Updater additions: cryptography46.0.7, cffi2.1.1, pycparser3.12. Official source archives and wheel notices retained. Linux cryptography reports bundled OpenSSL3.5.6; its Apache2 license is included. Windows owner records actual wheel/backend versions. No release-signing private key or customer receipt belongs in distribution. Existing0.9.2 dependency-source collection plus Windows codec appendix remains applicable to unchanged libraries.

Rust dependencies: all 36 registry crates in the official cryptography Cargo.lock are retained under rust-dependencies, verified against their lockfile SHA-256 hashes. Their distributed license and notice files are reproduced alongside the source archives. This includes build/test dependencies as a conservative source superset.
