SNOW-1620333: unpin cryptography and add deprecation detection (#2021)

Author: sfc-gh-aling

DESCRIPTION.md

@@ -10,8 +10,9 @@ Source code is also available at: https://github.com/snowflakedb/snowflake-conne
 
 - v3.12.1(TBD)
   - Fixed a bug that session token is logged when renewing session.
-  - Use `pathlib` instead of `os` for default config file location resolution.
   - Fixed a bug that disabling client telemetry does not work.
+  - Use `pathlib` instead of `os` for default config file location resolution.
+  - Removed upper `cryptogaphy` version pin.
 
 - v3.12.0(July 24,2024)
   - Set default connection timeout of 10 seconds and socket read timeout of 10 minutes for HTTP calls in file transfer.

setup.cfg

@@ -45,7 +45,7 @@ packages = find_namespace:
 install_requires =
     asn1crypto>0.24.0,<2.0.0
     cffi>=1.9,<2.0.0
-    cryptography>=3.1.0,<43.0.0
+    cryptography>=3.1.0
     pyOpenSSL>=16.2.0,<25.0.0
     pyjwt<3.0.0
     pytz

test/unit/test_dependencies.py

@@ -0,0 +1,21 @@
+#
+# Copyright (c) 2012-2023 Snowflake Computing Inc. All rights reserved.
+#
+
+import warnings
+
+import cryptography.utils
+import pytest
+
+
+@pytest.mark.xfail(reason="Deprecation warning is expected to fail the test")
+def test_cryptography_deprecated():
+    deprecate_warning = cryptography.utils.deprecated(
+        cryptography.utils.CryptographyDeprecationWarning,
+        "test",
+        "test",
+        cryptography.utils.CryptographyDeprecationWarning,
+    )
+    warnings.warn(
+        deprecate_warning.message, deprecate_warning.warning_class, stacklevel=2
+    )

tox.ini

@@ -155,6 +155,7 @@ addopts = -ra --strict-markers
 junit_family = legacy
 filterwarnings =
     error::UserWarning:cryptography.*
+    error::cryptography.utils.CryptographyDeprecationWarning
 markers =
     # Optional dependency groups markers
     lambda: AWS lambda tests