[fix] pin desktop and Python dependencies to OpenSSL 3.3.2

apps/desktop/xmake/options.lua

@@ -49,6 +49,9 @@ function setup_options_and_dependencies()
     end
 
     add_requireconfs("**.python", {version = "3.12", override = true, configs = {pgo = false}})
+    -- Keep application and build-tool dependencies on the same OpenSSL release.
+    add_requireconfs("**.openssl", "**.openssl3",
+        {version = "3.3.2", system = false, override = true})
     add_requires("spdlog 1.14.1", {system = false})
     add_requires("slint 1.17.1", {configs = {shared = true}})
     add_requires("libsdl3 3.2.26", {configs = {shared = false}})

deps/thirdparty/openssl/xmake.lua

@@ -0,0 +1,7 @@
+-- Python's recipe looks up its dependency as "openssl". Keep that name while
+-- using the OpenSSL 3 recipe, including its sources, patches and build scripts.
+package("openssl")
+    set_base("openssl3")
+    -- Rebuild consumers cached against the old OpenSSL 1.x ABI.
+    set_policy("package.strict_compatibility", true)
+package_end()

deps/thirdparty/xmake.lua

@@ -1 +1 @@
-includes("cpp-httplib", "rust", "slint")
+includes("cpp-httplib", "openssl", "rust", "slint")