87575eec43bf6bcaaf66257ec67324b905e417ee
passlib 1.7.4 (last release, unmaintained since ~2020) detects its bcrypt backend via bcrypt.__about__.__version__, which bcrypt>=4.1 removed. Every hash_password/verify_password call was raising 'password cannot be longer than 72 bytes' -- a misleading downstream symptom of the real AttributeError: module 'bcrypt' has no attribute '__about__'. Without this pin, pip install -r requirements.txt silently grabs whatever the latest bcrypt is and breaks register/login outright -- confirmed this broke 3 separate pieces of work this session (manual register curl tests, and now a real Godot smoke test) purely from environment drift, not from any actual code bug. Verified the fix works from a genuinely clean venv + pip install, not just patching the already-installed shared venv. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
agp-game
Agentic Game Platform - Godot game built by autonomous agents
Description
Languages
GDScript
57.2%
Python
42.3%
Shell
0.5%