diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml
index 208cd25..ae266b1 100644
--- a/.github/workflows/test.yaml
+++ b/.github/workflows/test.yaml
@@ -14,6 +14,8 @@ on:
 jobs:
   lint:
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
     steps:
       - uses: actions/checkout@v6
       - uses: actions/setup-python@v6
@@ -40,6 +42,7 @@ jobs:
       # So the environment should be set to have a reviewer/s inspect it before approving it
       name: ${{ github.event_name == 'pull_request_target' && 'Test Pull Request' || 'Test Auto'  }}
     runs-on: ubuntu-latest
+    permissions: {}
     steps:
       - name: Wait for approval
         run: echo "Approved"
@@ -109,6 +112,7 @@ jobs:
     runs-on: ubuntu-latest
     needs: test
     if: always()
+    permissions: {}
     steps:
       - name: Fail on workflow error
         run: exit 1
diff --git a/AWS/mqtt_logger.py b/AWS/mqtt_logger.py
index 3b624f0..5c0dea9 100644
--- a/AWS/mqtt_logger.py
+++ b/AWS/mqtt_logger.py
@@ -13,7 +13,6 @@
 
 from .date import to_date, RelativeTime
 
-
 # Configure logging
 logger = logging.getLogger("AWSIoTPythonSDK.core")
 logger.setLevel(logging.DEBUG)
diff --git a/pyproject.toml b/pyproject.toml
index 56ec844..5816c4e 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -26,7 +26,7 @@ dependencies = [
   "dotmap >= 1.3.30, < 1.4.0",
   "boto3 >= 1.35.7, < 1.36.0",
   "botocore >= 1.35.7, < 1.36.0",
-  "cryptography >= 44.0.2, < 45.0.0",
+  "cryptography >= 46.0.6, < 47.0.0",
   "randomname >= 0.1.5, < 0.2.0",
   "tenacity >= 8.1.0, < 8.2.0",
   "AWSIoTPythonSDK >= 1.5.4, < 2.0.0",