Pin the oscrypto with the merged but unreleased hotfix for CI Ubuntu 24.04

Signed-off-by: Sergey Vasilyev <[email protected]>

Author: nolar

requirements.txt

@@ -9,6 +9,16 @@ codecov
 coverage
 coveralls
 freezegun
+
+# Enforce the hotfix for Ubuntu 24.04 in CI. Otherwise, we are stuck in Ubuntu 22.04.
+# The bugfix is merged but not released: https://github.com/wbond/oscrypto/issues/78
+# Pinning this in the end operators is the decision of the operator developers,
+# including the protocols of accessing the repo or vendoring the dependency code.
+# The dev-mode dependency is used ONLY with an temporary & insecure self-signed CA for simplicity,
+# and ONLY with Ubuntu 24.04+. Therefore, it is not pinned in setup.py (e.g., works fine in 22.04).
+# In the worst case, configure the operator with a self-signed CA made in the OpenSSL CLI manually.
+git+https://github.com/wbond/oscrypto.git@1547f535001ba568b239b8797465536759c742a3
+
 import-linter
 isort
 lxml

setup.py

@@ -77,10 +77,11 @@
             'uvloop>=0.18.0; python_version>="3.12"',
         ],
         'dev': [
-            'pyngrok',          # 1.00 MB + downloaded binary
+            # NB: oscrypto is pinned for Ubuntu 24.04+ in requirements.txt - read the details there.
             'oscrypto',         # 2.80 MB (smaller than cryptography: 8.7 MB)
             'certbuilder',      # +0.1 MB (2.90 MB if alone)
             'certvalidator',    # +0.1 MB (2.90 MB if alone)
+            'pyngrok',          # 1.00 MB + downloaded binary
         ],
     },
     package_data={"kopf": ["py.typed"]},