packages/lang/python/python-cryptography/Makefile, branch master

python-cryptography: use the build system's Rust support

2026-11-02T07:41:54Z

Include rust-values.mk of the build system, take its build dependencies, and build from a vendor tarball generated from the PyPI archive, so that cargo builds offline. Signed-off-by: Daniel Golle

python: include rust-values.mk in the Rust packages only

2026-11-02T07:41:54Z

python3-host.mk includes the Rust values of lang/rust for every Python package. The build system's cmake.mk and meson.mk react to Rust variables, so packages without any Rust in them get Rust settings, and a Python package moving to the build system's Rust toolchain would get both sets of values. Include rust-values.mk in the six packages that use its variables. The variables in PYTHON3_VARS and HOST_PYTHON3_VARS are expanded late, so the place of the include does not matter. Signed-off-by: Daniel Golle

python-cryptography: update to 50.0.2

2026-10-12T09:43:40Z

Update to the latest upstream release and drop 001-cffi-build-rs-derive-include-from-pyo3-cross.patch, which is part of this release. Signed-off-by: Alexandru Ardelean

python-cryptography: update to 48.0.0 + backport cross-include fix

2026-05-29T03:41:17Z

Bump from 46.0.7 to the current 48.0.0 release. Notable upstream changes since 46.0.7: - 48.0.0 drops Python 3.8 support (requires 3.9+); raises Py_LIMITED_API floor to 0x030900f0. - Adds ML-KEM / ML-DSA post-quantum primitives via OpenSSL 3.5.0+ (in addition to existing AWS-LC / BoringSSL paths). - BACKWARDS INCOMPATIBLE: stricter X.509 CRL signature-algorithm matching (mismatched inner/outer algs now raise ValueError at parse time). - Drops 32-bit Windows wheels and ships macOS only on arm64. Replace the old downstream cross-compile fix with a backport of the upstream-merged version from pyca/cryptography PR #14904 (commit 5d072cb2a685, scheduled for the release after 48.0.0). Release notes: https://cryptography.io/en/latest/changelog/#v48-0-0 Fixes: https://github.com/openwrt/packages/issues/29521 Signed-off-by: Alexandru Ardelean

python3-cryptography: update to 46.0.7

2026-04-11T09:56:34Z

Update package to 46.0.7. Security fix: - CVE-2026-39892: Non-contiguous buffers could be passed to Python buffer APIs potentially causing a buffer overflow -- now blocked Wheels recompiled against OpenSSL 3.5.6 on Windows, macOS, and Linux. Signed-off-by: Alexandru Ardelean

python-cryptography: bump to 46.0.6

2026-04-05T12:03:06Z

Starting with 46.x, cryptography switched its build backend from setuptools-rust to maturin. Update PKG_BUILD_DEPENDS accordingly: replace python-setuptools-rust/host with python-maturin/host and python-setuptools/host (setuptools is still required by cffi). Drop 001-Update-ouroboros.patch: the ouroboros crate is no longer a dependency in 46.x, so the patch (which bumped it from 0.15 to 0.18 to fix RUSTSEC-2023-0042) no longer applies. Signed-off-by: Alexandru Ardelean

python3: merge python3-email into python3-urllib

2026-04-04T15:27:26Z

As we're seeing in various test.sh scrip runs, importing 'email' fails with not finding 'urllib' and vice-versa. Then via a7e96ec91 ("python3-email: add python3-urllib as dependency") I created a circular dependency. So, might as well merge the two packages into one (named python3-urllib) and updates all dependencies to pull python3-urllib. Signed-off-by: Alexandru Ardelean

treewide: remove myself as maintainer

2026-03-13T17:53:21Z

slide-switch is my software, I choose to continue to be sole maintainer. (This was also the case in #28429.) Signed-off-by: Jeffery To

treewide: add me as co-maintainer to Jeffery's packages

2026-03-13T17:04:53Z

Add 'Alexandru Ardelean ' as co-maintainer alongside Jeffery To for all packages where Jeffery To is listed as maintainer. Supersedes PR: https://github.com/openwrt/packages/pull/28429 We can have another PR where Jeffery removes himself later. Signed-off-by: Alexandru Ardelean

python-cryptography: fix PKG_CPE_ID

2025-09-20T15:13:41Z

cryptography_project:cryptography has been deprecated in favour of cryptography.io:cryptography: https://nvd.nist.gov/products/cpe/detail/2EBA50FC-F3F9-40D5-82BD-EFB67F761153 Signed-off-by: Fabrice Fontaine