From 72ab6bc437086b648c2c8a8472388d50511c73bd Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 5 Oct 2025 19:59:56 +0000
Subject: [PATCH 1/6] Bump CodSpeedHQ/action from 3 to 4 (#11460)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Bumps [CodSpeedHQ/action](https://github.com/codspeedhq/action) from 3
to 4.
Release notes
Sourced from CodSpeedHQ/action's
releases.
v4.0.0
💥 BREAKING
It's now required to explicitly set the runner mode to
instrumentation or walltime using either:
- the
mode argument
- or the
CODSPEED_RUNNER_MODE environment variable
[!TIP]
Before, this variable was automatically set to
instrumentation on every runner except for CodSpeed macro
runners where it was set to walltime by default.
Find more details in the instruments
documentation.
Details
🚀 Features
🐛 Bug Fixes
🏗️ Refactor
Full Runner Changelog: https://github.com/CodSpeedHQ/runner/blob/main/CHANGELOG.md
v3.8.1
What's Changed
🐛 Bug Fixes
🏗️ Refactor
- Improve conditional compilation in
get_pipe_open_options by @art049 in #100
⚙️ Internals
Full Changelog: https://github.com/CodSpeedHQ/action/compare/v3.8.0...v3.8.1
Full Runner Changelog: https://github.com/CodSpeedHQ/runner/blob/main/CHANGELOG.md
v3.8.0
What's Changed
... (truncated)
Commits
6eeb021
Release v4.0.0 🚀
74312da
chore: improve the release script
8a17a35
ci: add modes to the matrix
8e3f02a
feat: make the mode argument required
97c7a6f
chore: bump runner version to 4.0.0
8a4cadd
chore: point the changelog to the runner
- See full diff in compare
view
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
You can trigger a rebase of this PR by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
> **Note**
> Automatic rebases have been disabled on this pull request as it has
been open for over 30 days.
---------
Signed-off-by: dependabot[bot]
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: J. Nick Koston
Co-authored-by: J. Nick Koston
---
.github/workflows/ci-cd.yml | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/.github/workflows/ci-cd.yml b/.github/workflows/ci-cd.yml
index 0c403104ba9..fac12e52659 100644
--- a/.github/workflows/ci-cd.yml
+++ b/.github/workflows/ci-cd.yml
@@ -292,8 +292,9 @@ jobs:
- name: Install self
run: python -m pip install -e .
- name: Run benchmarks
- uses: CodSpeedHQ/action@v3
+ uses: CodSpeedHQ/action@v4
with:
+ mode: instrumentation
token: ${{ secrets.CODSPEED_TOKEN }}
run: python -Im pytest --no-cov --numprocesses=0 -vvvvv --codspeed
From b0690d7b863b67ca247e4557207dc2c1fd98b6f3 Mon Sep 17 00:00:00 2001
From: Sam Bull
Date: Sun, 5 Oct 2025 21:49:44 +0100
Subject: [PATCH 2/6] Add Python 3.14 to metadata (#11559)
---
setup.cfg | 1 +
1 file changed, 1 insertion(+)
diff --git a/setup.cfg b/setup.cfg
index 7f783324897..07a6a2d0c93 100644
--- a/setup.cfg
+++ b/setup.cfg
@@ -38,6 +38,7 @@ classifiers =
Programming Language :: Python :: 3.11
Programming Language :: Python :: 3.12
Programming Language :: Python :: 3.13
+ Programming Language :: Python :: 3.14
Topic :: Internet :: WWW/HTTP
From 3a9120dfa0487a6bd67f32cc724d535403a910ba Mon Sep 17 00:00:00 2001
From: "pre-commit-ci[bot]"
<66853113+pre-commit-ci[bot]@users.noreply.github.com>
Date: Sun, 5 Oct 2025 21:56:41 +0100
Subject: [PATCH 3/6] [pre-commit.ci] pre-commit autoupdate (#11534)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
updates:
- [github.com/psf/black: 25.1.0 →
25.9.0](https://github.com/psf/black/compare/25.1.0...25.9.0)
Co-authored-by: pre-commit-ci[bot] <66853113+pre-commit-ci[bot]@users.noreply.github.com>
---
.pre-commit-config.yaml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index c0a59104b35..0a2dee04b65 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -64,7 +64,7 @@ repos:
hooks:
- id: isort
- repo: https://github.com/psf/black
- rev: '25.1.0'
+ rev: '25.9.0'
hooks:
- id: black
language_version: python3 # Should be a command that runs python
From 5b21cedc2950e735ca9070479e8c99dd42bf3a7b Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 5 Oct 2025 22:32:28 +0000
Subject: [PATCH 4/6] Bump typing-inspection from 0.4.1 to 0.4.2 (#11547)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Bumps [typing-inspection](https://github.com/pydantic/typing-inspection)
from 0.4.1 to 0.4.2.
