Comment and changelog re #1985

2 files changed, 7 insertions, 0 deletions

diff --git a/setup.py b/setup.py
index c62a1bb4..5a0acbac 100644
--- a/setup.py
+++ b/setup.py
@@ -90,6 +90,7 @@ setup(
     # TODO 3.0: alternately, given how prevalent ed25519 is now, and how we use
     # invoke for (increasing) subproc stuff, consider making the default flavor
     # "full" and adding a "minimal" or similar that is just-crypto?
+    # TODO 3.0: remove six, obviously
     install_requires=["bcrypt>=3.1.3", "cryptography>=2.5", "pynacl>=1.0.1", "six"],
     extras_require=extras_require,
 )
diff --git a/sites/www/changelog.rst b/sites/www/changelog.rst
index c423f5a5..af1cef05 100644
--- a/sites/www/changelog.rst
+++ b/sites/www/changelog.rst
@@ -2,6 +2,12 @@
 Changelog
 =========
 
+- :support:`1985` Add ``six`` explicitly to install-requires; it snuck into
+  active use at some point but has only been indicated by transitive dependency
+  on ``bcrypt`` until they somewhat-recently dropped it. This will be
+  short-lived until we `drop Python 2
+  support <https://bitprophet.org/projects/#roadmap>`_. Thanks to Sondre
+  Lillebø Gundersen for catch & patch.
 - :release:`2.8.1 <2021-11-28>`
 - :bug:`985` (via :issue:`992`) Fix listdir failure when server uses a locale.
   Now on Python 2.7 `SFTPAttributes <paramiko.sftp_attr.SFTPAttributes>` will