Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Misc fixes in dependency definitions #493

Merged
merged 3 commits into from
Jan 12, 2023

Conversation

lukpueh
Copy link
Member

@lukpueh lukpueh commented Jan 11, 2023

See commit messages for details.

This commit reverts 0928ceb,
defining all optional dependencies needed for hsm signing and
verification in one set.

As discussed in secure-systems-lab#482, this makes more sense from a user perspective.

The generic "crypto" (for cryptography) dependency is preserved to
not annoy existing users.

The new "hsm" dependency uses the same lower version bound for
cryptography as "crypto", although it might work with lower
versions. But it seems reasonable to keep constraints consistent.

Signed-off-by: Lukas Puehringer <[email protected]>
We should not need to pin dependencies for user installation per
default, but only if an update fails. This should be detected
automatically by Dependabot-triggered builds.

Signed-off-by: Lukas Puehringer <[email protected]>
- Removes version marker left over from Python 2 times, and
instructions to semi-automatically generate a pinned
requirements file.
The latter was relevant when we had different requirements for
different Python versions, which is not the case anymore.

- Automatically re-generates requirements-pinned.txt

Signed-off-by: Lukas Puehringer <[email protected]>
@lukpueh lukpueh requested a review from jku January 11, 2023 17:42
PySPX = ["PySPX==0.5.0"]
asn1 = ["asn1crypto"]
pykcs11 = ["PyKCS11"]
PySPX = ["PySPX>=0.5.0"]
Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@rugo, was there a specific reason for pinning this to 0.5.0. See 58857ca for why I changed this.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Not really, all good.

@jku jku mentioned this pull request Jan 12, 2023
@lukpueh lukpueh merged commit 289965d into secure-systems-lab:master Jan 12, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Specify optional dependencies per feature
3 participants