Release notes
Sourced from typing-inspection's
releases.
v0.4.2 2025-10-01
What's Changed
Full Changelog: https://github.com/pydantic/typing-inspection/compare/v0.4.1...v0.4.2
Changelog
Sourced from typing-inspection's
changelog.
v0.4.2 (2025-10-01)
- Add
typing_objects.is_noextraitems() by @Viicos in #47
Commits
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
Signed-off-by: dependabot[bot]
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
requirements/constraints.txt | 2 +-
requirements/dev.txt | 2 +-
requirements/lint.txt | 2 +-
requirements/test-common.txt | 2 +-
requirements/test-ft.txt | 2 +-
requirements/test.txt | 2 +-
6 files changed, 6 insertions(+), 6 deletions(-)
diff --git a/requirements/constraints.txt b/requirements/constraints.txt
index 5c1f65a60d5..1c1b2b35104 100644
--- a/requirements/constraints.txt
+++ b/requirements/constraints.txt
@@ -275,7 +275,7 @@ typing-extensions==4.15.0
# python-on-whales
# typing-inspection
# virtualenv
-typing-inspection==0.4.1
+typing-inspection==0.4.2
# via pydantic
uritemplate==4.2.0
# via gidgethub
diff --git a/requirements/dev.txt b/requirements/dev.txt
index 0afb6f4f5d1..b7b7f016a38 100644
--- a/requirements/dev.txt
+++ b/requirements/dev.txt
@@ -266,7 +266,7 @@ typing-extensions==4.15.0
# python-on-whales
# typing-inspection
# virtualenv
-typing-inspection==0.4.1
+typing-inspection==0.4.2
# via pydantic
uritemplate==4.2.0
# via gidgethub
diff --git a/requirements/lint.txt b/requirements/lint.txt
index 001b7034016..2a1b03ec690 100644
--- a/requirements/lint.txt
+++ b/requirements/lint.txt
@@ -113,7 +113,7 @@ typing-extensions==4.15.0
# python-on-whales
# typing-inspection
# virtualenv
-typing-inspection==0.4.1
+typing-inspection==0.4.2
# via pydantic
uvloop==0.21.0 ; platform_system != "Windows"
# via -r requirements/lint.in
diff --git a/requirements/test-common.txt b/requirements/test-common.txt
index ab5712196ec..03a2a3a1ba4 100644
--- a/requirements/test-common.txt
+++ b/requirements/test-common.txt
@@ -105,7 +105,7 @@ typing-extensions==4.15.0
# pydantic-core
# python-on-whales
# typing-inspection
-typing-inspection==0.4.1
+typing-inspection==0.4.2
# via pydantic
wait-for-it==2.3.0
# via -r requirements/test-common.in
diff --git a/requirements/test-ft.txt b/requirements/test-ft.txt
index bbc92407280..0405a58f358 100644
--- a/requirements/test-ft.txt
+++ b/requirements/test-ft.txt
@@ -138,7 +138,7 @@ typing-extensions==4.15.0
# pydantic-core
# python-on-whales
# typing-inspection
-typing-inspection==0.4.1
+typing-inspection==0.4.2
# via pydantic
wait-for-it==2.3.0
# via -r requirements/test-common.in
diff --git a/requirements/test.txt b/requirements/test.txt
index 1b077a2e8ab..2b58c762697 100644
--- a/requirements/test.txt
+++ b/requirements/test.txt
@@ -138,7 +138,7 @@ typing-extensions==4.15.0
# pydantic-core
# python-on-whales
# typing-inspection
-typing-inspection==0.4.1
+typing-inspection==0.4.2
# via pydantic
uvloop==0.21.0 ; platform_system != "Windows" and implementation_name == "cpython"
# via -r requirements/base.in
From 8d5984ab859a221e0fe1e545fb4f643094303f33 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 5 Oct 2025 22:38:38 +0000
Subject: [PATCH 5/6] Bump mypy from 1.17.1 to 1.18.2 (#11524)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Bumps [mypy](https://github.com/python/mypy) from 1.17.1 to 1.18.2.
Changelog
Sourced from mypy's
changelog.
Mypy 1.18.2
- Fix crash on recursive alias (Ivan Levkivskyi, PR 19845)
- Add additional guidance for stubtest errors when runtime is
object.__init__ (Stephen Morton, PR 19733)
- Fix handling of None values in f-string expressions in mypyc
(BobTheBuidler, PR 19846)
Acknowledgements
Thanks to all mypy contributors who contributed to this release:
- Ali Hamdan
- Anthony Sottile
- BobTheBuidler
- Brian Schubert
- Chainfire
- Charlie Denton
- Christoph Tyralla
- CoolCat467
- Daniel Hnyk
- Emily
- Emma Smith
- Ethan Sarp
- Ivan Levkivskyi
- Jahongir Qurbonov
- Jelle Zijlstra
- Joren Hammudoglu
- Jukka Lehtosalo
- Marc Mueller
- Omer Hadari
- Piotr Sawicki
- PrinceNaroliya
- Randolf Scholz
- Robsdedude
- Saul Shanabrook
- Shantanu
- Stanislav Terliakov
- Stephen Morton
- wyattscarpenter
I’d also like to thank my employer, Dropbox, for supporting mypy
development.
