How well is this tested? Last time you noticed that this breaks a few packages and we had to revert it: #140024 (comment)

Hopefully the situation improved in the meantime but I wouldn't be surprised if there are some breakages left. My plan was to run a full nixpkgs-review on Python packages but unfortunately I didn't get around to it yet as it requires a lot of disk space (and time). Or someone monitors Hydra for regressions.

I only tested building python3Packages.cryptography and updated python-miio, but didn't test that yet.

Currently in the process of updating home-assistant, so both my attention and compute are exhausted.

sslyze needs some requirements hacking:

ERROR: Could not find a version that satisfies the requirement cryptography<4.0,>=2.6 (from sslyze) (from versions: none)
ERROR: No matching distribution found for cryptography<4.0,>=2.6

@veehaitch Would you mind looking into bumping sslyze and nassl? The latter fails because of known vulnerabilities.

Have built a lot of depending packages (cherry-picked back to master) on 3 platforms (macos 10.15, nixos x86_64 & aarch64) and that's the only issue I've been able to find. Think it's probably good enough for staging.

Oh, including mitmproxy and fido2.