Skip to content

Unpinning Cryptography#684

Draft
freyes wants to merge 7 commits intoopenstack-charmers:masterfrom
freyes:cryptography-pinning
Draft

Unpinning Cryptography#684
freyes wants to merge 7 commits intoopenstack-charmers:masterfrom
freyes:cryptography-pinning

Conversation

@freyes
Copy link
Member

@freyes freyes commented May 15, 2025

Fixes #421

freyes added 6 commits May 14, 2025 09:39
The commit 29944df pinned hvac to `<0.7.0`, because it was breaking the
tests, this is no longer necessary.
Pass `--no-binary ":all:"` to the tox install_command, so all
dependencies get built from sources, this allows to detect possible
issues when using zaza in non-x86 environments where there is no
published binary wheel in pypi.
This is the last version compatible with Python 3.8

https://pypi.org/project/importlib-metadata/7.2.1/
@freyes freyes closed this May 16, 2025
@freyes freyes reopened this May 16, 2025
@chanchiwai-ray
Copy link

chanchiwai-ray commented Jun 3, 2025

Hi @freyes, thanks for working on this, and we would like to see this eventually unpinned. For the issue seen in the CI, we've seen that before for python 3.8, and it worked well if "setuptool_scm<8.2.0" is in the constraints (instead of a requirement) see canonical/charm-logrotated#72 for example. Hope that helps

Pinning pydocstyle before flake8 allows us to control the version,
otherwise flake8 pulls in a newer version.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[Tracking][security] cryptography is pinned < 3.4 due to rust; needs resolving over time

2 participants