From 2f3aba168aad89ab4d71c7796b137e3feac95d5f Mon Sep 17 00:00:00 2001
From: "Garen J. Torikian" <gjtorikian@users.noreply.github.com>
Date: Tue, 4 Aug 2026 10:00:33 -0400
Subject: [PATCH] fix: bump cryptography to ~=50.0 for CVE-2026-69247

Force a patch release (10.1.1) to ship the cryptography 50.0 upgrade
that landed in #706 as a chore commit, which release-please does not
release on its own.

CVE-2026-69247 / GHSA-g6cj-pr64-35w5: PKCS#7 EnvelopedData decryption
exposes a Bleichenbacher oracle. Affects cryptography >=44.0.0,<50.0.0,
fixed in 50.0.0.

Release-As: 10.1.1