Mirror
/
zulip
mirror of https://github.com/zulip/zulip.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
zulip/requirements/prod.txt

126 lines
4.2 KiB
Plaintext
Raw Normal View History

requirements: Rename requirements files. This commit renames various source requirements files like `dev.txt`, `mypy.txt` etc to `dev.in`, `mypy.in` etc and various locked requirements files like `dev_lock.txt`, `mypy_lock.txt` etc to `dev.txt`, `mypy.txt` etc. This will help in emphasizing to the user that *.in are actually input to `update-locked-requirements` tool which should be run after updating any of these.
2017-11-17 02:41:06 +01:00
#
# This file is GENERATED. Don't edit directly.
#
# To update, edit the non-"lock" files in requirements/*.txt, then:
#
# tools/update-locked-requirements
#
# For details, see requirements/README.md .
#
requirements: Upgrade psycopg2 to 2.7.3.4. psycopg2 package contains both binary and source currently.The binary would soon be only available in psycopg2-binary. So currently installing psycopg2 will show a warning about the future migration of binary. To avoid the warning we should only install the source. https://www.postgresql.org/message-id/CA%2Bmi_8bd6kJHL TGkuyHSnqcgDrJ1uHgQWvXCKQFD3tPQBUa2Bw%40mail.gmail.com
2018-02-21 08:08:30 +01:00
--no-binary psycopg2
requirements: Upgrade apns2 from 0.4.1 to 0.5.0.
2019-07-25 12:19:05 +02:00
apns2==0.5.0
requirements: Upgrade argon2-cffi from 18.3.0 to 19.1.0. This also upgrades various recursive dependencies of Zulip.
2019-01-30 08:38:20 +01:00
argon2-cffi==19.1.0
requirements: Update recursive dependencies. This was generated by: * `rm -f requirements/*.txt` * `./tools/update-locked-requirements` and passes tests. The effect is to unpin ourselves from old versions of a bunch of recursive dependencies of our third-party dependencies.
2018-11-13 21:29:10 +01:00
asn1crypto==0.24.0 # via cryptography
requirements: Upgrade indirect python dependencies.
2019-07-04 12:08:03 +02:00
babel==2.7.0 # via django-phonenumber-field
requirements: Upgrade ipython to 6.3.1.
2018-05-02 18:28:16 +02:00
backcall==0.1.0 # via ipython
requirements: Upgrade beautifulsoup4 from 4.7.1 to 4.8.0.
2019-07-25 12:24:07 +02:00
beautifulsoup4==4.8.0
requirements: Upgrade boto to 2.49.0. Updated the CA Bundle as well as some bucket encryption fixes.
2018-07-30 10:58:12 +02:00
boto==2.49.0
auth: Migrate google auth to python-social-auth. This replaces the two custom Google authentication backends originally written in 2012 with using the shared python-social-auth codebase that we already use for the GitHub authentication backend. These are: * GoogleMobileOauth2Backend, the ancient code path for mobile authentication last used by the EOL original Zulip Android app. * The `finish_google_oauth2` code path in zerver/views/auth.py, which was the webapp (and modern mobile app) Google authentication code path. This change doesn't fix any known bugs; its main benefit is that we get to remove hundreds of lines of security-sensitive semi-duplicated code, replacing it with a widely trusted, high quality third-party library.
2019-02-02 16:51:26 +01:00
cachetools==3.1.1 # via premailer
requirements: Update recursive dependencies. This was generated by: * `rm -f requirements/*.txt` * `./tools/update-locked-requirements` and passes tests. The effect is to unpin ourselves from old versions of a bunch of recursive dependencies of our third-party dependencies.
2018-11-13 21:29:10 +01:00
cchardet==2.1.4
requirements: Upgrade certifi from 2019.3.9 to 2019.6.16.
2019-07-26 10:01:41 +02:00
certifi==2019.6.16 # via requests
requirements: Delist recursive dependencies from *.in not used directly. Signed-off-by: Anders Kaseorg <anders@zulipchat.com>
2019-07-10 22:42:29 +02:00
cffi==1.12.3 # via argon2-cffi, cryptography
chardet==3.0.4 # via requests
cryptography==2.6.1 # via apns2, pyopenssl, requests
requirements: Update recursive dependencies. This was generated by: * `rm -f requirements/*.txt` * `./tools/update-locked-requirements` and passes tests. The effect is to unpin ourselves from old versions of a bunch of recursive dependencies of our third-party dependencies.
