Bump cryptography from 47.0.0 to 48.0.0 (#12455)

Bumps [cryptography](https://github.com/pyca/cryptography) from 47.0.0
to 48.0.0.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst">cryptography's
changelog</a>.</em></p>
<blockquote>
<p>48.0.0 - 2026-05-04</p>
<pre><code>
* **BACKWARDS INCOMPATIBLE:** Support for Python 3.8 has been removed.
  ``cryptography`` now requires Python 3.9 or later.
* **BACKWARDS INCOMPATIBLE:** Loading an X.509 CRL whose inner
  ``TBSCertList.signature`` algorithm does not match the outer
``signatureAlgorithm`` now raises ``ValueError``. Previously, such CRLs
were parsed successfully and only rejected during signature validation.
* Added support for :doc:`/hazmat/primitives/asymmetric/mlkem` and
  :doc:`/hazmat/primitives/asymmetric/mldsa` when using OpenSSL 3.5.0 or
later, in addition to the existing AWS-LC and BoringSSL support. This
means
  post-quantum algorithms are now available to users of our wheels.
<ul>
<li><strong>Note:</strong> Going forward, we do not guarantee that all
functionality<br />
in <code>cryptography</code> will be available when building against<br
/>
OpenSSL. See :doc:<code>/statements/state-of-openssl</code> for more
information.</li>
</ul>
<p>.. _v47-0-0:<br />
</code></pre></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/pyca/cryptography/commit/8e03e30e3aae01632a697e903e3593c924f0139d"><code>8e03e30</code></a>
bump for 48.0.0 release (<a
href="https://redirect.github.com/pyca/cryptography/issues/14796">#14796</a>)</li>
<li><a
href="https://github.com/pyca/cryptography/commit/295e0d254ef31ab864730aa41312ec355416ee71"><code>295e0d2</code></a>
Add AGENTS.md with CLAUDE.md symlink (<a
href="https://redirect.github.com/pyca/cryptography/issues/14794">#14794</a>)</li>
<li><a
href="https://github.com/pyca/cryptography/commit/104a2de19e268a433e6da92be9cb872dcf0003c8"><code>104a2de</code></a>
Bump BoringSSL, OpenSSL, AWS-LC in CI (<a
href="https://redirect.github.com/pyca/cryptography/issues/14793">#14793</a>)</li>
<li><a
href="https://github.com/pyca/cryptography/commit/67ec1e51988195e17993d2edef5258b27509b926"><code>67ec1e5</code></a>
call check_length early on AesSiv::encrypt (<a
href="https://redirect.github.com/pyca/cryptography/issues/14792">#14792</a>)</li>
<li><a
href="https://github.com/pyca/cryptography/commit/b2da57a0d9e4bfd2b95364299091a18f74127b26"><code>b2da57a</code></a>
changelog for mldsa/mlkem for openssl (<a
href="https://redirect.github.com/pyca/cryptography/issues/14791">#14791</a>)</li>
<li><a
href="https://github.com/pyca/cryptography/commit/3cf44adee25c368d4a136e072fa9f80465d91eb0"><code>3cf44ad</code></a>
ML-KEM OpenSSL support (<a
href="https://redirect.github.com/pyca/cryptography/issues/14781">#14781</a>)</li>
<li><a
href="https://github.com/pyca/cryptography/commit/2e31639666766f846fbab2c605879db0fa64fe83"><code>2e31639</code></a>
ML-DSA OpenSSL support (<a
href="https://redirect.github.com/pyca/cryptography/issues/14773">#14773</a>)</li>
<li><a
href="https://github.com/pyca/cryptography/commit/5affe5a286a986fdf512c4a5cb280d28a96c10e3"><code>5affe5a</code></a>
fix rust nightly clippy (<a
href="https://redirect.github.com/pyca/cryptography/issues/14790">#14790</a>)</li>
<li><a
href="https://github.com/pyca/cryptography/commit/2e73ca448eaf64b6f0d4ffbb794cf96170cef5ec"><code>2e73ca4</code></a>
bump rust-openssl dep and update EcPoint::mul_generator to
mul_generator2 (<a
href="https://redirect.github.com/pyca/cryptography/issues/1">#1</a>...</li>
<li><a
href="https://github.com/pyca/cryptography/commit/82ebd3b9f49d49ad5fd8b4b1f1dd02487b6e1466"><code>82ebd3b</code></a>
Bump BoringSSL, OpenSSL, AWS-LC in CI (<a
href="https://redirect.github.com/pyca/cryptography/issues/14785">#14785</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/pyca/cryptography/compare/47.0.0...48.0.0">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

