Failed to install latest cryptography package

[svaningelgem]

So my pyproject is pretty straightforward:

[tool.poetry.dependencies]
python = "^3.8"
ruff = "*"
requests = "*"
importlib-metadata = {version = "*", python = "<3.8"}
keyring = {version = "*", optional = true}
[tool.poetry.group.dev.dependencies]
pytest-mock = "*"
pytest-cov = "*"

As I don't really care for any of the versions.

setup of my environment:

mamba create -n r2b python=3.8
mamba activate r2b
pip install poetry
poetry update -vv

==> Python version 3.8.20

After this, I end up with cryptography 43.0.3, and I fail to understand why...
When installing dependencies, I see this:

   1: selecting secretstorage (3.3.3)
   1: derived: cryptography (>=2.0)
   1: fact: cryptography (44.0.1) requires Python !=3.9.0,!=3.9.1,>=3.7
   1: derived: not cryptography (==44.0.1)
   1: fact: cryptography (44.0.0) requires Python !=3.9.0,!=3.9.1,>=3.7
   1: derived: not cryptography (==44.0.0)
   1: fact: cryptography (43.0.3) depends on cffi (>=1.12)
   1: selecting cryptography (43.0.3)

But version 3.8.20 of python clearly is not the mentioned 3.9 versions, and it's clearly >= 3.7.

So I don't understand why poetry's resolver doesn't choose the right version?
And I hope the community can help me understand...

[sbrunner]

You should set:

python = ">=3.8,!=3.9.0,!=3.9.1,<4.0"

To match the cryptography requirements :-)

[svaningelgem]

Thanks.

So basically it's not selecting 44.0.1 because I did not exclude 3.9.0/1. Even though the latest version of Python 3.9 is 3.9.21.