[SYNPY-1906] fix: resolve security vulnerabilities

[linglp]

Problem:

See: https://github.com/Sage-Bionetworks/synapsePythonClient/security/dependabot

Solution:

• Relock the pipfile
• Updated setup.cfg to have cryptography >= 50.0.0 and pytest ~= 9.0.3

[linglp]

Relock the lock file to get the patch version 50.0.0: https://github.com/Sage-Bionetworks/synapsePythonClient/security/dependabot/57

[linglp]

updated pytest to >=9.0.3 and <10.0.0: https://github.com/Sage-Bionetworks/synapsePythonClient/security/dependabot/48

[Copilot]

Pull request overview

This PR updates Python package dependency constraints in setup.cfg to address Dependabot-reported security vulnerabilities in the Synapse Python Client packaging/test environment.

Changes:

• Bumped cryptography minimum version to >=50.0.0.
• Updated pytest version pin in tests_require and extras_require to ~=9.0.3.

Suppressed comments (2)

setup.cfg:82

• PR description says pytest >= 9.0.3, but this extras pin uses pytest~=9.0.3 (restricts to <9.1.0). Consider switching to pytest>=9.0.3 here as well (or align the PR description if the pin is intentional).

dev =
    pytest~=9.0.3
    pytest-mock>=3.0,<4.0

setup.cfg:98

• PR description says pytest >= 9.0.3, but this extras pin uses pytest~=9.0.3 (restricts to <9.1.0). Consider switching to pytest>=9.0.3 here as well (or align the PR description if the pin is intentional).

tests =
    pytest~=9.0.3
    pytest-mock>=3.0,<4.0

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.