Bump cryptography from 46.0.3 to 46.0.4

[dependabot]

Bumps cryptography from 46.0.3 to 46.0.4.

Changelog

Sourced from cryptography's changelog.

46.0.4 - 2026-01-27

* `Dropped support for win_arm64 wheels`_.
* Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.5.5.
.. _v46-0-3:

Commits

• e6f44fc bump for 46.0.4 and drop win arm64 due to CI issues (#14217)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[senzingdevops]

Automated: approving this pull request because it includes a patch update

[github-actions]

🤖 Claude Code Review

PR Code Review

This PR bumps cryptography from 46.0.3 to 46.0.4 in pyproject.toml.

---

Code Quality

• ✅ Style guide: Single-line change in a config file, no style concerns.
• ✅ No commented-out code: N/A
• ✅ Meaningful variable names: N/A
• ✅ DRY principle: N/A
• ✅ Defects/bugs: No logic changes; this is a dependency version bump. 46.0.4 is a patch release addressing a security vulnerability (CVE), which is the expected motivation for this kind of bump.
• ✅ CLAUDE.md: No issues with the project configuration file.

Testing

• ✅ No new code introduced; existing tests cover the dependency surface.

Documentation

• ❌ CHANGELOG.md: Not updated. Dependency bumps — especially security-related ones — should be noted in the changelog.

Security

• ✅ No hardcoded credentials: N/A
• ✅ Input validation: N/A
• ✅ Error handling: N/A
• ✅ No sensitive data: N/A
• ✅ No license files: N/A
• ✅ Security posture improved: The cryptography library patch 46.0.4 fixes CVE-2025-29087, making this bump a positive security change.

---

Summary

This is a straightforward, low-risk security patch bump. The only actionable item is updating CHANGELOG.md to document the dependency update.

Automated code review analyzing defects and coding standards