[reportlab-users] Use of hashlib.md5

[Christoph Zwerschke]

Hi Robin,

thanks for the feedback. I checked again and you're right, it seems to 
be only a problem with Python 3.8.

I'm fine with keeping it like it is then, however you should adapt the 
python_requires in setup.py in that case, since it still says >=3.7.
The code also uses the f-string debug syntax (with = sign) in a few 
places, which results in a SyntaxError on Python 3.7.

So it should be python_requires='>=3.9,<4'.

The classifiers are already correct, they don't include 3.7 and 3.8.

But it is important that python_requires is correct because pip install 
uses this information to install a compatible version.

-- Christoph


On 19.09.25 11:07, Robin Becker wrote:
> Hi Cristoph,
> 
> this new argument was added explicitly to allow use of reportlab in FIPS 
> environments. The usedforsecurity argument appears to be allowed in all 
> latest live pythons as it was introduced in python 3.9.
> 
> Python 3.8 became EOL in 2024 (end of life) and it's recommended to 
> upgrade.
> Python 3.9 will become EOL soon and we will eventually drop support for it.
> 
> Hope this is not too inconvenient