Security: Fix CVE-2026-45409 (idna) and GHSA-537c-gmf6-5ccf (cryptogr… (#902)

Security: Fix CVE-2026-45409 (idna) and GHSA-537c-gmf6-5ccf (cryptography)

Upgrades dependencies to address high-severity vulnerabilities:
- cryptography 47.0.0 → 48.0.1: Fixes vulnerable OpenSSL in wheels
- idna 3.10 → 3.15: Fixes DoS vulnerability in IDNA encoding

CVE-2026-45409: idna versions prior to 3.15 were vulnerable to DoS
attacks via specially crafted inputs to idna.encode() function.

GHSA-537c-gmf6-5ccf: cryptography wheels prior to 48.0.1 included
a statically linked copy of OpenSSL with security vulnerabilities.

Author: bhavinshahM

requirements-dev.in

@@ -1,5 +1,5 @@
 click==8.1.7
-idna==3.10
+idna==3.15
 pytest==8.3.3
 pytest-timer==1.0.0
 pytest-timeout==2.3.1

requirements.in

@@ -1,8 +1,9 @@
 backoff==2.2.1
 certifi==2024.8.30
-cryptography==47.0.0
+cryptography==48.0.1
 distro==1.9.0
 httplib2==0.22.0
+idna==3.15
 jinja2==3.1.6
 omegaconf==2.3.0
 psycopg2-binary==2.9.10

requirements.txt

@@ -16,14 +16,16 @@ cffi==2.0.0
     # via cryptography
 charset-normalizer==2.0.3
     # via requests
-cryptography==47.0.0
+cryptography==48.0.1
     # via -r requirements.in
 distro==1.9.0
     # via -r requirements.in
 httplib2==0.22.0
     # via -r requirements.in
-idna==3.10
-    # via requests
+idna==3.15
+    # via
+    #   -r requirements.in
+    #   requests
 jinja2==3.1.6
     # via -r requirements.in
 markupsafe==2.0.1