[#40] Stop including cryptography.

[dumol]

Scope

Fixes #40

Changes

Stop including the upstream cryptography wheels.

Building our own OpenSSL libs is still needed for Python's ssl module. (Except on Windows, where the upstream package comes with its own OpenSSL libs.)

Drive-by changes:

• updated Python to latest 3.11.x version
• updated OpenSSL for Python's ssl to latest 3.1.x version on non-Windows platforms
• minor lib updates to latest versions for XZ and SQLite
• some other minor Python module updates, including a security fix for pip
• minor workflow improvements from server repo.

Testing

Check changes and automated tests.

Try the testing packages from bin.chevah.com, e.g. https://bin.chevah.com:20443/testing/3.11.7.3785e41/

[adiroiban]

Thanks. This is a good start.

PyNacl can be also removed... without problems.

With the removal of cryptography , things are getting ugly and complicated for generating the install version of chevah/server for Windows and MacOS or ... Linux ARM64

We are building the distributables only on Linux X64...
so it's complicated to install a Windows or MarcOS package on Linux.

But I think that for pythia we should keep things simple, and focus on Python

I have created a sepate ticket to deal with the chevah/server https://github.com/chevah/server/issues/6480

Thanks

[adiroiban]

Note that pynacl can also be removed.

It is only used for our testing.

We only need to make sure that we have these files on our pypi server
https://pypi.org/project/PyNaCl/#files

[dumol]

No problem, done trough 844422b.

[adiroiban]

Also, happy to see Laja at work. I am quite happy with macmini M1 for macOS

GitHub now has mac M1 runners... but they cost $0.16 per minute... so with our 10 minutes job it would take more than $1.5 for each run