setup, packaging: pin cryptography package and update dependencies
Metadata
Current evaluation
Merged. Pins the cryptography package and updates dependencies to prevent build failures on armhf, ppc64el, and s390x architectures by avoiding versions requiring a Rust compiler. Approved and passed CI checks.
Suggested action: —
No scores available.
Issue body
cryptography is not needed as a direct dependency, but it will be brought in
newer versions from other dependencies, and the new ones need a Rust compiler
which is not present in armhf, ppc64el and s390x architectures.
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| qwen/qwen3.6-35b-a3b | — | — | Merged. Pins the cryptography package and updates dependencies to prevent build failures on armhf, ppc64el, and s390x architectures by avoiding versions requiring a Rust compiler. Approved and passed CI checks. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | Merged changes pinning the cryptography package and updating dependencies. This prevents newer cryptography versions from being pulled in, avoiding build failures on armhf, ppc64el, and s390x architectures that lack a Rust compiler. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | Merged changes pinning the cryptography package and updating dependencies. This prevents newer cryptography versions from being pulled in, resolving build failures on armhf, ppc64el, and s390x architectures that lack a Rust compiler. |
Update history
No update history recorded yet.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #3447 snap: pin cryptography to 3.4 | snapcraft | merged | Merged changes pinning cryptography to version 3.4, resolving a pip KeyError and build failure on s390x architecture during Snapcraft packaging. Approved and passed CI. | |
| #423 fix(build): upgrade rust for cryptography | imagecraft | merged | Merged a build fix upgrading the Rust toolchain to resolve cryptography dependencies. Approved by a reviewer, all CI checks passed, and the change modified three files with a net reduction of seven lines. | |
| #1327 build: bump dependencies constrained by rustc version | rockcraft | merged | Merged after two approvals. Bumps dependencies constrained by an older rustc version, resolving an OSV vulnerability in cryptography. | |
| #3444 snap: explicitly add setuptools-rust package to python-packages | snapcraft | closed | Rejected due to build failures on s390x and ppc64el. Reviewer advised pinning the cryptography version or using the CRYPTOGRAPHY_DONT_BUILD_RUST=1 environment variable instead of adding setuptools-rust and rustc to the build dependencies. | |
| #1055 build(deps): bump cryptography | craft-application | merged | Merged after bumping the cryptography dependency to resolve an OSV security vulnerability. Approved by two reviewers and passed all CI checks, including security scans and multi-platform tests. |