fix(deps): patch cryptography/msgpack/PyJWT/urllib3 CVEs + drop Py3.9 from CI (CTO-4968/4990/4969/4807)#311

Merged

vedharish merged 11 commits into

mainfrom

security/enigma-dep-cve-bumps

Jul 14, 2026

Commits on Jul 14, 2026

fix(deps): bump cryptography, msgpack, PyJWT, urllib3 to patched versions

KrishnaSuravarapu
and
claude
committed
ci: drop Python 3.9 from test matrix

KrishnaSuravarapu
and
claude
committed
fix(deps): bump pyOpenSSL 26.0.0 -> 26.2.0 for cryptography 48 compat

KrishnaSuravarapu
and
claude
committed
Update unit-tests.yml
KrishnaSuravarapu
authored
fix(ci): setuptools for lint + align crypto stack for py3.12-3.14

KrishnaSuravarapu
and
claude
committed
fix(ci): pin setuptools<81 so pylama can import pkg_resources

KrishnaSuravarapu
and
claude
committed
fix(ci): run lint only on Python 3.12, not 3.13/3.14

KrishnaSuravarapu
and
claude
committed
chore(dev): upgrade test+lint toolchain for Python 3.12-3.14

KrishnaSuravarapu
and
claude
committed
fix(deps): bump packaging 21.3->24.2 and flake8 6.0.0->7.3.0

KrishnaSuravarapu
and
claude
committed
fix(ci): disable pylama pytest plugin (incompatible with pytest 9)

KrishnaSuravarapu
and
claude
committed
fix(deps): use pytest-bdd 7.3.0 instead of 8.x

KrishnaSuravarapu
and
claude
committed