2018-11-13 21:29:10 +01:00
cssselect==1.0.3 # via premailer
requirements: Rename requirements files. This commit renames various source requirements files like `dev.txt`, `mypy.txt` etc to `dev.in`, `mypy.in` etc and various locked requirements files like `dev_lock.txt`, `mypy_lock.txt` etc to `dev.txt`, `mypy.txt` etc. This will help in emphasizing to the user that *.in are actually input to `update-locked-requirements` tool which should be run after updating any of these.
2017-11-17 02:41:06 +01:00
cssutils==1.0.2 # via premailer
requirements: Add 'decorator' dependency. We already had this as an indirect dependency, but now it's going to be needed to write a decorator for rate limiting authenticate() functions, so it should be added to common.in.
2019-08-01 15:04:02 +02:00
decorator==4.4.0
requirements: Upgrade defusedxml from 0.5.0 to 0.6.0.
2019-07-26 10:04:24 +02:00
defusedxml==0.6.0
requirements: Upgrade disposable-email-domains from 0.0.49 to 0.0.52.
2019-07-25 12:29:01 +02:00
disposable-email-domains==0.0.52
requirements: Upgrade django-auth-ldap from 1.7.0 to 2.0.0.
2019-07-25 12:33:44 +02:00
django-auth-ldap==2.0.0
requirements: Upgrade django-bitfield from 1.9.5 to 1.9.6.
2019-07-25 12:38:29 +02:00
django-bitfield==1.9.6
requirements: Add dependencies for two-factor auth. We're not yet ready to add 2FA to Zulip yet, but we've determined we'd like to work from these libraries. I'm not bothering to bump PROVISION_VERSION for this, since we're likely to do something else that bumps it soon, and we're not merging anything that uses these new libraries.
2017-11-29 00:13:09 +01:00
django-formtools==2.1 # via django-two-factor-auth
requirements: Upgrade django-otp from 0.5.2 to 0.6.0. This indirect dependency was upgraded separately since it contained a migration with autogenerated name.
2019-07-04 14:48:01 +02:00
django-otp==0.6.0 # via django-two-factor-auth
requirements: Add dependencies for two-factor auth. We're not yet ready to add 2FA to Zulip yet, but we've determined we'd like to work from these libraries. I'm not bothering to bump PROVISION_VERSION for this, since we're likely to do something else that bumps it soon, and we're not merging anything that uses these new libraries.
2017-11-29 00:13:09 +01:00
django-phonenumber-field==1.3.0 # via django-two-factor-auth
django-pylibmc: Add dependancy and use as cache backend for memcached.
2018-06-11 04:19:16 +02:00
django-pylibmc==0.6.1
requirements: Use maintained fork django-sendfile2 of django-sendfile The original seems to be unmaintained (johnsensible/django-sendfile#65). Notably, this fixes a bug in the filename parameter, which perviously showed the Python 3 repr of a byte string (johnsensible/django-sendfile#49). Signed-off-by: Anders Kaseorg <anders@zulipchat.com>
2019-08-12 01:52:09 +02:00
django-sendfile2==0.4.2
requirements: Rename requirements files. This commit renames various source requirements files like `dev.txt`, `mypy.txt` etc to `dev.in`, `mypy.in` etc and various locked requirements files like `dev_lock.txt`, `mypy_lock.txt` etc to `dev.txt`, `mypy.txt` etc. This will help in emphasizing to the user that *.in are actually input to `update-locked-requirements` tool which should be run after updating any of these.
2017-11-17 02:41:06 +01:00
django-statsd-mozilla==0.4.0
requirements: Upgrade django-two-factor-auth from 1.8.0 to 1.9.1.
2019-07-25 12:43:13 +02:00
django-two-factor-auth==1.9.1
requirements: Upgrade django-webpack-loader to 0.6.0.
2018-04-01 15:04:08 +02:00
django-webpack-loader==0.6.0
requirements: Upgrade Django from 1.11.22 to 1.11.23.
