fix(deps): cap cryptography <49 to keep Intel macOS universal2 wheel (#859)

cryptography 49.x ships arm64-only macOS wheels (no universal2), forcing the
Intel macOS (macos-x86_64) release runner to build from sdist under
`uv sync --frozen`. Pin to 48.0.1, which still clears GHSA-537c-gmf6-5ccf
(fixed in 48.0.1) and provides a macosx_10_9_universal2 wheel.
This commit is contained in:
alex s
2026-07-22 16:56:15 -04:00
committed by GitHub
parent 473b3c4af1
commit 137a42c3e3
2 changed files with 48 additions and 43 deletions
+3 -1
View File
@@ -46,7 +46,9 @@ dependencies = [
"caido-sdk-client>=0.2.0",
"reportlab>=4.0",
"pypdf>=5.0",
"cryptography>=48.0.1",
# Cap <49: 49.x drops the universal2 macOS wheel (arm64-only), which breaks
# the Intel macOS (macos-x86_64) release build's `uv sync --frozen`.
"cryptography>=48.0.1,<49",
]
[project.optional-dependencies]