Outdated cryptography dependency contains CVE-2026-26007

Hello,

I noticed we are pinned the following for cryptography version which has CVE-2026-26007:
```
cryptography = ">=44.0.0,<45.0.0"  # Constrained as transitive dependency due to a bug in newer versions
```

Is there a plan to update this to a newer version?

Thanks,
Yong 