Skip to content

cryptography dependency pinned too tightly (patch-level pin) #500

Description

@payamnj

`pyproject.toml` pins `cryptography` at patch level:

```toml
"cryptography (>=48.0.0,<48.1.0)"
```

This causes dependency conflicts for any integrator who already has `cryptography>=48.1.0` installed. The standard pattern for open-source packages is to pin to the major version.

Fix: change to `>=48.0.0,<49.0.0` and audit other core dependencies for similar over-pinning.

Metadata

Metadata

Assignees

No one assigned

    Type

    No type
    No fields configured for issues without a type.

    Projects

    Status
    Done

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions