chore(deps): bump cryptography from 48.0.1 to 50.0.0 in /envs/wildfire_env

[dependabot]

Bumps cryptography from 48.0.1 to 50.0.0.

Changelog

Sourced from cryptography's changelog.

50.0.0 - 2026-07-31

* **SECURITY ISSUE**:
  :func:`~cryptography.hazmat.primitives.serialization.pkcs7.pkcs7_decrypt_der`
  and its PEM and S/MIME variants no longer expose distinguishable errors or
  timing when unwrapping a ``RecipientInfo``'s ``encryptedKey``, which could
  act as a Bleichenbacher oracle for callers that decrypt untrusted messages.
  A random key is now substituted on failure, as described in :rfc:`3218`.
  Credit to **@X1AOxiang** for reporting the issue. **CVE-2026-69247**
* Deprecated Diffie-Hellman key exchange over finite fields (FFDH).
  Everything FFDH is deprecated, including the types in
  ``cryptography.hazmat.primitives.asymmetric.dh`` and loading FFDH keys or
  parameters with the key loading APIs. Users should migrate to a more
  modern key exchange algorithm.
* Added ``xof()`` class methods to
  :class:`~cryptography.hazmat.primitives.hashes.SHAKE128` and
  :class:`~cryptography.hazmat.primitives.hashes.SHAKE256` for constructing
  algorithm instances configured for use with
  :class:`~cryptography.hazmat.primitives.hashes.XOFHash`.
* The :mod:`X.509 verification <cryptography.x509.verification>` APIs are now
  considered stable and are subject to our API stability policy.
* Added the :doc:`/cobblestone` recipe, an implementation of the
  Cobblestone-128 and Cobblestone-256 instantiations of the `C2SP
  chunked-encryption specification
  <https://c2sp.org/chunked-encryption>`_ for streaming authenticated
  encryption of large messages.
* Parsing a Signed Certificate Timestamp list now rejects encodings that
  carry trailing bytes after the list or after an individual SCT, instead of
  silently ignoring them.
* Added support for using :class:`~cryptography.x509.Name` as a field type in
  the :doc:`/hazmat/asn1/index` module.
* Loading a public key or an EC private key now rejects DER where the
  ``subjectPublicKey`` (or EC ``publicKey``) ``BIT STRING`` declares a non-zero
  number of unused bits, instead of silently ignoring it.
* Parsing a CRL entry's ``InvalidityDate`` extension now rejects a
  ``GeneralizedTime`` that carries fractional seconds or another non-DER form,
  matching the strict encoding already required for every other X.509 time
  field.
* :func:`~cryptography.x509.ocsp.load_der_ocsp_request` and
  :func:`~cryptography.x509.ocsp.load_der_ocsp_response` now reject a request
  or response whose ``version`` field is not ``v1``, the only version defined
  by RFC 6960, matching the version validation already performed when loading
  certificates, CSRs and CRLs.
* :class:`~cryptography.hazmat.primitives.hashes.XOFHash` is now supported
  when building against AWS-LC.
* HMAC (and therefore PBKDF2-HMAC) with SHA-3 hashes is now supported when
  building against AWS-LC.
* Diffie-Hellman (:doc:`/hazmat/primitives/asymmetric/dh`) is now supported
  when building against AWS-LC.
</tr></table> 

... (truncated)

Commits

• dcb7050 Prepare for 50.0.0 release (#15372)
• 53fccd9 Don't leak how PKCS#7 encryptedKey decryption failed (#15369)
• d472f97 Add from __future__ import annotations to all src/ Python files (#15371)
• 908773d Bump downstream dependencies in CI (#15368)
• 2cc07cc Bump BoringSSL, OpenSSL, AWS-LC in CI (#15367)
• c94ede9 chore(deps): bump ruff from 0.16.0 to 0.16.1 (#15366)
• 67a8308 chore(deps): bump virtualenv from 21.7.0 to 21.7.1 (#15365)
• 95018ff Release the GIL in one-shot AEAD encrypt/decrypt (#15361)
• 6954733 Release the GIL during DH and DSA parameter generation (#15364)
• 6893b94 Import _serialization instead of serialization in x509/extensions (#15363)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

---

Note

Medium Risk
Major-version crypto library upgrade with a published CVE fix; impact is indirect via transitive deps only, but crypto changes warrant smoke-testing the wildfire env install/runtime.

Overview
Updates envs/wildfire_env/uv.lock so the resolved cryptography package moves from 48.0.1 to 50.0.0 (transitive via packages such as authlib and secretstorage). No pyproject.toml or application source changes.

The lock refresh also adjusts several unrelated dependency edge markers in the same file (e.g. contourpy, ipython, pandas, pexpect)—typical uv lock churn, not functional wildfire-env code changes.

