diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index e4cb5e4a..16b08fe4 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -410,6 +410,7 @@ jobs:
 
       - name: Install pip requirements
         run: |
+             "${PYTHON}" -m pip install --upgrade -r requirements.txt ${PIP_ARGS}
              if [[ "${RUNNER_OS}" == "macOS" ]]; then
                "${PYTHON}" -m pip install --upgrade cffi ${PIP_ARGS}
                "${PYTHON}" -m pip download --only-binary :all: \
@@ -419,11 +420,9 @@ jobs:
                                              --platform macosx_10_15_universal2 \
                                              cryptography
                "${PYTHON}" -m pip install --force-reinstall --no-deps cryptography*.whl
+             else
+               "${PYTHON}" -m pip install --force-reinstall --no-deps --upgrade cryptography
              fi
-             # build constraints file to prevent downgrades of existing
-             # packages
-             "${PYTHON}" -m pip freeze | grep == | sed 's/==/>=/' > constraints.txt
-             "${PYTHON}" -m pip install --upgrade -c constraints.txt -r requirements.txt ${PIP_ARGS}
              "${PYTHON}" -m pip list
 
       - name: Install PyInstaller