cruft: update

Author: Tatsh

.readthedocs.yaml

@@ -1,5 +1,6 @@
 build:
-  apt_packages: ['graphviz']
+  apt_packages:
+    - 'graphviz'
   jobs:
     post_install:
       - 'pip install uv'

.wiswa.jsonnet

@@ -35,7 +35,20 @@ local utils = import 'utils.libjsonnet';
     main+: {
       anyio: utils.latestPypiPackageVersionCaret('anyio'),
       bascom: '>=0.2.0',
-      cryptography: utils.latestPypiPackageVersionCaret('cryptography'),
+      // cryptography 49 dropped the macOS universal2 wheels, leaving arm64 only, so an Intel Mac
+      // builds from the sdist and links against whichever OpenSSL the runner has. PyInstaller then
+      // bundles a different libssl and the binary cannot resolve its symbols. Cap Intel Macs at the
+      // last release that still ships a wheel, which statically links its own OpenSSL.
+      cryptography: [
+        {
+          markers: "sys_platform != 'darwin' or platform_machine != 'x86_64'",
+          version: utils.latestPypiPackageVersionCaret('cryptography'),
+        },
+        {
+          markers: "sys_platform == 'darwin' and platform_machine == 'x86_64'",
+          version: '<49',
+        },
+      ],
       jinja2: utils.latestPypiPackageVersionCaret('jinja2'),
       mido: utils.latestPypiPackageVersionCaret('mido'),
       // numpy 2.3 dropped Python 3.10 (it requires >=3.11), which the project still supports, so

CITATION.cff

@@ -2,7 +2,7 @@ authors:
   - family-names: 'Udvare'
     given-names: 'Andrew'
 cff-version: '1.2.0'
-date-released: '2026-08-23'
+date-released: '2026-08-24'
 message: 'If you use this software, please cite it as below.'
 title: 'destin'
 version: '0.0.0'

pyproject.toml

@@ -4,7 +4,7 @@ requires = ["hatchling"]
 
 [dependency-groups]
 dev = [
-  "commitizen>=4.17.0",
+  "commitizen>=4.17.1",
   "cz-path>=0.0.7",
   "mypy>=2.3.1",
   "ruff==0.16.3",
@@ -48,7 +48,8 @@ dependencies = [
   "anyio>=4.14.2",
   "bascom>=0.2.0",
   "click>=8.4.2",
-  "cryptography>=50.0.0",
+  "cryptography<49; sys_platform == 'darwin' and platform_machine == 'x86_64'",
+  "cryptography>=50.0.0; sys_platform != 'darwin' or platform_machine != 'x86_64'",
   "jinja2>=3.1.6",
   "mido>=1.3.3",
   "numpy<=2.2.6; platform_machine != 'ARM64' or sys_platform != 'win32' or python_version < '3.11'",