From 335903a8f070c8da96b178ae825950652d4fc08e Mon Sep 17 00:00:00 2001
From: Alvin Siu <alvin@zagaran.com>
Date: Thu, 8 Apr 2021 18:39:03 -0400
Subject: [PATCH] Lock cryptography version and add requirements.in comments

---
 requirements.in  | 4 ++--
 requirements.txt | 3 ++-
 2 files changed, 4 insertions(+), 3 deletions(-)

diff --git a/requirements.in b/requirements.in
index ea9ab62..4e293f1 100644
--- a/requirements.in
+++ b/requirements.in
@@ -1,4 +1,4 @@
-Django==2.2.*
+Django==2.2.*  # Latest LTS version
 django-environ
 django-extensions
 requests
@@ -24,4 +24,4 @@ werkzeug
 pip-tools
 
 # Security
-cryptography>=3.3.2  # 2021-3-4
\ No newline at end of file
+cryptography==3.3.2  # Lock to 3.3.2 if running into "No module named 'setuptools_rust'" error
diff --git a/requirements.txt b/requirements.txt
index f3aa993..3870c25 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -14,7 +14,7 @@ chardet==3.0.4
     # via requests
 click==7.1.2
     # via pip-tools
-cryptography==3.4.6
+cryptography==3.3.2
     # via
     #   -r requirements.in
     #   social-auth-core
@@ -83,6 +83,7 @@ requests==2.25.0
     #   social-auth-core
 six==1.15.0
     # via
+    #   cryptography
     #   social-auth-app-django
     #   social-auth-core
     #   traitlets