release 46.0.3 (#13681)

* release 46.0.3

* install bindgen from cargo instead of apt (#13678)

* install bindgen from cargo instead of apt

this only impacts boring/aws-lc

* Modify cache key format in CI workflow

Updated the cache key in CI workflow to include a version suffix.

---------

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: alex

.github/workflows/ci.yml

@@ -41,6 +41,7 @@ jobs:
           - {VERSION: "3.13", NOXSESSION: "tests-ssh", OPENSSL: {TYPE: "openssl", VERSION: "3.5.3"}}
           - {VERSION: "3.13", NOXSESSION: "rust,tests", OPENSSL: {TYPE: "libressl", VERSION: "4.0.0"}}
           - {VERSION: "3.13", NOXSESSION: "rust,tests", OPENSSL: {TYPE: "libressl", VERSION: "4.1.0"}}
+          - {VERSION: "3.13", NOXSESSION: "rust,tests", OPENSSL: {TYPE: "libressl", VERSION: "4.2.0"}}
           # Latest commit on the BoringSSL main branch, as of Sep 16, 2025.
           - {VERSION: "3.13", NOXSESSION: "rust,tests", OPENSSL: {TYPE: "boringssl", VERSION: "0fc0e7afa1c997038c1dc6e0838446efe97b7f69"}}
           # Latest tag of AWS-LC main branch, as of Sep 14, 2025.
@@ -122,7 +123,7 @@ jobs:
           echo "CFLAGS=${CFLAGS} -Werror=implicit-function-declaration" >> $GITHUB_ENV
           echo "RUSTFLAGS=-Clink-arg=-Wl,-rpath=${OSSL_PATH}/lib -Clink-arg=-Wl,-rpath=${OSSL_PATH}/lib64" >> $GITHUB_ENV
         if: matrix.PYTHON.OPENSSL
-      - run: sudo apt-get install -y bindgen
+      - run: cargo install bindgen-cli
         if: matrix.PYTHON.OPENSSL.TYPE == 'boringssl' || matrix.PYTHON.OPENSSL.TYPE == 'aws-lc'
       - name: Cache rust and pip
         uses: ./.github/actions/cache
@@ -131,7 +132,7 @@ jobs:
           # We have both the Python version from the matrix and from the
           # setup-python step because the latter doesn't distinguish
           # pypy3-3.8 and pypy3-3.9 -- both of them show up as 7.3.11.
-          key: ${{ matrix.PYTHON.VERSION }}-${{ steps.setup-python.outputs.python-version }}-${{ matrix.PYTHON.NOXSESSION }}-${{ env.OPENSSL_HASH }}
+          key: "${{ matrix.PYTHON.VERSION }}-${{ steps.setup-python.outputs.python-version }}-${{ matrix.PYTHON.NOXSESSION }}-${{ env.OPENSSL_HASH }}-0"
 
       - run: python -m pip install -c ci-constraints-requirements.txt 'nox[uv]' 'tomli; python_version < "3.11"'
       - name: Create nox environment

CHANGELOG.rst

@@ -1,6 +1,13 @@
 Changelog
 =========
 
+.. _v46-0-3:
+
+46.0.3 - 2025-10-15
+~~~~~~~~~~~~~~~~~~~
+
+* Fixed compilation when using LibreSSL 4.2.0.
+
 .. _v46-0-2:
 
 46.0.2 - 2025-09-30

Cargo.lock

@@ -24,8 +24,8 @@ license = "Apache-2.0 OR BSD-3-Clause"
 asn1 = { version = "0.22.0", default-features = false }
 pyo3 = { version = "0.26", features = ["abi3"] }
 pyo3-build-config = { version = "0.26" }
-openssl = "0.10.73"
-openssl-sys = "0.9.108"
+openssl = "0.10.74"
+openssl-sys = "0.9.110"
 
 [profile.release]
 overflow-checks = true

Cargo.toml

@@ -16,7 +16,7 @@ build-backend = "maturin"
 
 [project]
 name = "cryptography"
-version = "46.0.2"
+version = "46.0.3"
 authors = [
     { name = "The Python Cryptographic Authority and individual contributors", email = "[email protected]" },
 ]
@@ -70,7 +70,7 @@ ssh = ["bcrypt >=3.1.5"]
 # All the following are used for our own testing.
 nox = ["nox[uv] >=2024.04.15"]
 test = [
-    "cryptography_vectors==46.0.2",
+    "cryptography_vectors==46.0.3",
     "pytest >=7.4.0",
     "pytest-benchmark >=4.0",
     "pytest-cov >=2.10.1",

pyproject.toml

@@ -10,7 +10,7 @@
     "__version__",
 ]
 
-__version__ = "46.0.2"
+__version__ = "46.0.3"
 
 
 __author__ = "The Python Cryptographic Authority and individual contributors"

src/cryptography/__about__.py

@@ -6,4 +6,4 @@
     "__version__",
 ]
 
-__version__ = "46.0.2"
+__version__ = "46.0.3"

vectors/cryptography_vectors/__about__.py

@@ -4,7 +4,7 @@ build-backend = "uv_build"
 
 [project]
 name = "cryptography_vectors"
-version = "46.0.2"
+version = "46.0.3"
 authors = [
     {name = "The Python Cryptographic Authority and individual contributors", email = "[email protected]"}
 ]