2019-08-15 08:56:20 +02:00
django==1.11.23
requirements: When removing future requirement, leave it commented. futures is no longer there to be removed. Be clear about why we’re removing future (it was never a “pip-tools bug”), and leave evidence behind to help indicate how long that will be needed. Signed-off-by: Anders Kaseorg <anders@zulipchat.com>
2019-08-25 01:27:27 +02:00
# future==0.17.1 # via python-twitter
requirements: Rename requirements files. This commit renames various source requirements files like `dev.txt`, `mypy.txt` etc to `dev.in`, `mypy.in` etc and various locked requirements files like `dev_lock.txt`, `mypy_lock.txt` etc to `dev.txt`, `mypy.txt` etc. This will help in emphasizing to the user that *.in are actually input to `update-locked-requirements` tool which should be run after updating any of these.
2017-11-17 02:41:06 +01:00
h2==2.6.2 # via hyper
hpack==3.0.0 # via h2
requirements: Upgrade html2text to 2018.1.9.
2018-02-13 20:10:51 +01:00
html2text==2018.1.9
requirements: Upgrade httplib2 from 0.12.3 to 0.13.0.
2019-07-25 12:48:02 +02:00
httplib2==0.13.0
hipchat: Improve import of public room subscribers. Now, if you pass an api_key, we'll initialize the public room subscribers to be whatever they were at the time the import happened. Also, document the situation on the caveats section.
2019-01-10 00:42:38 +01:00
hypchat==0.21
requirements: Rename requirements files. This commit renames various source requirements files like `dev.txt`, `mypy.txt` etc to `dev.in`, `mypy.in` etc and various locked requirements files like `dev_lock.txt`, `mypy_lock.txt` etc to `dev.txt`, `mypy.txt` etc. This will help in emphasizing to the user that *.in are actually input to `update-locked-requirements` tool which should be run after updating any of these.
2017-11-17 02:41:06 +01:00
hyper==0.7.0 # via apns2
hyperframe==3.2.0 # via h2, hyper
bugdown: Force absolute urls in topic links. If a url doesn't have a scheme, browsers would treat it as a relative url and open something like: https://chat.zulip.org/google.com instead. This PR fixes the issue on the backend; the frontend implementation remains out of sync and the user sending the message wouldn't see any linkification for urls without a scheme. Fixes #12791.
2019-07-19 07:46:07 +02:00
hyperlink==19.0.0
idna==2.8 # via hyperlink, requests
requirements: Upgrade ijson from 2.3 to 2.4.
2019-07-25 12:52:50 +02:00
ijson==2.4
requirements: Rename requirements files. This commit renames various source requirements files like `dev.txt`, `mypy.txt` etc to `dev.in`, `mypy.in` etc and various locked requirements files like `dev_lock.txt`, `mypy_lock.txt` etc to `dev.txt`, `mypy.txt` etc. This will help in emphasizing to the user that *.in are actually input to `update-locked-requirements` tool which should be run after updating any of these.
2017-11-17 02:41:06 +01:00
ipython-genutils==0.2.0 # via traitlets
requirements: Upgrade ipython to 6.5.0. No major changes. Miscellaneous bug fixes and compatibility with Python 3.7.
2018-07-30 12:39:26 +02:00
ipython==6.5.0
requirements: Upgrade indirect python dependencies.
2019-07-04 12:08:03 +02:00
jedi==0.14.0 # via ipython
requirements: Upgrade Jinja2 from 2.10 to 2.10.1.
2019-04-23 18:39:54 +02:00
jinja2==2.10.1
requirements: Remove editable flag from *.in. Fixes #12374. Signed-off-by: Anders Kaseorg <anders@zulipchat.com>
2019-08-25 01:38:20 +02:00
git+https://github.com/zulip/libthumbor.git@60ed2431c07686a12f2770b2d852c5650f3ccfc6#egg=libthumbor==1.3.2zulip
requirements: Upgrade lxml from 4.3.3 to 4.3.4.
2019-07-25 12:57:45 +02:00
lxml==4.3.4
requirements: Rename requirements files. This commit renames various source requirements files like `dev.txt`, `mypy.txt` etc to `dev.in`, `mypy.in` etc and various locked requirements files like `dev_lock.txt`, `mypy_lock.txt` etc to `dev.txt`, `mypy.txt` etc. This will help in emphasizing to the user that *.in are actually input to `update-locked-requirements` tool which should be run after updating any of these.
