Skip to content

Commit dec87b9

Browse files
authored
Drop upper bounds on cryptography and pyopenssl
These are security critical dependencies. Bounds here limit people's ability to respond to vulnerabilities. See also https://iscinumpy.dev/post/bound-version-constraints/
1 parent 1de6adb commit dec87b9

1 file changed

Lines changed: 2 additions & 2 deletions

File tree

setup.py

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -32,8 +32,8 @@ def open_relative(*path):
3232
requires = [
3333
"certifi",
3434
"configparser==4.0.2 ; python_version < '3'",
35-
"cryptography>=3.2.1,<46.0.0",
36-
"pyOpenSSL>=17.5.0,<25.0.0",
35+
"cryptography>=3.2.1",
36+
"pyOpenSSL>=17.5.0",
3737
"python-dateutil>=2.5.3,<3.0.0",
3838
"pytz>=2016.10",
3939
"circuitbreaker>=1.3.1,<2.0.0; python_version <= '3.6'",

0 commit comments

Comments
 (0)