pull Request is ready to be merged label Apr 1, 2026

me-no-dev merged commit 08b2531 into master Apr 2, 2026
44 of 55 checks passed

me-no-dev deleted the dependabot/pip/tests/cryptography-46.0.6 branch April 2, 2026 09:57

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

build(deps): bump cryptography from 46.0.5 to 46.0.6 in /tests#12489

build(deps): bump cryptography from 46.0.5 to 46.0.6 in /tests#12489
me-no-dev merged 1 commit into
masterfrom
dependabot/pip/tests/cryptography-46.0.6

dependabot Bot commented on behalf of github Mar 29, 2026

Uh oh!

CLAassistant commented Mar 29, 2026

Uh oh!

github-actions Bot commented Mar 29, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

dependabot Bot commented on behalf of github Mar 29, 2026

Uh oh!

CLAassistant commented Mar 29, 2026

Uh oh!

github-actions Bot commented Mar 29, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Test Results

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

github-actions Bot commented Mar 29, 2026 •

edited

Loading