leora
9e76d68344
Raise the floor past CVE-2024-12797-affected wheels (43.x / 44.0.0). Add constraints.txt (exact 44.0.1) and requirements.lock.txt with sha256 hashes for cryptography and its runtime deps.
14 lines
493 B
Plaintext
14 lines
493 B
Plaintext
# Hash-pinned lock for Sigil runtime crypto deps.
|
|
# Install: pip install --require-hashes -r requirements.lock.txt
|
|
# Floor cryptography==44.0.1 addresses CVE-2024-12797 in older wheels.
|
|
|
|
cryptography==44.0.1 \
|
|
--hash=sha256:53f23339864b617a3dfc2b0ac8d5c432625c80014c25caac9082314e9de56f41
|
|
|
|
cffi==2.1.1 \
|
|
--hash=sha256:a931079504ecc49efed7744c476a5c343a92fabf66dec2db95edb1b2fdc770e2
|
|
|
|
pycparser==3.0 \
|
|
--hash=sha256:b727414169a36b7d524c1c3e31839a521725078d7b2ff038656844266160a992
|
|
|