Context
The VEX-aware dev-chart scan run 30886199319 found three newly published vulnerabilities in cryptography 48.0.1 inside stackstate-k8s-agent:9516cb41:
All three advisories were published on 2026-08-03. The same cryptography 48.0.1 package was already present in yesterday's agent image, so this is new disclosure/database data rather than a regression introduced by the new image.
Required work
The agent consumes StackVista/stackstate-agent-integrations tag 7.78.2-4. Its generated Python requirements pin cryptography==48.0.1.
- Update the integrations requirement to cryptography 50.0.0, which covers all three fixes.
- Regenerate the requirements/lock artifacts using the repo's normal workflow.
- Run the Python integration and dependency tests.
- Publish a new immutable 7.78.2-* integrations tag.
- Hand the released tag to the downstream stackstate-agent subtask.
Acceptance criteria
- Published integrations tag resolves cryptography to 50.0.0.
- Tests pass.
- Release/tag and CI evidence are linked on this ticket.
STAC-25514
Context
The VEX-aware dev-chart scan run 30886199319 found three newly published vulnerabilities in cryptography 48.0.1 inside stackstate-k8s-agent:9516cb41:
All three advisories were published on 2026-08-03. The same cryptography 48.0.1 package was already present in yesterday's agent image, so this is new disclosure/database data rather than a regression introduced by the new image.
Required work
The agent consumes StackVista/stackstate-agent-integrations tag 7.78.2-4. Its generated Python requirements pin cryptography==48.0.1.
Acceptance criteria