Revert "[py] Update dependency cryptography to v45.0.6"

[cgoldberg]

User description

Reverts #16240

This is failing in CI... need to figure out why.

---

PR Type

Other

---

Description

• Reverts cryptography dependency from v45.0.6 to v45.0.5

• Updates requirements.txt and requirements_lock.txt files

• Addresses CI failures caused by the newer version

---

Diagram Walkthrough

flowchart LR
  A["cryptography v45.0.6"] -- "revert due to CI failures" --> B["cryptography v45.0.5"]
  B --> C["Updated requirements files"]

Loading

File Walkthrough

Relevant files

Dependencies

requirements.txt Revert cryptography version downgrade                                        py/requirements.txt Reverts cryptography version from 45.0.6 to 45.0.5 +1/-1      requirements_lock.txt Update locked dependency hashes                                                    py/requirements_lock.txt Updates all cryptography package hashes for version 45.0.5 Removes v45.0.6 hashes and adds corresponding v45.0.5 hashes +38/-38

---

[qodo-code-review]

PR Reviewer Guide 🔍

Here are some key observations to aid the review process:

⏱️ Estimated effort to review: 1 🔵⚪⚪⚪⚪

🧪 No relevant tests

🔒 Security concerns Potential downgrade risk: Reverting a cryptography library version can reintroduce previously fixed security or compatibility issues. Confirm 45.0.5 does not miss critical security patches present in 45.0.6, and consider documenting a follow-up issue to root-cause the CI failure with 45.0.6.

⚡ Recommended focus areas for review Compatibility Risk Reverting a security/crypto library may resolve CI but can reintroduce fixes from 45.0.6; validate that dependent packages and runtime environments still work and that the revert is scoped to only this dependency. cryptography==45.0.5 debugpy==1.8.14 Hash Accuracy Ensure all pinned hashes exactly match cryptography 45.0.5 for every supported platform/ABI and that no 45.0.6 hashes remain; a single mismatch will break deterministic installs. cryptography==45.0.5 \ --hash=sha256:0027d566d65a38497bc37e0dd7c2f8ceda73597d2ac9ba93810204f56f52ebc7 \ --hash=sha256:101ee65078f6dd3e5a028d4f19c07ffa4dd22cce6a20eaa160f8b5219911e7d8 \ --hash=sha256:12e55281d993a793b0e883066f590c1ae1e802e3acb67f8b442e721e475e6463 \ --hash=sha256:14d96584701a887763384f3c47f0ca7c1cce322aa1c31172680eb596b890ec30 \ --hash=sha256:1e1da5accc0c750056c556a93c3e9cb828970206c68867712ca5805e46dc806f \ --hash=sha256:206210d03c1193f4e1ff681d22885181d47efa1ab3018766a7b32a7b3d6e6afd \ --hash=sha256:2089cc8f70a6e454601525e5bf2779e665d7865af002a5dec8d14e561002e135 \ --hash=sha256:3a264aae5f7fbb089dbc01e0242d3b67dffe3e6292e1f5182122bdf58e65215d \ --hash=sha256:3af26738f2db354aafe492fb3869e955b12b2ef2e16908c8b9cb928128d42c57 \ --hash=sha256:3fcfbefc4a7f332dece7272a88e410f611e79458fab97b5efe14e54fe476f4fd \ --hash=sha256:460f8c39ba66af7db0545a8c6f2eabcbc5a5528fc1cf6c3fa9a1e44cec33385e \ --hash=sha256:57c816dfbd1659a367831baca4b775b2a5b43c003daf52e9d57e1d30bc2e1b0e \ --hash=sha256:5aa1e32983d4443e310f726ee4b071ab7569f58eedfdd65e9675484a4eb67bd1 \ --hash=sha256:6ff8728d8d890b3dda5765276d1bc6fb099252915a2cd3aff960c4c195745dd0 \ --hash=sha256:7259038202a47fdecee7e62e0fd0b0738b6daa335354396c6ddebdbe1206af2a \ --hash=sha256:72e76caa004ab63accdf26023fccd1d087f6d90ec6048ff33ad0445abf7f605a \ --hash=sha256:7760c1c2e1a7084153a0f68fab76e754083b126a47d0117c9ed15e69e2103492 \ --hash=sha256:8c4a6ff8a30e9e3d38ac0539e9a9e02540ab3f827a3394f8852432f6b0ea152e \ --hash=sha256:9024beb59aca9d31d36fcdc1604dd9bbeed0a55bface9f1908df19178e2f116e \ --hash=sha256:90cb0a7bb35959f37e23303b7eed0a32280510030daba3f7fdfbb65defde6a97 \ --hash=sha256:91098f02ca81579c85f66df8a588c78f331ca19089763d733e34ad359f474174 \ --hash=sha256:926c3ea71a6043921050eaa639137e13dbe7b4ab25800932a8498364fc1abec9 \ --hash=sha256:982518cd64c54fcada9d7e5cf28eabd3ee76bd03ab18e08a48cad7e8b6f31b18 \ --hash=sha256:9b4cf6318915dccfe218e69bbec417fdd7c7185aa7aab139a2c0beb7468c89f0 \ --hash=sha256:ad0caded895a00261a5b4aa9af828baede54638754b51955a0ac75576b831b27 \ --hash=sha256:b85980d1e345fe769cfc57c57db2b59cff5464ee0c045d52c0df087e926fbe63 \ --hash=sha256:b8fa8b0a35a9982a3c60ec79905ba5bb090fc0b9addcfd3dc2dd04267e45f25e \ --hash=sha256:b9e38e0a83cd51e07f5a48ff9691cae95a79bea28fe4ded168a8e5c6c77e819d \ --hash=sha256:bd4c45986472694e5121084c6ebbd112aa919a25e783b87eb95953c9573906d6 \ --hash=sha256:be97d3a19c16a9be00edf79dca949c8fa7eff621763666a145f9f9535a5d7f42 \ --hash=sha256:c648025b6840fe62e57107e0a25f604db740e728bd67da4f6f060f03017d5097 \ --hash=sha256:d05a38884db2ba215218745f0781775806bde4f32e07b135348355fe8e4991d9 \ --hash=sha256:dd420e577921c8c2d31289536c386aaa30140b473835e97f83bc71ea9d2baf2d \ --hash=sha256:e357286c1b76403dd384d938f93c46b2b058ed4dfcdce64a770f0537ed3feb6f \ --hash=sha256:e6c00130ed423201c5bc5544c23359141660b07999ad82e34e7bb8f882bb78e0 \ --hash=sha256:e74d30ec9c7cb2f404af331d5b4099a9b322a8a6b25c4632755c8757345baac5 \ --hash=sha256:f3562c2f23c612f2e4a6964a61d942f891d29ee320edb62ff48ffb99f3de9ae8

