fix(python): update and sync maturin versions between build and upload (#539)

* fix: update and sync maturin versions between build and upload

* chore: update ring and ignore paste+backoff being unmaintained

Author: jselig-rigetti

.github/workflows/release-python.yml

@@ -213,3 +213,4 @@ jobs:
       with:
         command: upload
         args: --skip-existing wheels/*
+        maturin-version: v1.8.2 # coordinate this with crates/python/pyproject.toml

Cargo.lock

@@ -43,15 +43,15 @@ dev = [
     "pytest-sugar >= 1.0.0",
     "pytest-clarity >= 1.0.1",
     "syrupy >= 4.0.0",
-    "maturin == 1.7.0",
+    "maturin == 1.8.2", # coordinate this with .github/workflows/release-python.yml
     "numpy >= 1.24.1",
     "pdoc >= 14.6.1",
     "ruff >= 0.3.5",
     "mypy >= 1.14.1",
 ]
 
 [build-system]
-requires = ["maturin>=1.7.0,<1.8.0"]
+requires = ["maturin==1.8.2"] # coordinate this with .github/workflows/release-python.yml
 build-backend = "maturin"
 
 [tool.black]

crates/python/pyproject.toml

@@ -68,7 +68,9 @@ ignore = [
     { id = "RUSTSEC-2024-0375", reason = "introduced by atty, a transitive dependency of multiple dependencies, with no upgrade path" },
     { id = "RUSTSEC-2024-0006", reason = "introduced by shlex, a transitive dependency of bindgen with no upgrade path" },
     { id = "RUSTSEC-2021-0139", reason = "ansi_term is unmaintained, but used by clap" },
-    { id = "RUSTSEC-2024-0384", reason = "instant is unmaintained, dependency of \"backoff\", which also appears to be unmaintained" }
+    { id = "RUSTSEC-2024-0384", reason = "instant is unmaintained, dependency of \"backoff\", which also appears to be unmaintained" },
+    { id = "RUSTSEC-2024-0436", reason = "paste is unmaintained" },
+    { id = "RUSTSEC-2025-0012", reason = "backoff is unmaintained" }
 ]
 yanked = "deny"
 # If this is true, then cargo deny will use the git executable to fetch advisory database.