Update to v48.0.0

Full changelog: https://cryptography.io/en/latest/changelog/#v48-0-0

This contains one backwards-incompatible change, but which is in a
failure path where the previous behavior was unexpected.

 - BACKWARDS INCOMPATIBLE: Loading an X.509 CRL whose inner
   TBSCertList.signature algorithm does not match the outer
   signatureAlgorithm now raises ValueError. Previously, such CRLs were
   parsed successfully and only rejected during signature validation.

 - Added support for ML-KEM key encapsulation and ML-DSA signing when
   using OpenSSL 3.5.0 or later

Signed-off-by: Jeremy Cline <jeremycline@microsoft.com>

.gitignore

@@ -85,3 +85,5 @@
 /cryptography-46.0.7-vendor.tar.bz2
 /cryptography-47.0.0-vendor.tar.bz2
 /cryptography-47.0.0.tar.gz
+/cryptography-48.0.0.tar.gz
+/cryptography-48.0.0-vendor.tar.bz2

0001-Lower-cc-dependency.patch

@@ -0,0 +1,29 @@
+From 90ddb902ed292b3da77cbcbe9bbd699a702bf523 Mon Sep 17 00:00:00 2001
+From: Jeremy Cline <jeremycline@microsoft.com>
+Date: Tue, 5 May 2026 07:43:30 -0400
+Subject: [PATCH] Lower cc dependency
+
+It's a docblock-only fix release compared to .60 and I can't be bothered
+to rebuild it.
+
+Signed-off-by: Jeremy Cline <jeremycline@microsoft.com>
+---
+ Cargo.toml | 2 +-
+ 1 file changed, 1 insertion(+), 1 deletion(-)
+
+diff --git a/Cargo.toml b/Cargo.toml
+index d045bb077..680344f95 100644
+--- a/Cargo.toml
++++ b/Cargo.toml
+@@ -23,7 +23,7 @@ license = "Apache-2.0 OR BSD-3-Clause"
+ [workspace.dependencies]
+ asn1 = { version = "0.24.1", default-features = false }
+ base64 = "0.22"
+-cc = "1.2.61"
++cc = "1.2.60"
+ cfg-if = "1"
+ foreign-types = "0.3"
+ foreign-types-shared = "0.1"
+-- 
+2.54.0
+

python-cryptography.spec

@@ -5,7 +5,7 @@
 %global srcname cryptography
 
 Name:           python-%{srcname}
-Version:        47.0.0
+Version:        48.0.0
 Release:        %autorelease
 Summary:        PyCA's cryptography library
 
@@ -25,6 +25,10 @@ Source0:        https://github.com/pyca/cryptography/archive/%{version}/%{srcnam
 Source1:        cryptography-%{version}-vendor.tar.bz2
 Source2:        conftest-skipper.py
 
+# Temporarily drop cc dependency to .60 since it's the same as .61
+# except for a docblock change.
+Patch:          0001-Lower-cc-dependency.patch
+
 ExclusiveArch:  %{rust_arches}
 
 BuildRequires:  openssl-devel

sources

@@ -1,2 +1,2 @@
-SHA512 (cryptography-47.0.0-vendor.tar.bz2) = 81329dac4a1dfd3f2db6f2f49c527588e490b250c9ab016963981247446c70768e7453b4496f9f910e722c71ea636478fbab9d1afe633b08bb1f2598c3df0488
-SHA512 (cryptography-47.0.0.tar.gz) = 709540e7f8b0a40c0ca35ccf239d95c294be70a636fb2a569bddadb67e08d26f32fd30ab04db6c50b7a138b04e826cd160a77120bdf4ea4ad02f03c32e3b45d1
+SHA512 (cryptography-48.0.0.tar.gz) = b38d0ae952bd33149c5358bb1fe9c875b55cc438f62ab0c0ab4d30d651e9d44f2895b39194906e7e9503294ca95a19eba6d97b32d319ed36bb38fa05faf89c6b
+SHA512 (cryptography-48.0.0-vendor.tar.bz2) = fddc63507ce64f6e4a6174b043ed789d8b6f5aea7f6110d95a460eb2327ca39a3bef9a87d1e17732d7782a929358ac821c2b84f39682419cfbb101dbdaa94363