50.0.0 includes a security fix for PKCS#7 decryption (CVE-2026-69247) and tighter parsing/validation in X.509 and related APIs; review release notes if anything in the env decrypts untrusted PKCS#7 or relies on previously lenient DER behavior.

^{Reviewed by Cursor Bugbot for commit 3096b4e. Bugbot is set up for automated code reviews on this repo. Configure here.}

[bot-ci-comment]

The docs for this PR live here. All of your documentation changes will be reflected on that endpoint. The docs are available until 30 days after the last update.

[cursor]

Alignment Review Report

PR #1063 — chore(deps): bump cryptography from 48.0.1 to 50.0.0 in /envs/wildfire_env (dependabot)

Scope: 1 file — envs/wildfire_env/uv.lock only (+84 / −87). No pyproject.toml, source, client, or server changes.

Automated Checks

• Lint: PASS (PR scope) — lint.sh scopes only src/ + tests/, and this PR changes a .lock file, so it introduces no lint-relevant edits. Running the hook's uv run ruff format … envs/ does surface pre-existing formatting drift, but exclusively in other envs (opencode_env, pi_env, chat_env, coding_tools_env, jupyter_env, repl_env, terminus_env, textarena_env, agent_world_model_env) and in Python snippets inside various env README.md files. None are in wildfire_env and none are attributable to this PR. (uv was not preinstalled in the review env; I installed it to run the hook.)
• Debug code: CLEAN (PR scope) — check-debug.sh reports print/TODO items, but all are pre-existing in src/ (docstrings, CLI console output, the manual test_local_docker_provider.py script). None introduced here.

Open RFCs Context

Current statuses in rfcs/: 000 project-phases In Review, 001 abstractions In Review, 002 env-spec In Review (+ pending protocol/security amendment), 003 mcp-support In Review, 004 rubrics (active, no Status field), 005 agentic-harnesses In Review, 010 echo-env-token-world-model Draft. None concern dependency management or a single env's lockfile — no overlap with this change.

Tier 1: Fixes Required

None. This is a lockfile-only, transitive dependency bump — cryptography is not a direct dependency of wildfire_env (pyproject.toml lists only openenv/fastapi/pydantic/uvicorn/requests); it is pulled in via secretstorage and the authlib/joserfc chain. The bump is a security update: cryptography 50.0.0 fixes CVE-2026-69247 (PKCS#7 decryption Bleichenbacher oracle).

Tier 2: Alignment Discussion

Principle Conflicts

None identified. No changes to the Gymnasium-style API, generics/Pydantic wire types, reward computation, or the client/server boundary (INVARIANTS.md) — the diff is purely resolved-dependency metadata.

RFC Conflicts

None identified.

Observations (non-blocking)

• Major-version jump (48 → 50, skips 49). cryptography 50.0.0 deprecates finite-field Diffie-Hellman (FFDH) and tightens X.509/DER parsing. Risk to wildfire_env is low since it doesn't use cryptography directly, but worth letting CI confirm the env still installs/builds.
• Incidental lock churn. Beyond the cryptography entry, the diff rewrites environment markers for several unrelated transitive packages (contourpy, ipython, ipython-pygments-lexers, pandas, pexpect, secretstorage). These are semantically-equivalent normalizations from dependabot's uv lock run, not functional changes.
• Only wildfire_env's lock is updated; dependabot files per-directory, so other envs still pinning 48.0.1 would need their own PRs.

Summary

• 0 mechanical issues to fix
• 0 alignment points for human review
• 0 RFC conflicts to discuss

Clean, security-motivated transitive dependency bump with no alignment concerns. Recommend confirming CI is green (lock resolves + env builds) before merge.

  

_{Sent by Cursor Automation: Pre-review}

[cursor]

Security-motivated bump: cryptography 50.0.0 fixes CVE-2026-69247 (PKCS#7 decryption Bleichenbacher oracle). It's a transitive dependency here (via secretstorage and the authlib/joserfc chain), so wildfire_env's own code isn't directly affected.

One caution: this skips a major version (48 → 50). 50.0.0 deprecates finite-field Diffie-Hellman (FFDH) and tightens X.509/DER parsing — low risk for this env, but worth confirming CI still installs/builds it.

[cursor]

Alignment Review Report

PR #1063 — chore(deps): bump cryptography from 48.0.1 to 50.0.0 in /envs/wildfire_env (dependabot, native dependabot/uv/envs/…)

Scope: 1 file — envs/wildfire_env/uv.lock only (+84 / −87). No pyproject.toml, source, client, or server changes.

Automated Checks

• Lint: N/A → PASS (PR scope). The lint hook and CI only ruff check src/ + tests/; this PR changes a .lock file (TOML isn't linted at all). The hook's repo-wide ruff format … envs/ step exit-1's on ~26 pre-existing drift files in other envs (opencode_env, pi_env, chat_env, coding_tools_env, jupyter_env, repl_env, terminus_env, textarena_env, agent_world_model_env) plus Python snippets inside various env README.md files — none in wildfire_env, none attributable to this PR. (uv wasn't preinstalled in the review env; I installed it to run the real checks.)
• Debug code: CLEAN (PR scope). check-debug.sh scans src/ only; all print/TODO hits are pre-existing, none from this lock-only change.

