[BUG] cryptography 46.0.5 Dependency Issue

[Sonia-96]

Describe the bug
When trying to upgrade tethys to 4.5.0, I encountered dependency conflicts related to cryptography:

ERROR: pip's dependency resolver does not currently take into account all the packages that are installed. This behaviour is the source of the following dependency conflicts.
fido2 1.2.0 requires cryptography!=35,<45,>=2.6, but you have cryptography 46.0.5 which is incompatible.

I tried to upgrade fido2 to the latest version (2.1.1), I got another conflict:

pyopenssl 26.0.0 requires cryptography<47,>=46.0.0, but you have cryptography 44.0.3 which is incompatible.

It seems that cryptography 46.0.5 may not be fully compatible with some Tethys dependencies. I noticed that pyproject.toml pins cryptography>=46.0.5, which is the latest release. Would it be possible to loosen this requirement to avoid conflicts?

To Reproduce
Steps to reproduce the behavior:

1. Pull the latest changes of tethys
2. Run pip instlal -e .

Expected behavior
Installation should succeed without dependency conflicts.
Screenshots

[swainn]

@jakeymac @romer8 is the cryptography pin because of a past security issue? Can it be loosened?

[jakeymac]

I'm not familiar with this pin or any security issues with it.

[romer8]

@swainn I am taking a look at it

[romer8]

@Sonia-96 What is the python version on the environment in which you are trying to update?
These are some of the steps that worked for me:

1. Created a new env for testing

uv venv tethys-deps --python 3.12 
source tethys-deps/bin/activate

2. Install latest tethys from source

(tethys-deps)  uv pip install -e .
Using Python 3.12.7 environment at: /home/aquagio/tethys-deps
Resolved 44 packages in 1.97s
      Built tethys-platform @ file:///home/aquagio/tethysdev/tethys
      Built py-ubjson==0.16.1
Prepared 43 packages in 1.75s
Installed 44 packages in 318ms
 + asgiref==3.11.1
 + attrs==26.1.0
 + autobahn==25.12.2
 + automat==25.4.16
 + bcrypt==5.0.0
 + cbor2==5.9.0
 + certifi==2026.2.25
 + cffi==2.0.0
 + channels==4.3.2
 + charset-normalizer==3.4.6
 + constantly==23.10.4
 + cryptography==46.0.5
 + daphne==4.2.1
 + django==5.2.12
 + django-bootstrap5==26.2
 + django-guardian==3.3.0
 + django-model-utils==5.0.0
 + djangorestframework==3.17.1
 + djangorestframework-simplejwt==5.5.1
 + hyperlink==21.0.0
 + idna==3.11
 + incremental==24.11.0
 + jinja2==3.1.6
 + markupsafe==3.0.3
 + msgpack==1.1.2
 + packaging==26.0
 + py-ubjson==0.16.1
 + pyasn1==0.6.3
 + pyasn1-modules==0.4.2
 + pycparser==3.0
 + pyjwt==2.12.1
 + pyopenssl==26.0.0
 + pyyaml==6.0.3
 + requests==2.33.0
 + service-identity==24.2.0
 + sqlparse==0.5.5
 + tethys-platform==4.5.1.dev11 (from file:///home/aquagio/tethysdev/tethys)
 + tornado==6.5.5
 + twisted==25.5.0
 + txaio==25.12.2
 + typing-extensions==4.15.0
 + ujson==5.12.0
 + urllib3==2.6.3
 + zope-interface==8.2

3. Confirm the version of tethys

`tethys` version
4.5.1.dev11

4. Confirm version of python

python --version
Python 3.12.7

@swainn I think it can be good to loose it. I need to run some tests first and comment again