fix: resolve remaining Python Dependabot alerts

.github/dependabot.yml

@@ -0,0 +1,54 @@
+version: 2
+
+updates:
+  - package-ecosystem: "pip"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    open-pull-requests-limit: 0
+    assignees:
+      - "kalil0321"
+    groups:
+      python-security:
+        applies-to: "security-updates"
+        patterns:
+          - "*"
+
+  - package-ecosystem: "npm"
+    directory: "/website"
+    schedule:
+      interval: "weekly"
+    open-pull-requests-limit: 0
+    assignees:
+      - "kalil0321"
+    groups:
+      website-security:
+        applies-to: "security-updates"
+        patterns:
+          - "*"
+
+  - package-ecosystem: "npm"
+    directory: "/src/reverse_api/cursor_bridge"
+    schedule:
+      interval: "weekly"
+    open-pull-requests-limit: 0
+    assignees:
+      - "kalil0321"
+    groups:
+      cursor-bridge-security:
+        applies-to: "security-updates"
+        patterns:
+          - "*"
+
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    open-pull-requests-limit: 0
+    assignees:
+      - "kalil0321"
+    groups:
+      actions-security:
+        applies-to: "security-updates"
+        patterns:
+          - "*"

.github/workflows/ci.yml

@@ -0,0 +1,87 @@
+name: CI
+
+on:
+  pull_request:
+  push:
+    branches:
+      - main
+
+permissions:
+  contents: read
+
+jobs:
+  python:
+    name: Python
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check out repository
+        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
+
+      - name: Install uv and Python
+        uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
+        with:
+          python-version: "3.13"
+          enable-cache: true
+
+      - name: Install dependencies
+        run: uv sync --locked --all-extras --dev
+
+      - name: Run tests
+        run: uv run --frozen pytest -q
+
+  website:
+    name: Website
+    runs-on: ubuntu-latest
+    defaults:
+      run:
+        working-directory: website
+    steps:
+      - name: Check out repository
+        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
+
+      - name: Install pnpm
+        uses: pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1 # v4
+        with:
+          version: "10.17.1"
+
+      - name: Install Node.js
+        uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6
+        with:
+          node-version: "22"
+          cache: "pnpm"
+          cache-dependency-path: website/pnpm-lock.yaml
+
+      - name: Install dependencies
+        run: pnpm install --frozen-lockfile
+
+      - name: Check types
+        run: pnpm run types:check
+
+      - name: Lint
+        run: pnpm run lint
+
+      - name: Build
+        run: pnpm run build
+
+  cursor-bridge:
+    name: Cursor Bridge
+    runs-on: ubuntu-latest
+    defaults:
+      run:
+        working-directory: src/reverse_api/cursor_bridge
+    steps:
+      - name: Check out repository
+        uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
+
+      - name: Install Node.js
+        uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6
+        with:
+          node-version: "22"
+          cache: "npm"
+          cache-dependency-path: src/reverse_api/cursor_bridge/package-lock.json
+
+      - name: Install dependencies
+        run: npm ci
+
+      - name: Check bridge syntax
+        run: node --check run.mjs

pyproject.toml

@@ -53,7 +53,7 @@ dependencies = [
     "requests>=2.33.0",
     "aiohttp>=3.13.4",
     "pygments>=2.20.0",
-    "cryptography>=46.0.7",
+    "cryptography>=48.0.1",
 ]
 
 [project.optional-dependencies]