fix: bump cryptography to 50.0.0 to clear CVE-2026-69247

[melindavandijke]

Purpose

The Docker Hub Workflow's trivy scan blocks the build-and-push-backend and build-and-push-y-provider image builds on a HIGH-severity CVE (CVE-2026-69247) in cryptography. This is currently failing on every branch checked, including main: the existing cryptography>=48.0.1 override (added for an older CVE) still resolves to 49.0.0 in uv.lock, which is
vulnerable. 50.0.0 fixes it.

Proposal

• Bump the cryptography override in src/backend/pyproject.toml from >=48.0.1 to >=50.0.0.
• Regenerate src/backend/uv.lock (uv lock) — the only change is cryptography 49.0.0 → 50.0.0, no other package moved.

[coderabbitai]

Important

Review available on request

• 🔍 Trigger review

Reviews should be triggered manually for repositories with fewer than 10 stars. Select Trigger review above or comment @coderabbitai review to review the latest changes. For a full review, comment @coderabbitai full review.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 1df7bb95-b30e-4e5e-8f9f-4889788b515c

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

Size Change: 0 B

Total Size: 4.33 MB

📦 View Changed

Filename	Size	Change
apps/impress/out/_next/static/61cc9b94/_buildManifest.js	699 B	+699 B (new file)	🆕
apps/impress/out/_next/static/f62d8bf6/_buildManifest.js	0 B	-699 B (removed)	🏆

_{compressed-size-action}