Skip to content

Lower cffi version requirement from >=2.0.0 to >=1.16#14851

Open
frasertweedale wants to merge 1 commit into
pyca:mainfrom
frasertweedale:cffi-version-stepdown
Open

Lower cffi version requirement from >=2.0.0 to >=1.16#14851
frasertweedale wants to merge 1 commit into
pyca:mainfrom
frasertweedale:cffi-version-stepdown

Conversation

@frasertweedale
Copy link
Copy Markdown
Contributor

Some distros don't have cffi >= 2.0.0 yet. v1.16 still works, so
reduce the lower bound.

@alex
Copy link
Copy Markdown
Member

alex commented May 13, 2026

What's the motivation for this? Distros not having cffi 2.0 is not a sufficient motivation: mixing old deps with new ones is better solved by distros updating their cffis.

Further, this now gives you the wrong behavior on free-threaded Pythons, where it permits you to install a cffi that doesn't support it.

Require cffi >= 2.0.0 only for Python >= 3.13 (needed for
free-threaded Python support).  Allow cffi >= 1.16 for older
Python, enabling use on distros that don't have cffi 2.0 yet.
@frasertweedale frasertweedale force-pushed the cffi-version-stepdown branch from 3918911 to 4860ae9 Compare May 13, 2026 14:55
@frasertweedale
Copy link
Copy Markdown
Contributor Author

The motivation is: RHEL has old cffi for now, and it's one less thing to patch.
I added environment marker to restrict free-threaded python versions to cffi >= 2;
thanks for pointing that out.

@alex
Copy link
Copy Markdown
Member

alex commented May 14, 2026

If RHEL wants to use a very recent cryptography, why can't you upgrade your cffi?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

2 participants