Mirror
/
zulip
mirror of https://github.com/zulip/zulip.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
zulip/requirements/dev.txt

186 lines
6.3 KiB
Plaintext
Raw Normal View History

requirements: Rename requirements files. This commit renames various source requirements files like `dev.txt`, `mypy.txt` etc to `dev.in`, `mypy.in` etc and various locked requirements files like `dev_lock.txt`, `mypy_lock.txt` etc to `dev.txt`, `mypy.txt` etc. This will help in emphasizing to the user that *.in are actually input to `update-locked-requirements` tool which should be run after updating any of these.
2017-11-17 02:41:06 +01:00
#
# This file is GENERATED. Don't edit directly.
#
# To update, edit the non-"lock" files in requirements/*.txt, then:
#
# tools/update-locked-requirements
#
# For details, see requirements/README.md .
#
requirements: Upgrade psycopg2 to 2.7.3.4. psycopg2 package contains both binary and source currently.The binary would soon be only available in psycopg2-binary. So currently installing psycopg2 will show a warning about the future migration of binary. To avoid the warning we should only install the source. https://www.postgresql.org/message-id/CA%2Bmi_8bd6kJHL TGkuyHSnqcgDrJ1uHgQWvXCKQFD3tPQBUa2Bw%40mail.gmail.com
2018-02-21 08:08:30 +01:00
--no-binary psycopg2
requirements: Use a forked version of libthumbor for performance. This optimizes the import performance of Zulip by using a fork of pkgresources. The fork just has a single commit, which replaces libthumbor's use of pkgresources (which is really slow to import) with a direct query to the version number. This fixes part of #9953.
2018-10-17 20:15:02 +02:00
git+https://github.com/zulip/libthumbor.git@60ed2431c07686a12f2770b2d852c5650f3ccfc6#egg=libthumbor==1.3.2zulip
dependencies: Install line_profiler from our fork. This is required for Python 3.7 support; line_profiler needs a release with Cython rerun following the Python 3.7 release, and this achieves that goal.
2019-04-26 00:02:34 +02:00
git+https://github.com/zulip/line_profiler.git#egg=line_profiler==2.1.2.zulip1
requirements: Rename requirements files. This commit renames various source requirements files like `dev.txt`, `mypy.txt` etc to `dev.in`, `mypy.in` etc and various locked requirements files like `dev_lock.txt`, `mypy_lock.txt` etc to `dev.txt`, `mypy.txt` etc. This will help in emphasizing to the user that *.in are actually input to `update-locked-requirements` tool which should be run after updating any of these.
2017-11-17 02:41:06 +01:00
git+https://github.com/zulip/talon.git@7d8bdc4dbcfcc5a73298747293b99fe53da55315#egg=talon==1.2.10.zulip1
git+https://github.com/zulip/ultrajson@70ac02bec#egg=ujson==1.35+git
pypi: Upgrade to release 0.6.1.
2019-07-15 02:19:44 +02:00
git+https://github.com/zulip/python-zulip-api.git@0.6.1#egg=zulip==0.6.1_git&subdirectory=zulip
git+https://github.com/zulip/python-zulip-api.git@0.6.1#egg=zulip_bots==0.6.1+git&subdirectory=zulip_bots
requirements: Delist recursive dependencies from *.in not used directly. Signed-off-by: Anders Kaseorg <anders@zulipchat.com>
2019-07-10 22:42:29 +02:00
alabaster==0.7.12 # via sphinx
requirements: Upgrade apns to 0.4.1.
2018-05-24 13:05:23 +02:00
apns2==0.4.1
requirements: Upgrade argon2-cffi from 18.3.0 to 19.1.0. This also upgrades various recursive dependencies of Zulip.
2019-01-30 08:38:20 +01:00
argon2-cffi==19.1.0
requirements: Rename requirements files. This commit renames various source requirements files like `dev.txt`, `mypy.txt` etc to `dev.in`, `mypy.in` etc and various locked requirements files like `dev_lock.txt`, `mypy_lock.txt` etc to `dev.txt`, `mypy.txt` etc. This will help in emphasizing to the user that *.in are actually input to `update-locked-requirements` tool which should be run after updating any of these.
2017-11-17 02:41:06 +01:00
arrow==0.10.0 # via gitlint
requirements: Update recursive dependencies. This was generated by: * `rm -f requirements/*.txt` * `./tools/update-locked-requirements` and passes tests. The effect is to unpin ourselves from old versions of a bunch of recursive dependencies of our third-party dependencies.
2018-11-13 21:29:10 +01:00
asn1crypto==0.24.0 # via cryptography
requirements: Upgrade indirect dependencies.
