diff --git a/pkgs/development/python-modules/executorch/default.nix b/pkgs/development/python-modules/executorch/default.nix
index 02604cfe8f10..16c5f2255d10 100644
--- a/pkgs/development/python-modules/executorch/default.nix
+++ b/pkgs/development/python-modules/executorch/default.nix
@@ -56,6 +56,7 @@ buildPythonPackage.override { inherit (torch) stdenv; } (finalAttrs: {
   pname = "executorch";
   version = "1.2.0";
   pyproject = true;
+  __structuredAttrs = true;
 
   src = fetchFromGitHub {
     owner = "pytorch";
@@ -152,6 +153,7 @@ buildPythonPackage.override { inherit (torch) stdenv; } (finalAttrs: {
     "pytest-xdist"
   ];
   pythonRelaxDeps = [
+    "mpmath"
     "scikit-learn"
     "torchao"
   ];
diff --git a/pkgs/development/python-modules/mlflow/default.nix b/pkgs/development/python-modules/mlflow/default.nix
index 2664291d6798..8f3d77ca8b50 100644
--- a/pkgs/development/python-modules/mlflow/default.nix
+++ b/pkgs/development/python-modules/mlflow/default.nix
@@ -32,6 +32,7 @@ buildPythonPackage (finalAttrs: {
   pname = "mlflow";
   version = "3.12.0";
   pyproject = true;
+  __structuredAttrs = true;
 
   src = fetchFromGitHub {
     owner = "mlflow";
@@ -47,6 +48,9 @@ buildPythonPackage (finalAttrs: {
 
   build-system = [ setuptools ];
 
+  pythonRelaxDeps = [
+    "cryptography"
+  ];
   dependencies = [
     aiohttp
     alembic
diff --git a/pkgs/development/python-modules/sigstore/default.nix b/pkgs/development/python-modules/sigstore/default.nix
index bf3422f6cdb7..6cc24de623ba 100644
--- a/pkgs/development/python-modules/sigstore/default.nix
+++ b/pkgs/development/python-modules/sigstore/default.nix
@@ -37,19 +37,21 @@
 
 buildPythonPackage (finalAttrs: {
   pname = "sigstore";
-  version = "4.1.0";
+  version = "4.2.0";
   pyproject = true;
+  __structuredAttrs = true;
 
   src = fetchFromGitHub {
     owner = "sigstore";
     repo = "sigstore-python";
     tag = "v${finalAttrs.version}";
-    hash = "sha256-Wt9ZoMHTiMlbAab9p8/WF38/OiyCaqHPS5R7/fTAfxw=";
+    hash = "sha256-33JjQdYH/FptFUo0CecWItm9qH1wGQPHdk/JSdX8QfQ=";
   };
 
   build-system = [ flit-core ];
 
   pythonRelaxDeps = [
+    "cryptography"
     "sigstore-models"
   ];
 
@@ -82,6 +84,15 @@ buildPythonPackage (finalAttrs: {
 
   pythonImportsCheck = [ "sigstore" ];
 
+  disabledTestPaths = [
+    # AttributeError: module 'cryptography.hazmat.primitives.asymmetric.ec' has no attribute 'SECT163K1'
+    #
+    # Uses ec.SECT163K1 which cryptography 48 removed entirely.
+    # Upstream considers this over-testing (sigstore itself never uses this curve at runtime):
+    # https://github.com/sigstore/sigstore-python/issues/1603
+    "test/unit/internal/test_key_details.py"
+  ];
+
   disabledTests = [
     # Tests require network access
     "test_fail_init_url"