- Add Make-unsafe-subinterpreter-support-available-via-cfg.patch

to allow ceph-mgr to load modules (boo#1248987)

OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-cryptography?expand=0&rev=252

Make-unsafe-subinterpreter-support-available-via-cfg.patch

@@ -7,10 +7,8 @@ Subject: [PATCH] Make unsafe subinterpreter support available via cfg flag
  src/impl_/pymodule.rs | 2 +-
  1 file changed, 1 insertion(+), 1 deletion(-)
 
-Index: cryptography-46.0.2/vendor/pyo3-0.26.0/src/impl_/pymodule.rs
-===================================================================
---- cryptography-46.0.2.orig/vendor/pyo3-0.26.0/src/impl_/pymodule.rs
-+++ cryptography-46.0.2/vendor/pyo3-0.26.0/src/impl_/pymodule.rs
+--- a/vendor/pyo3-0.25.1/src/impl_/pymodule.rs
++++ b/vendor/pyo3-0.25.1/src/impl_/pymodule.rs
 @@ -100,7 +100,7 @@ impl ModuleDef {
          // that static data is not reused across interpreters.
          //
@@ -20,27 +18,23 @@ Index: cryptography-46.0.2/vendor/pyo3-0.26.0/src/impl_/pymodule.rs
          {
              // PyInterpreterState_Get is only available on 3.9 and later, but is missing
              // from python3.dll for Windows stable API on 3.9
-Index: cryptography-46.0.2/Cargo.toml
-===================================================================
---- cryptography-46.0.2.orig/Cargo.toml
-+++ cryptography-46.0.2/Cargo.toml
+--- a/Cargo.toml
++++ b/Cargo.toml
 @@ -29,3 +29,6 @@ openssl-sys = "0.9.108"
  
  [profile.release]
  overflow-checks = true
 +
 +[patch.crates-io]
-+pyo3 = { path="vendor/pyo3-0.26.0" }
-Index: cryptography-46.0.2/Cargo.lock
-===================================================================
---- cryptography-46.0.2.orig/Cargo.lock
-+++ cryptography-46.0.2/Cargo.lock
-@@ -276,8 +276,6 @@ dependencies = [
++pyo3 = { path="vendor/pyo3-0.25.1" }
+--- a/Cargo.lock
++++ b/Cargo.lock
+@@ -269,8 +269,6 @@ dependencies = [
  [[package]]
  name = "pyo3"
- version = "0.26.0"
+ version = "0.25.1"
 -source = "registry+https://github.com/rust-lang/crates.io-index"
--checksum = "7ba0117f4212101ee6544044dae45abe1083d30ce7b29c4b5cbdfa2354e07383"
+-checksum = "8970a78afe0628a3e3430376fc5fd76b6b45c4d43360ffd6cdd40bdde72b682a"
  dependencies = [
   "indoc",
   "libc",

cryptography-45.0.5.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:72e76caa004ab63accdf26023fccd1d087f6d90ec6048ff33ad0445abf7f605a
+size 744903

cryptography-46.0.2.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:21b6fc8c71a3f9a604f028a329e5560009cc4a3a828bfea5fcba8eb7647d88fe
-size 749293

no-pytest_benchmark.patch

@@ -1,17 +1,17 @@
-Index: cryptography-46.0.2/pyproject.toml
+Index: cryptography-45.0.5/pyproject.toml
 ===================================================================
---- cryptography-46.0.2.orig/pyproject.toml
-+++ cryptography-46.0.2/pyproject.toml
-@@ -72,8 +72,6 @@ nox = ["nox[uv] >=2024.04.15"]
+--- cryptography-45.0.5.orig/pyproject.toml
++++ cryptography-45.0.5/pyproject.toml
+@@ -67,8 +67,6 @@ nox = ["nox >=2024.04.15", "nox[uv] >=20
  test = [
-     "cryptography_vectors==46.0.2",
+     "cryptography_vectors==45.0.5",
      "pytest >=7.4.0",
 -    "pytest-benchmark >=4.0",
 -    "pytest-cov >=2.10.1",
      "pytest-xdist >=3.5.0",
      "pretend >=0.7",
      "certifi >=2024",
-@@ -134,7 +132,7 @@ exclude = [
+@@ -129,7 +127,7 @@ exclude = [
  ]
  