[qodo-code-review]

PR Code Suggestions ✨

Explore these optional code suggestions:

Category	Suggestion	Impact
High-level	Investigate root-cause vs revert Reverting a security-critical library like cryptography may mask a deeper incompatibility and potentially expose the project to fixed vulnerabilities in 45.0.6. Before merging, identify the exact CI failure (ABI changes, OpenSSL bindings, wheel availability, or pinned transitive deps) and consider forward-fixing via constraints, platform-specific pins, or upstream issue tracking to restore 45.0.6 rather than downgrading globally. Examples: py/requirements.txt [8] cryptography==45.0.5 py/requirements_lock.txt [209-246] cryptography==45.0.5 \ --hash=sha256:0027d566d65a38497bc37e0dd7c2f8ceda73597d2ac9ba93810204f56f52ebc7 \ --hash=sha256:101ee65078f6dd3e5a028d4f19c07ffa4dd22cce6a20eaa160f8b5219911e7d8 \ --hash=sha256:12e55281d993a793b0e883066f590c1ae1e802e3acb67f8b442e721e475e6463 \ --hash=sha256:14d96584701a887763384f3c47f0ca7c1cce322aa1c31172680eb596b890ec30 \ --hash=sha256:1e1da5accc0c750056c556a93c3e9cb828970206c68867712ca5805e46dc806f \ --hash=sha256:206210d03c1193f4e1ff681d22885181d47efa1ab3018766a7b32a7b3d6e6afd \ --hash=sha256:2089cc8f70a6e454601525e5bf2779e665d7865af002a5dec8d14e561002e135 \ --hash=sha256:3a264aae5f7fbb089dbc01e0242d3b67dffe3e6292e1f5182122bdf58e65215d \ --hash=sha256:3af26738f2db354aafe492fb3869e955b12b2ef2e16908c8b9cb928128d42c57 \ ... (clipped 28 lines) Solution Walkthrough: Before: # py/requirements.txt # Reverting the dependency to fix a CI failure without # addressing the underlying issue. ... cryptography==45.0.5 ... After: # py/requirements.txt # The dependency is kept at the newer, more secure version. ... cryptography==45.0.6 ... # The underlying CI failure is addressed directly # (e.g., in CI configuration or by pinning another # dependency) instead of downgrading cryptography. Suggestion importance[1-10]: 10 __ Why: This suggestion correctly identifies the high risk of downgrading a security-critical library like cryptography and rightly advocates for root-cause analysis instead of a simple revert.	High
More