2019-03-06 11:42:31 +01:00
attrs==19.1.0 # via automat, service-identity, twisted
requirements: Update recursive dependencies. This was generated by: * `rm -f requirements/*.txt` * `./tools/update-locked-requirements` and passes tests. The effect is to unpin ourselves from old versions of a bunch of recursive dependencies of our third-party dependencies.
2018-11-13 21:29:10 +01:00
automat==0.7.0 # via twisted
aws-xray-sdk==0.95 # via moto
requirements: Delist recursive dependencies from *.in not used directly. Signed-off-by: Anders Kaseorg <anders@zulipchat.com>
2019-07-10 22:42:29 +02:00
babel==2.5.3 # via django-phonenumber-field, sphinx
requirements: Upgrade ipython to 6.3.1.
2018-05-02 18:28:16 +02:00
backcall==0.1.0 # via ipython
requirements: Upgrade beautifulsoup4 from 4.6.3 to 4.7.1.
2019-01-07 08:50:53 +01:00
beautifulsoup4==4.7.1
requirements: Upgrade indirect python dependencies.
2019-07-04 12:08:03 +02:00
boto3==1.9.183 # via moto
requirements: Upgrade boto to 2.49.0. Updated the CA Bundle as well as some bucket encryption fixes.
2018-07-30 10:58:12 +02:00
boto==2.49.0
requirements: Upgrade indirect python dependencies.
2019-07-04 12:08:03 +02:00
botocore==1.12.183 # via boto3, moto, s3transfer
auth: Migrate google auth to python-social-auth. This replaces the two custom Google authentication backends originally written in 2012 with using the shared python-social-auth codebase that we already use for the GitHub authentication backend. These are: * GoogleMobileOauth2Backend, the ancient code path for mobile authentication last used by the EOL original Zulip Android app. * The `finish_google_oauth2` code path in zerver/views/auth.py, which was the webapp (and modern mobile app) Google authentication code path. This change doesn't fix any known bugs; its main benefit is that we get to remove hundreds of lines of security-sensitive semi-duplicated code, replacing it with a widely trusted, high quality third-party library.
2019-02-02 16:51:26 +01:00
cachetools==3.1.1 # via premailer
requirements: Update recursive dependencies. This was generated by: * `rm -f requirements/*.txt` * `./tools/update-locked-requirements` and passes tests. The effect is to unpin ourselves from old versions of a bunch of recursive dependencies of our third-party dependencies.
2018-11-13 21:29:10 +01:00
cchardet==2.1.4
requirements: Delist recursive dependencies from *.in not used directly. Signed-off-by: Anders Kaseorg <anders@zulipchat.com>
2019-07-10 22:42:29 +02:00
certifi==2019.3.9 # via requests
cffi==1.12.3 # via argon2-cffi, cryptography
chardet==3.0.4 # via requests
requirements: Upgrade gitlint from 0.10.0 to 0.11.0.
2019-04-24 19:27:14 +02:00
click==6.7 # via gitlint, pip-tools
Revert "docs: Update dependencies for docs." This reverts commit 4303b42abdf14c2d7d17b4e9477455faff0cb845. This appears to have broken various documentation links to e.g. README.md on GitHub.
2019-03-06 18:55:51 +01:00
commonmark==0.5.4
requirements: Rename requirements files. This commit renames various source requirements files like `dev.txt`, `mypy.txt` etc to `dev.in`, `mypy.in` etc and various locked requirements files like `dev_lock.txt`, `mypy_lock.txt` etc to `dev.txt`, `mypy.txt` etc. This will help in emphasizing to the user that *.in are actually input to `update-locked-requirements` tool which should be run after updating any of these.
2017-11-17 02:41:06 +01:00
constantly==15.1.0 # via twisted
requirements: Upgrade coverage from 4.5.2 to 4.5.3.
2019-04-24 19:23:42 +02:00
coverage==4.5.3
requirements: Delist recursive dependencies from *.in not used directly. Signed-off-by: Anders Kaseorg <anders@zulipchat.com>
2019-07-10 22:42:29 +02:00
cryptography==2.6.1 # via apns2, moto, pyopenssl, requests, service-identity
requirements: Update recursive dependencies. This was generated by: * `rm -f requirements/*.txt` * `./tools/update-locked-requirements` and passes tests. The effect is to unpin ourselves from old versions of a bunch of recursive dependencies of our third-party dependencies.
2018-11-13 21:29:10 +01:00
cssselect==1.0.3 # via parsel, premailer, scrapy
requirements: Rename requirements files. This commit renames various source requirements files like `dev.txt`, `mypy.txt` etc to `dev.in`, `mypy.in` etc and various locked requirements files like `dev_lock.txt`, `mypy_lock.txt` etc to `dev.txt`, `mypy.txt` etc. This will help in emphasizing to the user that *.in are actually input to `update-locked-requirements` tool which should be run after updating any of these.
