From 6831c6b54d412174bb94b3ac212e2ad0290a133c Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 27 Oct 2026 07:42:36 +0000
Subject: [PATCH] build(deps-dev): bump the python group across 1 directory
 with 4 updates

Updates the requirements on [langchain-core](https://github.com/langchain-ai/langchain), [cryptography](https://github.com/pyca/cryptography), [webauthn](https://github.com/duo-labs/py_webauthn) and [ruff](https://github.com/astral-sh/ruff) to permit the latest version.

Updates `langchain-core` to 1.7.0
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](https://github.com/langchain-ai/langchain/compare/langchain-core==0.3.0...langchain-core==1.7.0)

Updates `cryptography` to 50.0.2
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pyca/cryptography/compare/42.0.0...50.0.2)

Updates `webauthn` to 3.0.1
- [Release notes](https://github.com/duo-labs/py_webauthn/releases)
- [Changelog](https://github.com/duo-labs/py_webauthn/blob/master/CHANGELOG.md)
- [Commits](https://github.com/duo-labs/py_webauthn/compare/v2.0.0...v3.0.1)

Updates `ruff` from 0.16.9 to 0.17.2
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](https://github.com/astral-sh/ruff/compare/0.16.9...0.17.2)

---
updated-dependencies:
- dependency-name: langchain-core
  dependency-version: 1.7.0
  dependency-type: direct:development
  dependency-group: python
- dependency-name: cryptography
  dependency-version: 50.0.2
  dependency-type: direct:development
  dependency-group: python
- dependency-name: webauthn
  dependency-version: 3.0.1
  dependency-type: direct:development
  dependency-group: python
- dependency-name: ruff
  dependency-version: 0.17.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 pyproject.toml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pyproject.toml b/pyproject.toml
index 2a8afb6..b20bf00 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -43,13 +43,13 @@ Security = "https://github.com/SourceShift/InterLock/blob/main/SECURITY.md"
 
 [project.optional-dependencies]
 mcp = ["wrapt>=1.15"]
-langchain = ["langchain-core>=0.3,<0.4"]
+langchain = ["langchain-core>=0.3,<1.8"]
 # The control plane's server, driver and signing primitives. Nothing in the
 # core package imports these; `import interlock.cloud` stays dependency-free.
-cloud = ["uvicorn>=0.30,<1", "psycopg[binary]>=3.1,<4", "cryptography>=42,<47", "webauthn>=2.0,<3"]
+cloud = ["uvicorn>=0.30,<1", "psycopg[binary]>=3.1,<4", "cryptography>=42,<51", "webauthn>=2.0,<4"]
 # ruff is pinned here too: CI pins it (an unpinned linter turns a green repo red
 # on a release schedule), and a contributor should run the same version as CI.
-dev = ["pytest>=7", "langchain-core>=0.3,<0.4", "ruff==0.16.9",
+dev = ["pytest>=7", "langchain-core>=0.3,<1.8", "ruff==0.17.2",
        # tests/test_cloud_compose.py parses the shipped compose file.
        "PyYAML>=6,<7",
        # scripts/check_site.py reads the Zensical TOML; tomllib is 3.11+