requirements/constraints.txt

@@ -70,7 +70,7 @@ coverage==7.13.5
     # via
     #   -r requirements/test-common.in
     #   pytest-cov
-cryptography==47.0.0
+cryptography==48.0.0
     # via trustme
 cython==3.2.4
     # via -r requirements/cython.in

requirements/dev.txt

@@ -70,7 +70,7 @@ coverage==7.13.5
     # via
     #   -r requirements/test-common.in
     #   pytest-cov
-cryptography==47.0.0
+cryptography==48.0.0
     # via trustme
 distlib==0.4.0
     # via virtualenv

requirements/lint.txt

@@ -17,7 +17,13 @@ annotated-types==0.7.0
 ast-serialize==0.3.0
     # via mypy
 async-timeout==5.0.1
-    # via valkey
+    # via
+    #   aiohttp
+    #   valkey
+attrs==26.1.0
+    # via aiohttp
+backports-asyncio-runner==1.2.0
+    # via pytest-asyncio
 backports-zstd==1.3.0 ; implementation_name == "cpython" and python_version < "3.14"
     # via -r requirements/lint.in
 blockbuster==1.5.26
@@ -31,7 +37,7 @@ cfgv==3.5.0
     # via pre-commit
 click==8.3.3
     # via slotscheck
-cryptography==47.0.0
+cryptography==48.0.0
     # via trustme
 distlib==0.4.0
     # via virtualenv
@@ -45,10 +51,16 @@ forbiddenfruit==0.1.4
     # via blockbuster
 freezegun==1.5.5
     # via -r requirements/lint.in
+frozenlist==1.8.0
+    # via
+    #   aiohttp
+    #   aiosignal
 identify==2.6.19
     # via pre-commit
 idna==3.11
-    # via trustme
+    # via
+    #   trustme
+    #   yarl
 iniconfig==2.3.0
     # via pytest
 isal==1.7.2
@@ -59,6 +71,10 @@ markdown-it-py==4.2.0
     # via rich
 mdurl==0.1.2
     # via markdown-it-py
+multidict==6.7.1
+    # via
+    #   aiohttp
+    #   yarl
 mypy==2.0.0 ; implementation_name == "cpython"
     # via -r requirements/lint.in
 mypy-extensions==1.1.0
@@ -133,12 +149,14 @@ trustme==1.2.1
     # via -r requirements/lint.in
 typing-extensions==4.15.0
     # via
+    #   aiosignal
     #   cryptography
     #   exceptiongroup
     #   multidict
     #   mypy
     #   pydantic
     #   pydantic-core
+    #   pytest-asyncio
     #   python-on-whales
     #   typing-inspection
     #   virtualenv
@@ -150,5 +168,7 @@ valkey==6.1.1
     # via -r requirements/lint.in
 virtualenv==21.3.1
     # via pre-commit
+yarl==1.23.0
+    # via aiohttp
 zlib-ng==1.0.0
     # via -r requirements/lint.in