2017-11-17 02:41:06 +01:00
cssutils==1.0.2 # via premailer
requirements: Upgrade indirect dependencies in dev.txt, prod.txt.
2019-04-25 14:49:43 +02:00
decorator==4.4.0 # via ipython, traitlets
requirements: Rename requirements files. This commit renames various source requirements files like `dev.txt`, `mypy.txt` etc to `dev.in`, `mypy.in` etc and various locked requirements files like `dev_lock.txt`, `mypy_lock.txt` etc to `dev.txt`, `mypy.txt` etc. This will help in emphasizing to the user that *.in are actually input to `update-locked-requirements` tool which should be run after updating any of these.
2017-11-17 02:41:06 +01:00
defusedxml==0.5.0
requirements: Upgrade disposable-email-domains from 0.0.46 to 0.0.49.
2019-04-23 18:28:13 +02:00
disposable-email-domains==0.0.49
requirements: Upgrade django-auth-ldap to 1.7.0.
2018-11-12 08:26:02 +01:00
django-auth-ldap==1.7.0
dependencies: Use the django-bitfield 1.9.5 release. The release contains all the fixes from our fork.
2019-07-13 01:23:21 +02:00
django-bitfield==1.9.5
requirements: Add dependencies for two-factor auth. We're not yet ready to add 2FA to Zulip yet, but we've determined we'd like to work from these libraries. I'm not bothering to bump PROVISION_VERSION for this, since we're likely to do something else that bumps it soon, and we're not merging anything that uses these new libraries.
2017-11-29 00:13:09 +01:00
django-formtools==2.1 # via django-two-factor-auth
requirements: Upgrade django-otp from 0.5.2 to 0.6.0. This indirect dependency was upgraded separately since it contained a migration with autogenerated name.
2019-07-04 14:48:01 +02:00
django-otp==0.6.0 # via django-two-factor-auth
requirements: Add dependencies for two-factor auth. We're not yet ready to add 2FA to Zulip yet, but we've determined we'd like to work from these libraries. I'm not bothering to bump PROVISION_VERSION for this, since we're likely to do something else that bumps it soon, and we're not merging anything that uses these new libraries.
2017-11-29 00:13:09 +01:00
django-phonenumber-field==1.3.0 # via django-two-factor-auth
requirements: Upgrade django-pipeline to 1.6.14.
2018-02-13 20:02:59 +01:00
django-pipeline==1.6.14
django-pylibmc: Add dependancy and use as cache backend for memcached.
2018-06-11 04:19:16 +02:00
django-pylibmc==0.6.1
local-uploads: Start running authentication checks on file requests. From here on we start to authenticate uploaded file request before serving this files in production. This involves allowing NGINX to pass on these file requests to Django for authentication and then serve these files by making use on internal redirect requests having x-accel-redirect field. The redirection on requests and loading of x-accel-redirect param is handled by django-sendfile. NOTE: This commit starts to authenticate these requests for Zulip servers running platforms either Ubuntu Xenial (16.04) or above. Fixes: #320 and #291 partially.
2018-02-12 18:18:03 +01:00
django-sendfile==0.3.11
requirements: Rename requirements files. This commit renames various source requirements files like `dev.txt`, `mypy.txt` etc to `dev.in`, `mypy.in` etc and various locked requirements files like `dev_lock.txt`, `mypy_lock.txt` etc to `dev.txt`, `mypy.txt` etc. This will help in emphasizing to the user that *.in are actually input to `update-locked-requirements` tool which should be run after updating any of these.
2017-11-17 02:41:06 +01:00
django-statsd-mozilla==0.4.0
requirements: Upgrade django-two-factor-auth to 1.8.0.
2018-11-09 07:53:03 +01:00
django-two-factor-auth==1.8.0
requirements: Upgrade django-webpack-loader to 0.6.0.
2018-04-01 15:04:08 +02:00
django-webpack-loader==0.6.0
requirements: Upgrade django from 1.11.20 to 1.11.22.
2019-07-04 11:36:27 +02:00
django==1.11.22
requirements: Upgrade indirect python dependencies.
2019-07-04 12:08:03 +02:00
docker==4.0.2 # via moto
requirements: Delist recursive dependencies from *.in not used directly. Signed-off-by: Anders Kaseorg <anders@zulipchat.com>
2019-07-10 22:42:29 +02:00
docutils==0.14 # via botocore, recommonmark, sphinx
requirements: Upgrade indirect dependencies in dev.txt, prod.txt.