Open RFCs Context

rfcs/ statuses: 000 In Review, 001 In Review, 002 In Review (+ pending Cloud-Sandbox amendment), 003 In Review, 004 rubrics (no status header), 005 agentic-harnesses In Review, 010 echo-env-token-world-model Draft. None cover dependency management / PyPI indexes / lockfiles → no overlap with this change.

Tier 1: Fixes Required

None. Verified this is a clean, transitive, security-motivated lock bump:

• Transitive dep. cryptography is pulled in via authlib 1.7.2 (deps: cryptography, joserfc) and secretstorage; it is not a direct dep of wildfire_env (pyproject.toml = openenv/fastapi/pydantic/uvicorn/requests). Lock-only with no pyproject floor bump is correct.
• Hashes real & consistent. PyPI cryptography 50.0.0: sdist sha256:eeac2acb… size 880201 matches uv.lock:786; wheels match; yanked: false; requires_python !=3.9.0,!=3.9.1,>=3.9 (satisfied by wildfire's >=3.10).
• uv lock --check --project envs/wildfire_env PASSES (156 packages resolved) — lock is consistent with pyproject.toml.
• Security-positive (strong). The replaced 48.0.1 carries 3 CVEs, all remediated by 50.0.0: CVE-2026-69247 (PKCS#7 decryption Bleichenbacher oracle, fixed in 50.0.0), CVE-2026-69248 and CVE-2026-69249 (both fixed in 49.0.0). 50.0.0 itself reports 0 known vulnerabilities.
• No uv side-effects. No index-source flip (0 HF-mirror refs at both base and head; 171 pypi.org/simple unchanged) and no lock-revision bump (revision = 3 at both base and head). The pypi.org/simple lines in the diff are just numpy marker de-duplication, not source flips.

Tier 2: Alignment Discussion

Principle Conflicts

None identified. No changes to the Gymnasium-style API, generics/Pydantic wire types, reward computation, or the client/server boundary (INVARIANTS.md) — purely resolved-dependency metadata.

RFC Conflicts

None identified.

Observations (non-blocking)

• Zero deploy impact. envs/wildfire_env/server/Dockerfile installs via pip install -e . (line 17), not uv sync --frozen, so this uv.lock is dev-only and isn't consumed in the container build.
• Incidental relock churn. Besides the cryptography entry, the diff normalizes environment markers for several unrelated transitive packages (contourpy, ipython, ipython-pygments-lexers, pandas, pexpect, secretstorage) — semantically-equivalent simplifications from dependabot's uv lock run, not functional changes.
• Major-version jump (48 → 50). 50.0.0 deprecates finite-field Diffie-Hellman (FFDH) and tightens X.509/DER parsing. Risk to wildfire_env is low (it doesn't use cryptography directly), but the validate-env-locks CI job (uv sync --frozen --dry-run) should confirm resolution.
• Dependabot process note (repo-wide, cc @burtenshaw). .github/dependabot.yml's uv updater sets exclude-paths: ["envs/**"], yet this native dependabot/uv/envs/wildfire_env/… PR still edits envs/ — the uv ecosystem isn't honoring exclude-paths (platform limitation; the codex/dependabot-envs-* aggregate roll-ups are the intended path). Not a defect in this PR.

Summary

• 0 mechanical issues to fix
• 0 alignment points for human review
• 0 RFC conflicts to discuss

Clean, security-positive (3 CVEs remediated), deploy-irrelevant transitive dependency bump — no alignment concerns. uv lock --check passes; recommend confirming validate-env-locks CI is green before merge.

  

_{Sent by Cursor Automation: Pre-review}

[cursor]

Verified against PyPI: cryptography 50.0.0 sdist sha256:eeac2acb… / size 880201 matches this lock, yanked: false, and it reports 0 known vulnerabilities.

This bump is security-positive — the replaced 48.0.1 carries 3 CVEs, all remediated here: CVE-2026-69247 (PKCS#7 decryption Bleichenbacher oracle, fixed in 50.0.0) plus CVE-2026-69248 and CVE-2026-69249 (fixed in 49.0.0).

cryptography is transitive here (via authlib / secretstorage), so wildfire_env's own code isn't directly affected. One caution: this skips a major (48 → 50) — 50.0.0 deprecates finite-field Diffie-Hellman (FFDH) and tightens X.509/DER parsing — low risk for this env; uv lock --check passes (156 pkgs resolved).

[burtenshaw]

Closing in favor of aggregate env Dependabot PR #1015.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.