fix(anonymizer): bump cryptography to >=48.0.1,<49.0.0 to resolve GHSA-537c-gmf6-5ccf

[Copilot]

The cryptography <47.0.0 upper bound forced resolution to a range entirely below the patched version for GHSA-537c-gmf6-5ccf (HIGH — vulnerable OpenSSL statically linked into wheels, fixed only in 48.0.1), making presidio-anonymizer unadoptable in environments with CVE gates.

Changes

• presidio-anonymizer/pyproject.toml: Raise the cryptography floor to 48.0.1 and cap to <49.0.0

# Before
"cryptography (>=46.0.4,<47.0.0)"

# After
"cryptography (>=48.0.1,<49.0.0)"

The anonymizer uses only cryptography.hazmat.primitives.ciphers (AES-CBC) and cryptography.hazmat.primitives.padding (PKCS7) — stable APIs with no breaking changes in 48.x.

[Copilot]

Pull request overview

Updates presidio-anonymizer’s cryptography dependency range to ensure installations can pick up the patched wheel version addressing GHSA-537c-gmf6-5ccf, improving security posture and compatibility with CVE-gated environments.

Changes:

• Bump cryptography lower bound to >=48.0.1 (patched) and set an upper cap of <49.0.0 in presidio-anonymizer packaging metadata.

[github-actions]

Coverage report (presidio-cli)

Click to see where and how coverage changed

File	Statements	Missing	Coverage	Coverage (new stmts)	Lines missing
presidio-cli/presidio_cli
cli.py
Project Total

This report was generated by python-coverage-comment-action

[github-actions]

Coverage report (presidio-anonymizer)

Click to see where and how coverage changed

File	Statements	Missing	Coverage	Coverage (new stmts)	Lines missing
presidio-anonymizer/presidio_anonymizer
anonymizer_engine.py
presidio-anonymizer/presidio_anonymizer/operators
custom.py
Project Total

This report was generated by python-coverage-comment-action

[github-actions]

Coverage report (presidio-structured)

This PR does not seem to contain any modification to coverable code.

[github-actions]

Coverage report (presidio-image-redactor)

Click to see where and how coverage changed

File	Statements	Missing	Coverage	Coverage (new stmts)	Lines missing
presidio-image-redactor/presidio_image_redactor
dicom_image_pii_verify_engine.py
document_intelligence_ocr.py
image_analyzer_engine.py
Project Total

This report was generated by python-coverage-comment-action

[github-actions]

Coverage report (presidio-analyzer)

Click to see where and how coverage changed

File	Statements	Missing	Coverage	Coverage (new stmts)	Lines missing
presidio-analyzer/presidio_analyzer
analyzer_engine.py
entity_recognizer.py
presidio-analyzer/presidio_analyzer/input_validation
schemas.py
yaml_recognizer_models.py
presidio-analyzer/presidio_analyzer/nlp_engine
__init__.py
nlp_engine_provider.py
presidio-analyzer/presidio_analyzer/predefined_recognizers
__init__.py
presidio-analyzer/presidio_analyzer/predefined_recognizers/country_specific
__init__.py
presidio-analyzer/presidio_analyzer/predefined_recognizers/country_specific/australia
au_abn_recognizer.py
au_acn_recognizer.py
au_medicare_recognizer.py
au_tfn_recognizer.py
presidio-analyzer/presidio_analyzer/predefined_recognizers/country_specific/finland
fi_personal_identity_code_recognizer.py
presidio-analyzer/presidio_analyzer/predefined_recognizers/country_specific/germany
de_bsnr_recognizer.py
de_id_card_recognizer.py
de_lanr_recognizer.py
de_passport_recognizer.py
de_social_security_recognizer.py
de_tax_id_recognizer.py
de_vat_id_recognizer.py
presidio-analyzer/presidio_analyzer/predefined_recognizers/country_specific/india
in_vehicle_registration_recognizer.py
presidio-analyzer/presidio_analyzer/predefined_recognizers/country_specific/poland
pl_pesel_recognizer.py
presidio-analyzer/presidio_analyzer/predefined_recognizers/generic
phone_recognizer.py
presidio-analyzer/presidio_analyzer/recognizer_registry
recognizer_registry.py
recognizers_loader_utils.py
Project Total

The report is truncated to 25 files out of 69. To see the full report, please visit the workflow summary page.

This report was generated by python-coverage-comment-action