2017-11-17 02:41:06 +01:00
markdown-include==0.5.1
dependencies: Upgrade markdown from 3.0.1 -> 3.1.1. Fixes #12192.
2019-07-03 06:26:56 +02:00
markdown==3.1.1
requirements: Delist recursive dependencies from *.in not used directly. Signed-off-by: Anders Kaseorg <anders@zulipchat.com>
2019-07-10 22:42:29 +02:00
markupsafe==1.1.1 # via jinja2
requirements: Upgrade python-zulip-api/zulip to 7dfecf557.
2018-08-15 11:34:45 +02:00
matrix-client==0.3.2
requirements: Upgrade mock from 2.0.0 to 3.0.5.
2019-07-25 13:02:58 +02:00
mock==3.0.5
requirements: Delist recursive dependencies from *.in not used directly. Signed-off-by: Anders Kaseorg <anders@zulipchat.com>
2019-07-10 22:42:29 +02:00
oauthlib==3.0.1 # via requests-oauthlib, social-auth-core
requirements: Upgrade indirect python dependencies.
2019-07-04 12:08:03 +02:00
parso==0.5.0 # via jedi
requirements: Upgrade indirect dependencies in dev.txt, prod.txt.
2019-04-25 14:49:43 +02:00
pexpect==4.7.0 # via ipython
requirements: Upgrade phonenumberslite from 8.10.12 to 8.10.15.
2019-07-25 13:07:52 +02:00
phonenumberslite==8.10.15
requirements: Update recursive dependencies. This was generated by: * `rm -f requirements/*.txt` * `./tools/update-locked-requirements` and passes tests. The effect is to unpin ourselves from old versions of a bunch of recursive dependencies of our third-party dependencies.
2018-11-13 21:29:10 +01:00
pickleshare==0.7.5 # via ipython
requirements: Upgrade pika from 0.12.0 to 0.13.0. The important changes to pika for us are based on this PR of ours: https://github.com/pika/pika/pull/1129 Fixes #11394.
2019-01-31 08:10:34 +01:00
pika==0.13.0
requirements: Upgrade pillow from 5.4.1 to 6.1.0. Fixes #12193
2019-07-05 07:53:18 +02:00
pillow==6.1.0
requirements: Upgrade polib to 1.1.0.
2018-02-13 20:53:36 +01:00
polib==1.1.0
requirements: Upgrade premailer from 3.4.0 to 3.5.0.
2019-07-25 13:16:09 +02:00
premailer==3.5.0
requirements: Upgrade indirect dependencies in dev.txt, prod.txt.
2019-04-25 14:49:43 +02:00
prompt-toolkit==1.0.16 # via ipython
requirements: Upgrade psycopg2 from 2.8.2 to 2.8.3.
2019-07-25 13:21:07 +02:00
psycopg2==2.8.3
requirements: Update recursive dependencies. This was generated by: * `rm -f requirements/*.txt` * `./tools/update-locked-requirements` and passes tests. The effect is to unpin ourselves from old versions of a bunch of recursive dependencies of our third-party dependencies.
2018-11-13 21:29:10 +01:00
ptyprocess==0.6.0 # via pexpect
requirements: Upgrade py3dns to 3.2.0. A bunch of minor bug fixes.
2018-07-30 13:17:57 +02:00
py3dns==3.2.0
alert_words: Performance improvements in looking for alert_words. This commit leverages the ahocorasick algorithm to build a set of user_ids that have their alert_words present in the message. It runs in linear time of the order of length of the input message as opposed to number of alert_words. This is after building a ahocorasick Automaton which runs in O(number of alert_words in entire realm) which is usually cached.
2019-02-11 15:19:38 +01:00
pyahocorasick==1.4.0
auth: Migrate google auth to python-social-auth. This replaces the two custom Google authentication backends originally written in 2012 with using the shared python-social-auth codebase that we already use for the GitHub authentication backend. These are: * GoogleMobileOauth2Backend, the ancient code path for mobile authentication last used by the EOL original Zulip Android app. * The `finish_google_oauth2` code path in zerver/views/auth.py, which was the webapp (and modern mobile app) Google authentication code path. This change doesn't fix any known bugs; its main benefit is that we get to remove hundreds of lines of security-sensitive semi-duplicated code, replacing it with a widely trusted, high quality third-party library.
