Files
edx-platform/requirements/constraints.txt
Awais Qureshi 6bef88c9f6 feat!: openedx-django-pyfs will now use boto3 to generate-urls. (#32453)
* feat!: openedx-django-pyfs will now use boto3 to generate-urls.
---------

Co-authored-by: edX requirements bot <49161187+edx-requirements-bot@users.noreply.github.com>
2023-06-15 15:05:33 +05:00

120 lines
4.7 KiB
Plaintext

# Version constraints for pip-installation.
#
# This file doesn't install any packages. It specifies version constraints
# that will be applied if a package is needed.
#
# When pinning something here, please provide an explanation of why. Ideally,
# link to other information that will help people in the future to remove the
# pin when possible. Writing an issue against the offending project and
# linking to it here is good.
# This file contains all common constraints for edx-repos
-c common_constraints.txt
# As it is not clarified what exact breaking changes will be introduced as per
# the next major release, ensure the installed version is within boundaries.
# celery>=5.2.2,<6.0.0
# 5.3.0 versions breaking timezone related tests. Adding pin for time being to clear upgrade pipeline. Unpin above
# after fixing these failures.
celery<5.3.0
kombu<5.3.0
# required for celery>=5.2.0;<5.3.0
click>=8.0,<9.0
# django-storages version 1.9 drops support for boto storage backend.
# 1.9 gives an error for details https://github.com/jschneier/django-storages/issues/831
django-storages==1.9.1
# The team that owns this package will manually bump this package rather than having it pulled in automatically.
# This is to allow them to better control its deployment and to do it in a process that works better
# for them.
edx-enterprise==3.67.0
# oauthlib>3.0.1 causes test failures ( also remove the django-oauth-toolkit constraint when this is fixed )
oauthlib==3.0.1
# django-auth-toolkit==1.3.3 requires oauthlib>=3.1.0 which is pinned because of test failures
django-oauth-toolkit<=1.3.2
# Will be updated once we update python-dateutil package
matplotlib<3.4.0
# constrained in opaque_keys. migration guide here: https://pymongo.readthedocs.io/en/4.0/migrate-to-pymongo4.html
# Major upgrade will be done in separate ticket.
pymongo<4.0.0
# greater version has breaking changes and requires some migration steps.
django-webpack-loader==0.7.0
# At the time of writing this comment, we do not know whether py2neo>=2022
# will support our currently-deployed Neo4j version (3.5).
# Feel free to loosen this constraint if/when it is confirmed that a later
# version of py2neo will work with Neo4j 3.5.
py2neo<2022
# scipy version 1.8 requires numpy>=1.17.3, we've pinned numpy to <1.17.0 in requirements/edx-sandbox/py38.in
scipy<1.8.0
# edx-enterprise, snowflake-connector-python require charset-normalizer==2.0.0
# Can be removed once snowflake-connector-python>2.7.9 is released with the fix.
charset-normalizer<2.1.0
# markdown>=3.4.0 has failures due to internal refactorings which causes the tests to fail
# pinning the version untill the issue gets resolved in the package itself
markdown<3.4.0
# pycodestyle==2.9.0 generates false positive error E275.
# Constraint can be removed once the issue https://github.com/PyCQA/pycodestyle/issues/1090 is fixed.
pycodestyle<2.9.0
# pyopenssl>22.0.0 requires cryptography>=38.0 && conflicts with snowflak-connector-python requires cryptography<37
# which causes the requirements upgrade job to fail due to constraint conflict
# This constraint can be removed once https://github.com/snowflakedb/snowflake-connector-python/issues/1259 is resolved
# and snowflake-connector-python>2.8.0 is released.
pyopenssl==22.0.0
cryptography==38.0.4 # greater version has some issues with openssl.
pylint<2.16.0 # greater version failing quality test. Fix them in seperate ticket.
# Deprecated version of the AWS SDK;
# we should stop using this
boto==2.39.0
boto3==1.7.0 # Amazon Web Services SDK for Python
botocore==1.10.84 # via boto3, s3transfer
# adding these constraints to minimize boto3 and botocore changeset
social-auth-core==4.3.0
babel==2.11.0
social-auth-app-django==5.0.0
algoliasearch==2.6.3
django-ipware==4.0.2
# pytz>2022 has major changes which are causing test failures.
# Pinning this version for now so this could be fixed in a separate PR later on
# Issue for unpinning: https://github.com/openedx/edx-platform/issues/32093
pytz<2023
# urllib3>=2.0.0 conflicts with elastic search && snowflake-connector-python packages
# which require urllib3<2 for now.
# Issue for unpinning: https://github.com/openedx/edx-platform/issues/32222
urllib3<2.0.0
# Sphinx==5.3.0 requires docutils<0.20
# Issue to unpin Sphinx to resolve this constraint: https://github.com/openedx/edx-lint/issues/338
docutils<0.20
# When we unpinned python3-saml and allowed it to upgrade from 1.9.0
# to 1.15.0 it fixed a devstack issue around ports being dropped, but
# introduced an issue around duplicate attributes (for some
# IdPs). It's not clear which version introduces the second problem.
#
# Issue for unpinning: https://github.com/openedx/edx-platform/issues/32327
python3-saml<1.10.0