Mypy 1.17
We’ve just uploaded mypy 1.17 to the Python Package Index (PyPI).
Mypy is a static type checker for Python. This release includes new
features and bug fixes.
You can install it as follows:
python3 -m pip install -U mypy
You can read the full documentation for this release on Read the Docs.
... (truncated)
Commits
df05f05
remove +dev from version
01a7a12
Update changelog for 1.18.2 (#19873)
ca5abf0
Typeshed cherry-pick: Make type of unitest.mock.Any a
subclass of Any (#1...
9d794b5
[mypyc] fix: inappropriate Nones in f-strings (#19846)
2c0510c
stubtest: additional guidance on errors when runtime is
object.init (#19733)
2f3f03c
Bump version to 1.18.2+dev for point release
7669841
Fix crash on recursive alias in indirection.py (#19845)
03fbaa9
bump version to 1.18.1 due to wheels failure
b44a1fb
removed +dev from version
7197a99
Removed Unreleased in the Changelog for Release 1.18 (#19827)
- Additional commits viewable in compare
view
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
---------
Signed-off-by: dependabot[bot]
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Sam Bull
---
aiohttp/client_reqrep.py | 5 +++--
requirements/constraints.txt | 2 +-
requirements/dev.txt | 2 +-
requirements/lint.txt | 2 +-
requirements/test-common.txt | 2 +-
requirements/test-ft.txt | 2 +-
requirements/test.txt | 2 +-
7 files changed, 9 insertions(+), 8 deletions(-)
diff --git a/aiohttp/client_reqrep.py b/aiohttp/client_reqrep.py
index e4d20f136cc..56131263a68 100644
--- a/aiohttp/client_reqrep.py
+++ b/aiohttp/client_reqrep.py
@@ -59,6 +59,7 @@
netrc_from_env,
parse_mimetype,
reify,
+ sentinel,
set_exception,
set_result,
)
@@ -137,14 +138,14 @@ def __new__(
url: URL,
method: str,
headers: "CIMultiDictProxy[str]",
- real_url: URL = _SENTINEL, # type: ignore[assignment]
+ real_url: Union[URL, _SENTINEL] = sentinel,
) -> "RequestInfo":
"""Create a new RequestInfo instance.
For backwards compatibility, the real_url parameter is optional.
"""
return tuple.__new__(
- cls, (url, method, headers, url if real_url is _SENTINEL else real_url)
+ cls, (url, method, headers, url if real_url is sentinel else real_url)
)
diff --git a/requirements/constraints.txt b/requirements/constraints.txt
index 1c1b2b35104..cab9c55db35 100644
--- a/requirements/constraints.txt
+++ b/requirements/constraints.txt
@@ -116,7 +116,7 @@ multidict==6.6.4
# -r requirements/multidict.in
# -r requirements/runtime-deps.in
# yarl
-mypy==1.17.1 ; implementation_name == "cpython"
+mypy==1.18.2 ; implementation_name == "cpython"
# via
# -r requirements/lint.in
# -r requirements/test-common.in
diff --git a/requirements/dev.txt b/requirements/dev.txt
index b7b7f016a38..23656eac528 100644
--- a/requirements/dev.txt
+++ b/requirements/dev.txt
@@ -113,7 +113,7 @@ multidict==6.6.4
# via
# -r requirements/runtime-deps.in
# yarl
-mypy==1.17.1 ; implementation_name == "cpython"
+mypy==1.18.2 ; implementation_name == "cpython"
# via
# -r requirements/lint.in
# -r requirements/test-common.in
diff --git a/requirements/lint.txt b/requirements/lint.txt
index 2a1b03ec690..c12cf67461f 100644
--- a/requirements/lint.txt
+++ b/requirements/lint.txt
@@ -45,7 +45,7 @@ markdown-it-py==3.0.0
# via rich
mdurl==0.1.2
# via markdown-it-py
-mypy==1.17.1 ; implementation_name == "cpython"
+mypy==1.18.2 ; implementation_name == "cpython"
# via -r requirements/lint.in
mypy-extensions==1.1.0
# via mypy
diff --git a/requirements/test-common.txt b/requirements/test-common.txt
index 03a2a3a1ba4..aaf907c917f 100644
--- a/requirements/test-common.txt
+++ b/requirements/test-common.txt
@@ -38,7 +38,7 @@ markdown-it-py==4.0.0
# via rich
mdurl==0.1.2
# via markdown-it-py
-mypy==1.18.1 ; implementation_name == "cpython"