requirements/test-common.txt

@@ -4,10 +4,22 @@
 #
 #    pip-compile --allow-unsafe --output-file=requirements/test-common.txt --strip-extras requirements/test-common.in
 #
+aiohappyeyeballs==2.6.1
+    # via aiohttp
+aiohttp==3.13.5
+    # via pytest-aiohttp
+aiosignal==1.4.0
+    # via aiohttp
 annotated-types==0.7.0
     # via pydantic
 ast-serialize==0.3.0
     # via mypy
+async-timeout==5.0.1
+    # via aiohttp
+attrs==26.1.0
+    # via aiohttp
+backports-asyncio-runner==1.2.0
+    # via pytest-asyncio
 blockbuster==1.5.26
     # via -r requirements/test-common.in
 cffi==2.0.0
@@ -20,7 +32,7 @@ coverage==7.13.5
     # via
     #   -r requirements/test-common.in
     #   pytest-cov
-cryptography==47.0.0
+cryptography==48.0.0
     # via trustme
 exceptiongroup==1.3.1
     # via pytest
@@ -30,8 +42,14 @@ forbiddenfruit==0.1.4
     # via blockbuster
 freezegun==1.5.5
     # via -r requirements/test-common.in
+frozenlist==1.8.0
+    # via
+    #   aiohttp
+    #   aiosignal
 idna==3.11
-    # via trustme
+    # via
+    #   trustme
+    #   yarl
 iniconfig==2.3.0
     # via pytest
 isal==1.8.0 ; python_version < "3.14"
@@ -42,6 +60,10 @@ markdown-it-py==4.2.0
     # via rich
 mdurl==0.1.2
     # via markdown-it-py
+multidict==6.7.1
+    # via
+    #   aiohttp
+    #   yarl
 mypy==2.0.0 ; implementation_name == "cpython"
     # via -r requirements/test-common.in
 mypy-extensions==1.1.0
@@ -56,6 +78,10 @@ pluggy==1.6.0
     # via
     #   pytest
     #   pytest-cov
+propcache==0.5.2
+    # via
+    #   aiohttp
+    #   yarl
 proxy-py==2.4.10
     # via -r requirements/test-common.in
 pycparser==3.0
@@ -71,10 +97,16 @@ pygments==2.20.0
 pytest==9.0.3
     # via
     #   -r requirements/test-common.in
+    #   pytest-aiohttp
+    #   pytest-asyncio
     #   pytest-codspeed
     #   pytest-cov
     #   pytest-mock
     #   pytest-xdist
+pytest-aiohttp==1.1.0
+    # via -r requirements/test-common.in
+pytest-asyncio==1.3.0
+    # via pytest-aiohttp
 pytest-codspeed==4.5.0
     # via -r requirements/test-common.in
 pytest-cov==7.1.0
@@ -102,16 +134,21 @@ trustme==1.2.1 ; platform_machine != "i686"
     # via -r requirements/test-common.in
 typing-extensions==4.15.0
     # via
+    #   aiosignal
     #   cryptography
     #   exceptiongroup
+    #   multidict
     #   mypy
     #   pydantic
     #   pydantic-core
+    #   pytest-asyncio
     #   python-on-whales
     #   typing-inspection
 typing-inspection==0.4.2
     # via pydantic
 wait-for-it==2.3.0
     # via -r requirements/test-common.in
+yarl==1.23.0
+    # via aiohttp
 zlib-ng==1.0.0
     # via -r requirements/test-common.in

requirements/test-ft.txt

@@ -45,7 +45,7 @@ coverage==7.13.5
     # via
     #   -r requirements/test-common.in
     #   pytest-cov
-cryptography==47.0.0
+cryptography==48.0.0
     # via trustme
 exceptiongroup==1.3.1
     # via pytest

requirements/test.txt

@@ -45,7 +45,7 @@ coverage==7.13.5
     # via
     #   -r requirements/test-common.in
     #   pytest-cov
-cryptography==47.0.0
+cryptography==48.0.0
     # via trustme
 exceptiongroup==1.3.1
     # via pytest