Fix dependency upgrades (#15740)

* Update dependencies to fix offline build

* Downgrade cryptography due to compatibility issue with openssl

* Downgrade setuptools

* Run update script to assure constraints work

* Maintain pin on cryptography

* Small adjustment to comment

---------

Co-authored-by: Satoe Imaishi <simaishi@redhat.com>
This commit is contained in:
Alan Rominger
2025-01-10 16:18:48 -05:00
committed by GitHub
parent 3e50b019e0
commit c1572af1d4
4 changed files with 27 additions and 25 deletions

View File

@@ -8,7 +8,7 @@ boto3
botocore
channels
channels-redis
cryptography>=41.0.7 # CVE-2023-49083
cryptography<42.0.0 # investigation is needed for 42+ to work with OpenSSL v3.0.x (RHEL 9.4) and v3.2.x (RHEL 9.5)
Cython
daphne
distro
@@ -33,7 +33,7 @@ JSON-log-formatter
jsonschema
Markdown # used for formatting API help
maturin # pydantic-core build dep
msgpack<1.0.6 # 1.0.6+ requires cython>=3
msgpack
msrestazure
openshift
opentelemetry-api~=1.24 # new y streams can be drastically different, in a good way
@@ -63,7 +63,7 @@ uWSGI
uwsgitop
wheel>=0.38.1 # CVE-2022-40898
pip==21.2.4 # see UPGRADE BLOCKERs
setuptools # see UPGRADE BLOCKERs
setuptools<71.0.0 # see UPGRADE BLOCKERs, path hack in v71 breaks irc deps
setuptools_scm[toml] # see UPGRADE BLOCKERs, xmlsec build dep
setuptools-rust>=0.11.4 # cryptography build dep
pkgconfig>=1.5.1 # xmlsec build dep - needed for offline build