diff --git a/requirements-app.txt b/requirements-app.txt
index 2cde020ae..929b90cac 100644
--- a/requirements-app.txt
+++ b/requirements-app.txt
@@ -27,7 +27,7 @@ beautifulsoup4==4.9.3
 lxml==4.6.3
 # higher version causes build to fail on PaaS due to lack of Rust
 # see https://github.com/pyca/cryptography/issues/5810
-cryptography<3.4
+cryptography<3.4 # pyup: <3.4
 
 notifications-python-client==6.0.2
 
diff --git a/requirements.txt b/requirements.txt
index c429ad7d1..e42ef8ce5 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -29,7 +29,7 @@ beautifulsoup4==4.9.3
 lxml==4.6.3
 # higher version causes build to fail on PaaS due to lack of Rust
 # see https://github.com/pyca/cryptography/issues/5810
-cryptography<3.4
+cryptography<3.4 # pyup: <3.4
 
 notifications-python-client==6.0.2