diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 2a3ee57e..3a35bc1f 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -430,9 +430,6 @@ jobs:
              echo "before anything..."
              "${PYTHON}" -m pip list
              if [[ "${RUNNER_OS}" == "macOS" ]]; then
-               "${PYTHON}" -m pip install --upgrade --no-binary :all: -r requirements.txt
-               echo "after requirements..."
-               "${PYTHON}" -m pip list
                # cffi is a dep of cryptography and doesn't ship
                # a universal2 wheel so we must build one ourself :-/
                export CFLAGS="-arch x86_64 -arch arm64"
@@ -452,13 +449,16 @@ jobs:
                                              --platform macosx_10_15_universal2 \
                                              cryptography
                "${PYTHON}" -m pip install --force-reinstall --no-deps cryptography*.whl
+               echo "after cryptography..."
+               "${PYTHON}" -m pip list
+               "${PYTHON}" -m pip install --upgrade --no-binary :all: -r requirements.txt
              else
                "${PYTHON}" -m pip install --upgrade -r requirements.txt
                echo "after requirements..."
                "${PYTHON}" -m pip list
                "${PYTHON}" -m pip install --force-reinstall --no-deps --upgrade cryptography
              fi
-             echo "after cryptography..."
+             echo "after everything..."
              "${PYTHON}" -m pip list
 
       - name: Install PyInstaller