  [tool.pytest.ini_options]
@@ -20,7 +20,7 @@ Index: cryptography-46.0.2/pyproject.toml
  console_output_style = "progress-even-when-capture-no"
  markers = [
      "skip_fips: this test is not executed in FIPS mode",
-@@ -155,30 +153,6 @@ strict_bytes = true
+@@ -150,30 +148,6 @@ strict_bytes = true
  module = ["pretend"]
  ignore_missing_imports = true
  
@@ -51,10 +51,10 @@ Index: cryptography-46.0.2/pyproject.toml
  [tool.ruff]
  line-length = 79
  
-Index: cryptography-46.0.2/tests/bench/test_aead.py
+Index: cryptography-45.0.5/tests/bench/test_aead.py
 ===================================================================
---- cryptography-46.0.2.orig/tests/bench/test_aead.py
-+++ cryptography-46.0.2/tests/bench/test_aead.py
+--- cryptography-45.0.5.orig/tests/bench/test_aead.py
++++ cryptography-45.0.5/tests/bench/test_aead.py
 @@ -26,84 +26,84 @@ def _aead_supported(cls):
      not _aead_supported(ChaCha20Poly1305),
      reason="Requires OpenSSL with ChaCha20Poly1305 support",
@@ -160,10 +160,10 @@ Index: cryptography-46.0.2/tests/bench/test_aead.py
      ct = aes.encrypt(b"\x00" * 12, b"hello world plaintext", None)
 -    benchmark(aes.decrypt, b"\x00" * 12, ct, None)
 +    aes.decrypt(b"\x00" * 12, ct, None)
-Index: cryptography-46.0.2/tests/bench/test_ec_load.py
+Index: cryptography-45.0.5/tests/bench/test_ec_load.py
 ===================================================================
---- cryptography-46.0.2.orig/tests/bench/test_ec_load.py
-+++ cryptography-46.0.2/tests/bench/test_ec_load.py
+--- cryptography-45.0.5.orig/tests/bench/test_ec_load.py
++++ cryptography-45.0.5/tests/bench/test_ec_load.py
 @@ -5,9 +5,9 @@
  from ..hazmat.primitives.fixtures_ec import EC_KEY_SECP256R1
  
@@ -178,10 +178,10 @@ Index: cryptography-46.0.2/tests/bench/test_ec_load.py
 -    benchmark(EC_KEY_SECP256R1.private_key)
 +def test_load_ec_private_numbers():
 +    EC_KEY_SECP256R1.private_key()
-Index: cryptography-46.0.2/tests/bench/test_hashes.py
+Index: cryptography-45.0.5/tests/bench/test_hashes.py
 ===================================================================
---- cryptography-46.0.2.orig/tests/bench/test_hashes.py
-+++ cryptography-46.0.2/tests/bench/test_hashes.py
+--- cryptography-45.0.5.orig/tests/bench/test_hashes.py
++++ cryptography-45.0.5/tests/bench/test_hashes.py
 @@ -5,10 +5,10 @@
  from cryptography.hazmat.primitives import hashes
  
@@ -195,10 +195,10 @@ Index: cryptography-46.0.2/tests/bench/test_hashes.py
  
 -    benchmark(bench)
 +    bench()
-Index: cryptography-46.0.2/tests/bench/test_hmac.py
+Index: cryptography-45.0.5/tests/bench/test_hmac.py
 ===================================================================
---- cryptography-46.0.2.orig/tests/bench/test_hmac.py
-+++ cryptography-46.0.2/tests/bench/test_hmac.py
+--- cryptography-45.0.5.orig/tests/bench/test_hmac.py
++++ cryptography-45.0.5/tests/bench/test_hmac.py
 @@ -5,10 +5,10 @@
  from cryptography.hazmat.primitives import hashes, hmac
  
