Python: bump cryptography upper bound from <45 to <47

[matthiasgoergens]

cryptography 46.0.5 fixes GHSA-vqmq-vfhg-gg2m (subgroup attack due to missing subgroup validation for SECT curves). The current <45 upper bound in pyproject.toml prevents downstream users from upgrading to the patched version.

This bumps the constraint to <47 to allow cryptography 45.x and 46.x, following the same pattern as PR #343 which bumped from <44 to <45.

[Copilot]

Pull request overview

This PR relaxes the upper bound constraint on the cryptography dependency from <45 to <47, allowing downstream users to upgrade to cryptography versions 45.x and 46.x to address security vulnerabilities, particularly GHSA-vqmq-vfhg-gg2m fixed in 46.0.5.

Changes:

• Updated cryptography version constraint in pyproject.toml from >=39,<45 to >=39,<47
• Regenerated poetry.lock with Poetry 2.3.2, which normalized the astroid version constraint format to PEP 440 compliance

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.

File	Description
python/pyproject.toml	Relaxed cryptography upper bound constraint from <45 to <47
python/poetry.lock	Updated Poetry generator version and normalized astroid version format; updated content hash

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.