2019-02-02 16:51:26 +01:00
pyasn1-modules==0.2.5 # via python-ldap
pyasn1==0.4.5 # via pyasn1-modules, python-ldap
requirements: Update recursive dependencies. This was generated by: * `rm -f requirements/*.txt` * `./tools/update-locked-requirements` and passes tests. The effect is to unpin ourselves from old versions of a bunch of recursive dependencies of our third-party dependencies.
2018-11-13 21:29:10 +01:00
pycparser==2.19 # via cffi
requirements: Upgrade Pygments from 2.3.1 to 2.4.2.
2019-07-25 13:26:05 +02:00
pygments==2.4.2
requirements: Upgrade PyJWT from 1.6.4 to 1.7.1.
2019-01-07 11:59:17 +01:00
pyjwt==1.7.1
requirements: Upgrade pylibmc to 1.6.0.
2018-11-12 08:51:28 +01:00
pylibmc==1.6.0
requirements: Rename requirements files. This commit renames various source requirements files like `dev.txt`, `mypy.txt` etc to `dev.in`, `mypy.in` etc and various locked requirements files like `dev_lock.txt`, `mypy_lock.txt` etc to `dev.txt`, `mypy.txt` etc. This will help in emphasizing to the user that *.in are actually input to `update-locked-requirements` tool which should be run after updating any of these.
2017-11-17 02:41:06 +01:00
pyoembed==0.1.2
requirements: Remove unused dependencies. * backports-abc: For old Python versions. * backports.ssl-match-hostname: For old Python versions. * docopt: Has never been used directly. * gitdb: Has never been used directly. * ndg-httpsclient: No longer used by requests ≥ 2.12.1. * pycrypto: Has never been used directly. * smmap: Has never been used directly. * typing: For old Python versions. * typing_extensions: For old Python versions. PROVISION_VERSION is not bumped because these were already unused since at least the last major bump. Signed-off-by: Anders Kaseorg <anders@zulipchat.com>
2019-07-10 22:49:21 +02:00
pyopenssl==19.0.0 # via requests
requirements: Upgrade indirect python dependencies.
2019-07-04 12:08:03 +02:00
pysocks==1.7.0 # via twilio
requirements: Upgrade python-dateutil from 2.7.5 to 2.8.0.
2019-03-06 10:05:21 +01:00
python-dateutil==2.8.0
requirements: Rename requirements files. This commit renames various source requirements files like `dev.txt`, `mypy.txt` etc to `dev.in`, `mypy.in` etc and various locked requirements files like `dev_lock.txt`, `mypy_lock.txt` etc to `dev.txt`, `mypy.txt` etc. This will help in emphasizing to the user that *.in are actually input to `update-locked-requirements` tool which should be run after updating any of these.
2017-11-17 02:41:06 +01:00
python-gcm==0.4
requirements: Upgrade indirect dependencies in dev.txt, prod.txt.
2019-04-25 14:49:43 +02:00
python-ldap==3.2.0 # via django-auth-ldap
url preview: Add python-magic dependency for content-type sniffing.
2019-05-05 05:28:13 +02:00
python-magic==0.4.15
requirements: Upgrade python-twitter to 3.5.
2018-11-09 16:13:21 +01:00
python-twitter==3.5
requirements: Rename requirements files. This commit renames various source requirements files like `dev.txt`, `mypy.txt` etc to `dev.in`, `mypy.in` etc and various locked requirements files like `dev_lock.txt`, `mypy_lock.txt` etc to `dev.txt`, `mypy.txt` etc. This will help in emphasizing to the user that *.in are actually input to `update-locked-requirements` tool which should be run after updating any of these.
2017-11-17 02:41:06 +01:00
python3-openid==3.1.0 # via social-auth-core
requirements: Upgrade pytz from 2018.9 to 2019.1.
2019-04-23 20:23:45 +02:00
pytz==2019.1
requirements: Upgrade indirect python dependencies.
2019-07-04 12:08:03 +02:00
pyyaml==5.1.1 # via yamole
requirements: Upgrade argon2-cffi from 18.3.0 to 19.1.0. This also upgrades various recursive dependencies of Zulip.
