python-cryptography: update to 48.0.0 + backport cross-include fix
authorAlexandru Ardelean <redacted>
Wed, 27 May 2026 12:23:59 +0000 (15:23 +0300)
committerAlexandru Ardelean <redacted>
Fri, 29 May 2026 03:41:17 +0000 (06:41 +0300)
commit903d8a3d07c2790548b54585dc7b507ac42064e2
treec560e60422f55e02560c2ddbd219d21b8793b6eb
parent775c87e364fe93758bdee8d68a5f8f43f8ff1df7
python-cryptography: update to 48.0.0 + backport cross-include fix

Bump from 46.0.7 to the current 48.0.0 release. Notable upstream
changes since 46.0.7:

- 48.0.0 drops Python 3.8 support (requires 3.9+); raises
  Py_LIMITED_API floor to 0x030900f0.
- Adds ML-KEM / ML-DSA post-quantum primitives via OpenSSL 3.5.0+
  (in addition to existing AWS-LC / BoringSSL paths).
- BACKWARDS INCOMPATIBLE: stricter X.509 CRL signature-algorithm
  matching (mismatched inner/outer algs now raise ValueError at parse
  time).
- Drops 32-bit Windows wheels and ships macOS only on arm64.

Replace the old downstream cross-compile fix with a backport of the
upstream-merged version from pyca/cryptography PR #14904
(commit 5d072cb2a685, scheduled for the release after 48.0.0).

Release notes:
https://cryptography.io/en/latest/changelog/#v48-0-0

Fixes: https://github.com/openwrt/packages/issues/29521
Signed-off-by: Alexandru Ardelean <redacted>
lang/python/python-cryptography/Makefile
lang/python/python-cryptography/patches/001-cffi-build-rs-derive-include-from-pyo3-cross.patch [new file with mode: 0644]
git clone https://git.99rst.org/PROJECT