Commit 7594e7eb4a for bind

commit 7594e7eb4a15a09c89e0f3ede9844aed864a89e2
Author: Michal Nowak <mnowak@isc.org>
Date:   Wed Oct 14 12:39:18 2026 +0200

    Pin dnspython to 2.8.0 in the system test requirements

    dnspython 2.9.0 (released 2026-10-09) breaks the system tests in
    several ways: its DNSSEC support now requires cryptography >= 50, which
    the CI images do not keep because sslyze pins cryptography < 47; it
    adds a dedicated SIG rdata class, so the nsupdate ans11 server can no
    longer put SIG(A) and SIG(MX) into one rdataset; and generic rdata text
    is now hexified in 128-character chunks instead of 32, which trips the
    size assertion in the xfer TCP message compression test.

    Pin dnspython to the last known-good release until the tests and the
    CI images are adapted to 2.9.0.

    Assisted-by: Claude:claude-fable-5-1

diff --git a/bin/tests/system/requirements.txt b/bin/tests/system/requirements.txt
index d13fc4d147..1d694afb3d 100644
--- a/bin/tests/system/requirements.txt
+++ b/bin/tests/system/requirements.txt
@@ -1,6 +1,6 @@
 ### Test requirements

-dnspython>=2.8.0
+dnspython==2.8.0

 cryptography
 gssapi