From 4e39aa55098734f27f83f4ade53fbb71879255dc Mon Sep 17 00:00:00 2001 From: Dan Callaghan Date: Sun, 18 Jul 2021 13:18:10 +1000 Subject: [PATCH] relax cryptography dependency version requirement In Fedora, python-cryptography does not bundle OpenSSL, so it's always up to date. This strict version requirement is not necessary. See: https://bugzilla.redhat.com/show_bug.cgi?id=1978949 --- synapse/python_dependencies.py | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/synapse/python_dependencies.py b/synapse/python_dependencies.py index 1dd39f06cf..2b83353b76 100644 --- a/synapse/python_dependencies.py +++ b/synapse/python_dependencies.py @@ -78,9 +78,7 @@ REQUIREMENTS = [ "bleach>=1.4.3", # We use `ParamSpec`, which was added in `typing-extensions` 3.10.0.0. "typing-extensions>=3.10.0", - # We enforce that we have a `cryptography` version that bundles an `openssl` - # with the latest security patches. - "cryptography>=3.4.7", + "cryptography>=3.4", # ijson 3.1.4 fixes a bug with "." in property names "ijson>=3.1.4", "matrix-common~=1.1.0", -- 2.35.1