Browse Source

Merge JoinMarket-Org/joinmarket-clientserver#1579: Bump `cryptography` to 41.0.4 for all platforms

70366ffede Bump cryptography to 41.0.4 for all platforms (Kristaps Kaupe)

Pull request description:

  Remove conditions for old `cryptography` for 32-bit platforms. Back in a day it was pinned to v3.3.2, because newer versions introduced Rust as a dependency and 32-bit platforms don't have pre-built wheels. I think we should get rid of this hack - 1) not much people are running 32-bit OSes anymore (years ago default Raspberry Pi OS was 32-bit even for 64-bit boards, that's not true anymore), 2) none of developers actually tests stuff on these platforms and against such old `cryptography` versions, 3) it should be still possible to use JM with 32-bit archs, just local installation of Rust will be needed to build.

  Also bump to v41.0.4, as v41.0.2 and v41.0.3 is statically linked with vulnerable versions of OpenSSL (although these vulnerabilities should not affect JM).

ACKs for top commit:
  roshii:
    utACK 70366ffede

Tree-SHA512: 57a75a21f38d0e793bafc89bacf5487131a4848e2a1fbd72c281e84ca5c64bc673a91d1484bb5fd4ec3c69d07a333a12bceb5cabe0e5eb76b62f9631a83b6732
master
Kristaps Kaupe 2 years ago
parent
commit
9654bce2ce
No known key found for this signature in database
GPG Key ID: 33E472FE870C7E5D
  1. 3
      pyproject.toml

3
pyproject.toml

@ -11,11 +11,10 @@ requires-python = ">=3.7"
license = {file = "LICENSE"}
dependencies = [
"chromalog==1.0.5",
"cryptography==41.0.4",
"service-identity==21.1.0",
"twisted==22.4.0",
"txtorcon==23.0.0",
'cryptography==3.3.2; platform_machine != "aarch64" and platform_machine != "amd64" and platform_machine != "x86_64"',
'cryptography==41.0.2; platform_machine == "aarch64" or platform_machine == "amd64" or platform_machine == "x86_64"',
]
[project.optional-dependencies]

Loading…
Cancel
Save