chore(deps): pin pyasn1 >=0.6.4 to fix high-severity Dependabot alerts

[devin-ai-integration]

Summary

Resolves the three open high-severity Dependabot alerts in this repo (all pyasn1, all reported against pyproject.toml since there is no lock file):

• BER/CER/DER decoder DoS via unbounded long-form tag IDs
• Quadratic complexity in OBJECT IDENTIFIER / RELATIVE-OID processing
• Uncontrolled resource consumption when converting decoded REAL values

pyasn1 is transitive (via google-auth → pyasn1-modules, also boto3/rsa paths), so the fix follows the existing precedent in this file for idna: an explicit floor on the transitive dependency.

 idna = ">=3.15,<4"  # transitive dependency via requests, pinned to address CVE-2025-46816
+pyasn1 = ">=0.6.4,<0.7"  # transitive ...

Upper bound <0.7 because 0.6.x is the current stable line and pyasn1-modules pins pyasn1 <0.7. Verified locally: pip install 'pyasn1>=0.6.4' in the project venv resolves cleanly (pip check clean, edr --version works).

Link to Devin session: https://app.devin.ai/sessions/275df1cf5fe6485dba75f41c6c83ab97

Summary by CodeRabbit

• Chores
  • Updated the application’s underlying runtime support to improve security and compatibility.
  • No changes to user-facing features, workflows, or public interfaces.

[devin-ai-integration]

🤖 Devin AI Engineer

I'll be helping with this pull request! Here's what you should know:

✅ I will automatically:

• Address comments on this PR. Add '(aside)' to your comment to have me ignore it.
• Look at CI failures and help fix them

Note: I can only respond to comments from users who have write access to this repository.

⚙️ Control Options:

• Disable automatic comment, CI, and merge conflict monitoring

[github-actions]

👋 @devin-ai-integration[bot]
Thank you for raising your pull request.
Please make sure to add tests and document all user-facing changes.
You can do this by editing the docs files in this pull request.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: 5dd2f146-e27b-4f30-8351-5dfb98d16d50

📥 Commits

Reviewing files that changed from the base of the PR and between 594b89d and 50339d0.

📒 Files selected for processing (1)

• pyproject.toml

---

📝 Walkthrough

Walkthrough

The project metadata adds pyasn1 as a runtime dependency with the bounded version range >=0.6.4,<0.7.

Changes

Runtime dependency

Layer / File(s)	Summary
Declare pyasn1 runtime dependency pyproject.toml	Adds pyasn1 with the version constraint >=0.6.4,<0.7.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Suggested reviewers: web-flow

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly describes pinning the pyasn1 dependency to address high-severity security alerts.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch devin/dependabot-pyasn1-1785639935

---

_{Comment @coderabbitai help to get the list of available commands.}