+mypy==1.18.2 ; implementation_name == "cpython"
# via -r requirements/test-common.in
mypy-extensions==1.1.0
# via mypy
diff --git a/requirements/test-ft.txt b/requirements/test-ft.txt
index 0405a58f358..50d84270921 100644
--- a/requirements/test-ft.txt
+++ b/requirements/test-ft.txt
@@ -61,7 +61,7 @@ multidict==6.6.4
# via
# -r requirements/runtime-deps.in
# yarl
-mypy==1.18.1 ; implementation_name == "cpython"
+mypy==1.18.2 ; implementation_name == "cpython"
# via -r requirements/test-common.in
mypy-extensions==1.1.0
# via mypy
diff --git a/requirements/test.txt b/requirements/test.txt
index 2b58c762697..ca2c41f43e6 100644
--- a/requirements/test.txt
+++ b/requirements/test.txt
@@ -61,7 +61,7 @@ multidict==6.6.4
# via
# -r requirements/runtime-deps.in
# yarl
-mypy==1.17.1 ; implementation_name == "cpython"
+mypy==1.18.2 ; implementation_name == "cpython"
# via -r requirements/test-common.in
mypy-extensions==1.1.0
# via mypy
From 2087251dbcbcbaa70a3f0d856cb3a74750f225b5 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 5 Oct 2025 22:43:09 +0000
Subject: [PATCH 6/6] Bump cryptography from 46.0.1 to 46.0.2 (#11548)
Bumps [cryptography](https://github.com/pyca/cryptography) from 46.0.1
to 46.0.2.
Changelog
Sourced from cryptography's
changelog.
46.0.2 - 2025-09-30
* Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL
3.5.4.
.. _v46-0-1:
Commits
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
Signed-off-by: dependabot[bot]
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
requirements/constraints.txt | 2 +-
requirements/dev.txt | 2 +-
requirements/lint.txt | 2 +-
requirements/test-common.txt | 2 +-
requirements/test-ft.txt | 2 +-
requirements/test.txt | 2 +-
6 files changed, 6 insertions(+), 6 deletions(-)
diff --git a/requirements/constraints.txt b/requirements/constraints.txt
index cab9c55db35..66a9451e632 100644
--- a/requirements/constraints.txt
+++ b/requirements/constraints.txt
@@ -56,7 +56,7 @@ coverage==7.10.7
# via
# -r requirements/test-common.in
# pytest-cov
-cryptography==46.0.1
+cryptography==46.0.2
# via
# pyjwt
# trustme
diff --git a/requirements/dev.txt b/requirements/dev.txt
index 23656eac528..67ee1808222 100644
--- a/requirements/dev.txt
+++ b/requirements/dev.txt
@@ -56,7 +56,7 @@ coverage==7.10.7
# via
# -r requirements/test-common.in
# pytest-cov
-cryptography==46.0.1
+cryptography==46.0.2
# via
# pyjwt
# trustme
diff --git a/requirements/lint.txt b/requirements/lint.txt
index c12cf67461f..4e880e37c80 100644
--- a/requirements/lint.txt
+++ b/requirements/lint.txt
@@ -21,7 +21,7 @@ cfgv==3.4.0
# via pre-commit
click==8.1.8
# via slotscheck
-cryptography==46.0.1
+cryptography==46.0.2
# via trustme
distlib==0.4.0
# via virtualenv
diff --git a/requirements/test-common.txt b/requirements/test-common.txt
index aaf907c917f..5167e2be230 100644
--- a/requirements/test-common.txt
+++ b/requirements/test-common.txt
@@ -18,7 +18,7 @@ coverage==7.10.7
# via
# -r requirements/test-common.in
# pytest-cov
-cryptography==46.0.1
+cryptography==46.0.2
# via trustme
exceptiongroup==1.3.0
# via pytest
diff --git a/requirements/test-ft.txt b/requirements/test-ft.txt
index 50d84270921..314c2ac446d 100644
--- a/requirements/test-ft.txt
+++ b/requirements/test-ft.txt
@@ -29,7 +29,7 @@ coverage==7.10.7
# via
# -r requirements/test-common.in
# pytest-cov
-cryptography==46.0.1
+cryptography==46.0.2
# via trustme
exceptiongroup==1.3.0
# via pytest
diff --git a/requirements/test.txt b/requirements/test.txt
index ca2c41f43e6..b65bd794809 100644
--- a/requirements/test.txt
+++ b/requirements/test.txt
@@ -29,7 +29,7 @@ coverage==7.10.7
# via
# -r requirements/test-common.in
# pytest-cov
-cryptography==46.0.1
+cryptography==46.0.2
# via trustme
exceptiongroup==1.3.0
# via pytest