summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorAndrej Shadura <andrewsh@debian.org>2021-04-07 13:48:48 +0200
committerAndrej Shadura <andrewsh@debian.org>2022-02-16 13:48:38 +0100
commit902f52ffdbd010f1bd035362c36acc47d09a3d7e (patch)
tree17982c3db326770dc1b26973ed8b3ac5a04a4f1a
parent1e370f310af2b43226f37ae78beeacd0b027051f (diff)
Drop a version bump unnecessary in Debian
In Debian, python3-cryptography doesn’t bundle openssl anyway. Gbp-Pq: Name 0002-dont-bump-cryptography.patch
-rw-r--r--synapse/python_dependencies.py4
1 files changed, 1 insertions, 3 deletions
diff --git a/synapse/python_dependencies.py b/synapse/python_dependencies.py
index 80786464..1fced040 100644
--- a/synapse/python_dependencies.py
+++ b/synapse/python_dependencies.py
@@ -85,9 +85,7 @@ REQUIREMENTS = [
"Jinja2>=2.9",
"bleach>=1.4.3",
"typing-extensions>=3.7.4",
- # We enforce that we have a `cryptography` version that bundles an `openssl`
- # with the latest security patches.
- "cryptography>=3.4.7",
+ "cryptography",
"ijson>=3.1",
"matrix-common==1.0.0",
]