2019-01-30 08:38:20 +01:00
qrcode==6.1 # via django-two-factor-auth
requirements: Upgrade redis from 2.10.6 to 3.2.1. Fixes #11209. This requires changing how zadd is used in rate_limiter.py: In redis-py >= 3.0 the pairs to ZADD need to be passed as a dictionary, not as *args or **kwargs, as described at https://pypi.org/project/redis/3.2.1/ in the section "Upgrading from redis-py 2.X to 3.0". The rate_limiter change has to be in one commit with the redis upgrade, because the dict format is not supported before redis-py 3.0.
2019-07-28 15:08:55 +02:00
redis==3.2.1
requirements: Upgrade indirect python dependencies.
2019-07-04 12:08:03 +02:00
regex==2019.6.8
requirements: Delist recursive dependencies from *.in not used directly. Signed-off-by: Anders Kaseorg <anders@zulipchat.com>
2019-07-10 22:42:29 +02:00
requests-oauthlib==1.0.0 # via python-twitter, social-auth-core
requirements: Upgrade indirect python dependencies.
2019-07-04 12:08:03 +02:00
requests[security]==2.22.0 # via hypchat, matrix-client, premailer, pyoembed, python-gcm, python-twitter, requests-oauthlib, social-auth-core, stripe, twilio
requirements: Rename requirements files. This commit renames various source requirements files like `dev.txt`, `mypy.txt` etc to `dev.in`, `mypy.in` etc and various locked requirements files like `dev_lock.txt`, `mypy_lock.txt` etc to `dev.txt`, `mypy.txt` etc. This will help in emphasizing to the user that *.in are actually input to `update-locked-requirements` tool which should be run after updating any of these.
2017-11-17 02:41:06 +01:00
simplegeneric==0.8.1 # via ipython
requirements: Upgrade six from 1.11.0 to 1.12.0.
2019-01-07 16:32:53 +01:00
six==1.12.0
requirements: Upgrade social-auth-app-django to 3.1.0.
2018-11-09 16:18:35 +01:00
social-auth-app-django==3.1.0
requirements: Upgrade indirect python dependencies.
2019-07-04 12:08:03 +02:00
social-auth-core==3.2.0 # via social-auth-app-django
requirements: Upgrade sockjs-tornado to 1.0.6.
2018-11-09 16:19:45 +01:00
sockjs-tornado==1.0.6
requirements: Upgrade indirect python dependencies.
2019-07-04 12:08:03 +02:00
soupsieve==1.9.2 # via beautifulsoup4
requirements: Rename requirements files. This commit renames various source requirements files like `dev.txt`, `mypy.txt` etc to `dev.in`, `mypy.in` etc and various locked requirements files like `dev_lock.txt`, `mypy_lock.txt` etc to `dev.txt`, `mypy.txt` etc. This will help in emphasizing to the user that *.in are actually input to `update-locked-requirements` tool which should be run after updating any of these.
2017-11-17 02:41:06 +01:00
sourcemap==0.2.1
requirements: Upgrade SQLAlchemy from 1.3.3 to 1.3.6.
2019-07-25 13:33:49 +02:00
sqlalchemy==1.3.6
requirements: Update recursive dependencies. This was generated by: * `rm -f requirements/*.txt` * `./tools/update-locked-requirements` and passes tests. The effect is to unpin ourselves from old versions of a bunch of recursive dependencies of our third-party dependencies.
2018-11-13 21:29:10 +01:00
statsd==3.3.0 # via django-statsd-mozilla
requirements: Upgrade stripe pip package from 2.21.0 to 2.35.0.
2019-08-19 10:47:22 +02:00
stripe==2.35.0
requirements: Remove editable flag from *.in. Fixes #12374. Signed-off-by: Anders Kaseorg <anders@zulipchat.com>
2019-08-25 01:38:20 +02:00
git+https://github.com/zulip/talon.git@7d8bdc4dbcfcc5a73298747293b99fe53da55315#egg=talon==1.2.10.zulip1
requirements: Upgrade tornado to 4.5.3.
