Pin the oscrypto unreleased version for the fix for CI Ubuntu 24.04

Signed-off-by: Sergey Vasilyev <[email protected]>

Author: nolar

requirements.txt

@@ -9,6 +9,15 @@ codecov
 coverage
 coveralls
 freezegun
+
+# Enforce the hotfix for Ubuntu 24.04 in CI. Otherwise, we are stuck in Ubuntu 22.04.
+# The bugfix is merged but not released: https://github.com/wbond/oscrypto/issues/78
+# Pinning this in the end operators is the decision of the operator developers,
+# including the protocols of accessing the repo or vendoring the dependency code.
+# This dependency is used ONLY in the dev mode with temporary self-signed CA, ONLY for simplicity.
+# In the worst case, configure the operator with a self-signed CA made in the openssl CLI manually.
+git+https://github.com/wbond/oscrypto.git@1547f535001ba568b239b8797465536759c742a3
+
 import-linter
 isort
 lxml

setup.py

@@ -77,10 +77,11 @@
             'uvloop>=0.18.0; python_version>="3.12"',
         ],
         'dev': [
-            'pyngrok',          # 1.00 MB + downloaded binary
+            # NB: oscrypto is pinned for CI in requirements.txt; do the same in your app yourself.
             'oscrypto',         # 2.80 MB (smaller than cryptography: 8.7 MB)
             'certbuilder',      # +0.1 MB (2.90 MB if alone)
             'certvalidator',    # +0.1 MB (2.90 MB if alone)
+            'pyngrok',          # 1.00 MB + downloaded binary
         ],
     },
     package_data={"kopf": ["py.typed"]},