Use the current Python version as the abi3 default when building from source (#12896)

* Use the current Python version as the abi3 default when building from source

* fixes

Author: alex

.github/workflows/ci.yml

@@ -26,7 +26,6 @@ jobs:
         PYTHON:
           - {VERSION: "3.13", NOXSESSION: "flake"}
           - {VERSION: "3.13", NOXSESSION: "rust"}
-          - {VERSION: "3.13", NOXSESSION: "tests-abi3-py311"}
           - {VERSION: "3.12", NOXSESSION: "docs", OPENSSL: {TYPE: "openssl", VERSION: "3.5.0"}}
           - {VERSION: "3.14-dev", NOXSESSION: "tests"}
           - {VERSION: "pypy-3.10", NOXSESSION: "tests-nocoverage"}
@@ -135,6 +134,8 @@ jobs:
             nox -v --install-only
         env:
           NOXSESSION: ${{ matrix.PYTHON.NOXSESSION }}
+          # Needed until https://github.com/PyO3/pyo3/issues/5093
+          PYO3_USE_ABI3_FORWARD_COMPATIBILITY: 1
       - name: Tests
         run: |
             nox --no-install --  --color=yes --wycheproof-root=wycheproof --x509-limbo-root=x509-limbo ${{ matrix.PYTHON.NOXARGS }}

noxfile.py

@@ -49,7 +49,6 @@ def load_pyproject_toml() -> dict:
 @nox.session(name="tests-randomorder")
 @nox.session(name="tests-nocoverage")
 @nox.session(name="tests-rust-debug")
-@nox.session(name="tests-abi3-py311")
 def tests(session: nox.Session) -> None:
     extras = "test"
     if session.name == "tests-ssh":
@@ -77,12 +76,6 @@ def tests(session: nox.Session) -> None:
             "--config-settings=build-args=--profile=dev",
             f".[{extras}]",
         )
-    elif session.name == "tests-abi3-py311":
-        install(
-            session,
-            "--config-settings=build-args=--features=pyo3/abi3-py311",
-            f".[{extras}]",
-        )
     else:
         install(session, f".[{extras}]")
 

pyproject.toml

@@ -2,7 +2,7 @@
 # These requirements must be kept sync with the requirements in
 # ./.github/requirements/build-requirements.{in,txt}
 requires = [
-    "maturin>=1,<2",
+    "maturin>=1.8.6,<2",
 
     # Must be kept in sync with `project.dependencies`
     "cffi>=1.14; platform_python_implementation != 'PyPy'",
@@ -100,7 +100,6 @@ manifest-path = "src/rust/Cargo.toml"
 module-name = "cryptography.hazmat.bindings._rust"
 locked = true
 sdist-generator = "git"
-features = ["pyo3/abi3-py37"]
 include = [
     "CHANGELOG.rst",
     "CONTRIBUTING.rst",