git: 173ac9651cc9 - main - framework: add PYCRYPTOGRAPHY default version

The branch main has been updated by tcberner:

URL: https://cgit.FreeBSD.org/ports/commit/?id=173ac9651cc9ef0ab952b29e4cffa56d28e8770b

commit 173ac9651cc9ef0ab952b29e4cffa56d28e8770b
Author:     Tobias C. Berner <tcberner@FreeBSD.org>
AuthorDate: 2023-07-22 06:00:10 +0000
Commit:     Tobias C. Berner <tcberner@FreeBSD.org>
CommitDate: 2023-07-22 07:46:37 +0000

    framework: add PYCRYPTOGRAPHY default version
    
    A future commit will update to security/py-cryptography will introduce a
    rust dependency.
    
    PR:             254853
---
 Mk/bsd.default-versions.mk |  8 +++++++-
 UPDATING                   | 12 ++++++++++++
 2 files changed, 19 insertions(+), 1 deletion(-)

diff --git a/Mk/bsd.default-versions.mk b/Mk/bsd.default-versions.mk
index ced3d14fbfb4..86e3f5aac016 100644
--- a/Mk/bsd.default-versions.mk
+++ b/Mk/bsd.default-versions.mk
@@ -20,7 +20,7 @@ LOCALBASE?=	/usr/local
 .  for lang in APACHE BDB COROSYNC EMACS FIREBIRD FORTRAN FPC GCC \
 	GHOSTSCRIPT GL GO IMAGEMAGICK JAVA LAZARUS LIBRSVG2 LINUX LLVM \
 	LUA LUAJIT MONO MYSQL NINJA NODEJS OPENLDAP PERL5 PGSQL PHP PYTHON \
-	PYTHON2 PYTHON3 RUBY RUST SAMBA SSL TCLTK VARNISH
+	PYTHON2 PYTHON3 PYCRYPTOGRAPHY RUBY RUST SAMBA SSL TCLTK VARNISH
 .    if defined(${lang}_DEFAULT)
 ERROR+=	"The variable ${lang}_DEFAULT is set and it should only be defined through DEFAULT_VERSIONS+=${lang:tl}=${${lang}_DEFAULT} in /etc/make.conf"
 .    endif
@@ -126,6 +126,12 @@ PYTHON_DEFAULT?=	3.9
 PYTHON2_DEFAULT?=	2.7
 # Possible values: 3.8, 3.9, 3.10, 3.11
 PYTHON3_DEFAULT?=	3.9
+# Possible values: rust, legacy
+.  if empty(ARCH:Naarch64:Namd64:Narmv7:Ni386:Npowerpc64:Npowerpc64le:Npowerpc:Nriscv64)
+PYCRYPTOGRAPHY_DEFAULT?=	rust
+.  else
+PYCRYPTOGRAPHY_DEFAULT?=	legacy
+.  endif
 # Possible values: 3.0, 3.1, 3.2, 3.3
 RUBY_DEFAULT?=		3.1
 # Possible values: rust, rust-nightly
diff --git a/UPDATING b/UPDATING
index 144a7b4d1df3..569b6131db4e 100644
--- a/UPDATING
+++ b/UPDATING
@@ -5,6 +5,18 @@ they are unavoidable.
 You should get into the habit of checking this file for changes each time
 you update your ports collection, before attempting any port upgrades.
 
+20230723:
+  AFFECTS: users of security/py-cryptography
+  AUTHOR: tcberner@FreeBSD.org
+
+  Modern py-cryptography uses rust. In order to still support the Tier-2
+  architectures without rust support, a new default-version was added:
+     PYCRYPTOGRAPHY
+  it allows for the values 'rust' and 'legacy'.
+  The default is 'rust' on all platforms supporting this.
+  Note: users that are relying on the 'legacy' version will also take care
+  of using a non-base OpenSSL in the future.
+
 20230620:
   AFFECTS: users of lang/elixir-devel
   AUTHOR: dch@FreeBSD.org