@@ -212,10 +212,10 @@ Index: cryptography-46.0.2/tests/bench/test_hmac.py
  
 -    benchmark(bench)
 +    bench()
-Index: cryptography-46.0.2/tests/bench/test_x509.py
+Index: cryptography-45.0.5/tests/bench/test_x509.py
 ===================================================================
---- cryptography-46.0.2.orig/tests/bench/test_x509.py
-+++ cryptography-46.0.2/tests/bench/test_x509.py
+--- cryptography-45.0.5.orig/tests/bench/test_x509.py
++++ cryptography-45.0.5/tests/bench/test_x509.py
 @@ -13,40 +13,40 @@ from cryptography import x509
  from ..utils import load_vectors_from_file
  

python-cryptography.changes

@@ -1,46 +1,3 @@
--------------------------------------------------------------------
-Mon Oct 13 09:32:39 UTC 2025 - Dirk Müller <dmueller@suse.com>
-
-- update to 46.0.2:
-  * Updated Windows, macOS, and Linux wheels to be compiled with
-    OpenSSL 3.5.4.
-  * Fixed an issue where users installing via pip on Python 3.14
-    development versions would not properly install a dependency.
-  * Fixed an issue building the free-threaded macOS 3.14 wheels.
-  * BACKWARDS INCOMPATIBLE: Support for Python 3.7 has been
-    removed.
-  * Support for OpenSSL < 3.0 is deprecated and will be removed
-    in the next release.
-  * Support for x86_64 macOS (including publishing wheels) is
-    deprecated and will be removed in two releases. We will
-    switch to publishing an arm64 only wheel for macOS.
-  * Support for 32-bit Windows (including publishing wheels) is
-    deprecated and will be removed in two releases. Users should
-    move to a 64-bit Python installation.
-  * Updated Windows, macOS, and Linux wheels to be compiled with
-    OpenSSL 3.5.3.
-  * We now build ppc64le manylinux wheels and publish them to
-    PyPI.
-  * We now build win_arm64 (Windows on Arm) wheels and publish
-    them to PyPI.
-  * Added support for free-threaded Python 3.14.
-  * Removed the deprecated get_attribute_for_oid method on
-    :class:`~cryptography.x509.CertificateSigningRequest`. Users
-    should use
-    :meth:`~cryptography.x509.Attributes.get_attribute_for_oid`
-    instead.
-  * Removed the deprecated CAST5, SEED, IDEA, and Blowfish
-    classes from the cipher module. These are still available in
-    :doc:`/hazmat/decrepit/index`.
-  * In X.509, when performing a PSS signature with a SHA-3 hash,
-    it is now encoded with the official NIST SHA3 OID.
-
--------------------------------------------------------------------
-Sun Sep 14 20:45:39 UTC 2025 - Dirk Müller <dmueller@suse.com>
-
-- update to 45.0.7:
-  * Added a function to support an upcoming pyOpenSSL release.
-
 -------------------------------------------------------------------
 Mon Sep  1 14:46:55 UTC 2025 - James Oakley <jfunk@opensuse.org>
 
@@ -210,8 +167,8 @@ Sun Jan 26 10:59:13 UTC 2025 - Soc Virnyl Estela <uncomfyhalomacro@opensuse.org>
     :class:`~cryptography.hazmat.primitives.kdf.argon2.Argon2id` when using
     OpenSSL 3.2.0+.
   * Added support for the :class:`~cryptography.x509.Admissions` certificate extension.
-  * Added basic support for PKCS7 decryption (including S/MIME 3.2) via
-    :func:`~cryptography.hazmat.primitives.serialization.pkcs7.pkcs7_decrypt_der`,
+  * Added basic support for PKCS7 decryption (including S/MIME 3.2) via 
+    :func:`~cryptography.hazmat.primitives.serialization.pkcs7.pkcs7_decrypt_der`, 
     :func:`~cryptography.hazmat.primitives.serialization.pkcs7.pkcs7_decrypt_pem`,
     and :func:`~cryptography.hazmat.primitives.serialization.pkcs7.pkcs7_decrypt_smime`.
 - Update specfile to accommodate new project structure at version 44.0.0

python-cryptography.spec

@@ -28,7 +28,7 @@
 %{?sle15_python_module_pythons}
 Name:           python-cryptography%{psuffix}
 # ALWAYS KEEP IN SYNC WITH python-cryptography-vectors!
-Version:        46.0.2
+Version:        45.0.5
 Release:        0
 Summary:        Python library which exposes cryptographic recipes and primitives
 License:        Apache-2.0 OR BSD-3-Clause

vendor.tar.zst

@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:ea523052eeeb087bbce1ae07a0202f4ec17c525855d21d34e9162b51bc30f50d
-size 2684695
+oid sha256:66027fde33c455f0cb3d01f7daba90d0e8a87378f1b48bcc5cb23bc2fb9c98bb
+size 2651262