2018-02-13 21:44:35 +01:00
tornado==4.5.3
requirements: Rename requirements files. This commit renames various source requirements files like `dev.txt`, `mypy.txt` etc to `dev.in`, `mypy.in` etc and various locked requirements files like `dev_lock.txt`, `mypy_lock.txt` etc to `dev.txt`, `mypy.txt` etc. This will help in emphasizing to the user that *.in are actually input to `update-locked-requirements` tool which should be run after updating any of these.
2017-11-17 02:41:06 +01:00
traitlets==4.3.2 # via ipython
requirements: Upgrade twilio from 6.26.2 to 6.29.2.
2019-07-25 13:38:52 +02:00
twilio==6.29.2
mypy: Migrate from mypy_extensions to typing_extensions. This gives us access to typing_extensions.Deque, which was not added to typing until 3.5.4. (PROVISION_VERSION is not bumped because the transitive dependency set in dev.txt hasn’t changed.) Signed-off-by: Anders Kaseorg <anders@zulipchat.com>
2019-08-06 01:29:34 +02:00
typing_extensions==3.7.4
requirements: Remove editable flag from *.in. Fixes #12374. Signed-off-by: Anders Kaseorg <anders@zulipchat.com>
2019-08-25 01:38:20 +02:00
git+https://github.com/zulip/ultrajson@70ac02bec#egg=ujson==1.35+git
requirements: Upgrade indirect python dependencies.
2019-07-04 12:08:03 +02:00
urllib3==1.25.3 # via requests
requirements: Upgrade uWSGI to 2.0.17.1. TLSv1 is now disabled by default. Can be re-enabled with ssl-enable-tlsv1 at our own risk. https://uwsgi-docs.readthedocs.io/en/latest/ Changelog-2.0.17.1.html
2018-07-31 12:21:22 +02:00
uwsgi==2.0.17.1
requirements: Upgrade virtualenv-clone from 0.5.1 to 0.5.3.
2019-04-23 20:39:19 +02:00
virtualenv-clone==0.5.3
requirements: Rename requirements files. This commit renames various source requirements files like `dev.txt`, `mypy.txt` etc to `dev.in`, `mypy.in` etc and various locked requirements files like `dev_lock.txt`, `mypy_lock.txt` etc to `dev.txt`, `mypy.txt` etc. This will help in emphasizing to the user that *.in are actually input to `update-locked-requirements` tool which should be run after updating any of these.
2017-11-17 02:41:06 +01:00
wcwidth==0.1.7 # via prompt-toolkit
requirements: Upgrade yamole from 2.1.5 to 2.1.6.
2019-01-07 16:47:23 +01:00
yamole==2.1.6
requirements: Remove editable flag from *.in. Fixes #12374. Signed-off-by: Anders Kaseorg <anders@zulipchat.com>
2019-08-25 01:38:20 +02:00
git+https://github.com/zulip/python-zulip-api.git@804501610b6a205334e71b4e441fca60acf650da#egg=zulip==0.6.1_git&subdirectory=zulip
git+https://github.com/zulip/python-zulip-api.git@804501610b6a205334e71b4e441fca60acf650da#egg=zulip_bots==0.6.1+git&subdirectory=zulip_bots
requirements: Upgrade pip-tools to 3.8.0; downgrade pip to 19.1.1. These are not the latest versions, but pip-tools 3.9.0 or 4.0.0 fails to resolve dependencies from Git URLs: pip._internal.exceptions.DistributionNotFound: No matching distribution found for zulip==0.6.1_git (from -r requirements/common.in (line 135)) while pip 19.2 breaks pip-tools 3.8.0: TypeError: __init__() got an unexpected keyword argument 'find_links' Fixes #10802. Signed-off-by: Anders Kaseorg <anders@zulipchat.com>
2019-08-25 01:12:15 +02:00
# The following packages are considered to be unsafe in a requirements file:
requirements: Upgrade pip-tools to 4.1.0 and pip to 19.2.3. Closes #13068. Signed-off-by: Anders Kaseorg <anders@zulipchat.com>
2019-08-26 22:01:32 +02:00
pip==19.2.3
requirements: Include packages that pip-tools considers unsafe. It’s unclear why pip-tools considers these packages unsafe, and excluding them from being pinned has resulted in nondeterministic output that makes our test suite unhappy. Signed-off-by: Anders Kaseorg <anders@zulipchat.com>
2019-08-26 01:04:18 +02:00
setuptools==41.0.1 # via ipython, markdown