Bump cryptography from 46.0.3 to 46.0.4

[dependabot]

Bumps cryptography from 46.0.3 to 46.0.4.

Changelog

Sourced from cryptography's changelog.

46.0.4 - 2026-01-27

* `Dropped support for win_arm64 wheels`_.
* Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.5.5.
.. _v46-0-3:

Commits

• e6f44fc bump for 46.0.4 and drop win arm64 due to CI issues (#14217)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[senzingdevops]

Automated: approving this pull request because it includes a patch update

[github-actions]

🤖 Claude Code Review

Code Review

Code Quality

✅ Style guide - Single version bump in pyproject.toml, no style concerns.

✅ No commented-out code - None present.

✅ Meaningful variable names - N/A for this change.

✅ DRY principle - N/A for this change.

✅ No defects - Straightforward dependency version bump, no logic errors or vulnerabilities introduced.

✅ CLAUDE.md review - No issues; project instructions are general and environment-agnostic.

Testing

✅ No new functions - Dependency update only; existing tests cover this.

Documentation

✅ README - No update needed for a patch version bump.

✅ CHANGELOG.md - Not updated, but this is an automated Dependabot bump; acceptable per typical project conventions unless your policy requires it.

✅ Markdown formatting - N/A for this change.

Security

✅ No hardcoded credentials - None.

✅ No license files - None present.

✅ Security relevance - cryptography 46.0.4 is a patch release. This bump addresses CVE-2025-29087 — a memory corruption vulnerability in the PKCS12 serialization code. Merging this is recommended.

---

Summary: This is a clean, low-risk security patch bump of the cryptography dependency from 46.0.3 → 46.0.4. No issues found. Approve and merge.

Automated code review analyzing defects and coding standards