chore: update pynacl requirement from >=1.5.0 to >=1.6.2

[dependabot]

Updates the requirements on pynacl to permit the latest version.

Changelog

Sourced from pynacl's changelog.

1.6.2 (2026-01-01)

• Updated libsodium to 1.0.20-stable (2025-12-31 build) to resolve CVE-2025-69277.

1.6.1 (2025-11-10)

• The MAKE environment variable can now be used to specify the make binary that should be used in the build process.

1.6.0 (2025-09-11)

• BACKWARDS INCOMPATIBLE: Removed support for Python 3.6 and 3.7.
• Added support for the low level AEAD AES bindings.
• Added support for crypto_core_ed25519_from_uniform.
• Update libsodium to 1.0.20-stable (2025-08-27 build).
• Added support for free-threaded Python 3.14.
• Added support for Windows on ARM wheels.

1.5.0 (2022-01-07)

• BACKWARDS INCOMPATIBLE: Removed support for Python 2.7 and Python 3.5.
• BACKWARDS INCOMPATIBLE: We no longer distribute manylinux1 wheels.
• Added manylinux2014, manylinux_2_24, musllinux, and macOS universal2 wheels (the latter supports macOS arm64).
• Update libsodium to 1.0.18-stable (July 25, 2021 release).
• Add inline type hints.

1.4.0 (2020-05-25)

• Update libsodium to 1.0.18.
• BACKWARDS INCOMPATIBLE: We no longer distribute 32-bit manylinux1 wheels. Continuing to produce them was a maintenance burden.
• Added support for Python 3.8, and removed support for Python 3.4.
• Add low level bindings for extracting the seed and the public key from crypto_sign_ed25519 secret key
• Add low level bindings for deterministic random generation.
• Add wheel and setuptools setup_requirements in setup.py (#485)
• Fix checks on very slow builders (#481, #495)
• Add low-level bindings to ed25519 arithmetic functions
• Update low-level blake2b state implementation
• Fix wrong short-input behavior of SealedBox.decrypt() (#517)
• Raise CryptPrefixError exception instead of InvalidkeyError when trying to check a password against a verifier stored in a unknown format (#519)
• Add support for minimal builds of libsodium. Trying to call functions not available in a minimal build will raise an UnavailableError exception. To compile a minimal build of the bundled libsodium, set

... (truncated)

Commits

• ecf41f5 changelog and version bump for 1.6.2 (#923)
• 685a5e7 Switch to PyPI trusted publishing (#925)
• 78e0aa3 missed adding these files as part of the libsodium update (#924)
• 9631488 Bump libsodium to the latest 1.0.20 (#922)
• 563b25b Add script to update vendored libsodium (#921)
• d233105 Include libsodium license in wheels (#917)
• cabc3a8 Bump dessant/lock-threads from 5 to 6 (#914)
• f359617 Bump actions/download-artifact from 6.0.0 to 7.0.0 (#915)
• fb6e37f Bump actions/upload-artifact from 5 to 6 (#916)
• 526f992 Bump actions/checkout from 6.0.0 to 6.0.1 (#911)
• Additional commits viewable in compare view

[dependabot]

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Advanced

Run ID: c4ba316c-5d9d-4898-90cc-060cacd7cb9d

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}