2019-04-25 14:49:43 +02:00
ecdsa==0.13.2 # via python-jose
requirements: Upgrade to fakeldap 0.6.1. Tweaked by tabbott to remove the unnecessary GitHub indirection.
2017-11-11 01:02:56 +01:00
fakeldap==0.6.1
requirements: Upgrade indirect dependencies in dev.txt, prod.txt.
2019-04-25 14:49:43 +02:00
first==2.0.2 # via pip-tools
requirements: Upgrade gitlint from 0.10.0 to 0.11.0.
2019-04-24 19:27:14 +02:00
gitlint==0.11.0
requirements: Rename requirements files. This commit renames various source requirements files like `dev.txt`, `mypy.txt` etc to `dev.in`, `mypy.in` etc and various locked requirements files like `dev_lock.txt`, `mypy_lock.txt` etc to `dev.txt`, `mypy.txt` etc. This will help in emphasizing to the user that *.in are actually input to `update-locked-requirements` tool which should be run after updating any of these.
2017-11-17 02:41:06 +01:00
h2==2.6.2 # via hyper
hpack==3.0.0 # via h2
requirements: Upgrade html2text to 2018.1.9.
2018-02-13 20:10:51 +01:00
html2text==2018.1.9
requirements: Upgrade httplib2 from 0.12.1 to 0.12.3.
2019-04-23 18:32:25 +02:00
httplib2==0.12.3
requirements: Upgrade httpretty to 0.9.6.
2018-11-09 11:17:11 +01:00
httpretty==0.9.6
hipchat: Improve import of public room subscribers. Now, if you pass an api_key, we'll initialize the public room subscribers to be whatever they were at the time the import happened. Also, document the situation on the caveats section.
2019-01-10 00:42:38 +01:00
hypchat==0.21
requirements: Rename requirements files. This commit renames various source requirements files like `dev.txt`, `mypy.txt` etc to `dev.in`, `mypy.in` etc and various locked requirements files like `dev_lock.txt`, `mypy_lock.txt` etc to `dev.txt`, `mypy.txt` etc. This will help in emphasizing to the user that *.in are actually input to `update-locked-requirements` tool which should be run after updating any of these.
2017-11-17 02:41:06 +01:00
hyper==0.7.0 # via apns2
hyperframe==3.2.0 # via h2, hyper
bugdown: Force absolute urls in topic links. If a url doesn't have a scheme, browsers would treat it as a relative url and open something like: https://chat.zulip.org/google.com instead. This PR fixes the issue on the backend; the frontend implementation remains out of sync and the user sending the message wouldn't see any linkification for urls without a scheme. Fixes #12791.
2019-07-19 07:46:07 +02:00
hyperlink==19.0.0
Revert "requirements: Upgrade moto from 1.3.7 to 1.3.8." This reverts commit 4ee65b70b45b67fd976fb6fcfd85cfa45c56c05e.
2019-04-28 11:14:16 +02:00
idna==2.8 # via hyperlink, requests
requirements: Rename requirements files. This commit renames various source requirements files like `dev.txt`, `mypy.txt` etc to `dev.in`, `mypy.in` etc and various locked requirements files like `dev_lock.txt`, `mypy_lock.txt` etc to `dev.txt`, `mypy.txt` etc. This will help in emphasizing to the user that *.in are actually input to `update-locked-requirements` tool which should be run after updating any of these.
2017-11-17 02:41:06 +01:00
ijson==2.3
requirements: Delist recursive dependencies from *.in not used directly. Signed-off-by: Anders Kaseorg <anders@zulipchat.com>
2019-07-10 22:42:29 +02:00
imagesize==1.1.0 # via sphinx
requirements: Rename requirements files. This commit renames various source requirements files like `dev.txt`, `mypy.txt` etc to `dev.in`, `mypy.in` etc and various locked requirements files like `dev_lock.txt`, `mypy_lock.txt` etc to `dev.txt`, `mypy.txt` etc. This will help in emphasizing to the user that *.in are actually input to `update-locked-requirements` tool which should be run after updating any of these.
2017-11-17 02:41:06 +01:00
incremental==17.5.0 # via twisted
ipython-genutils==0.2.0 # via traitlets
requirements: Upgrade ipython to 6.5.0. No major changes. Miscellaneous bug fixes and compatibility with Python 3.7.
2018-07-30 12:39:26 +02:00
ipython==6.5.0
requirements: Upgrade isort from 4.3.11 to 4.3.17.
2019-04-24 17:09:21 +02:00
isort==4.3.17
requirements: Upgrade indirect python dependencies.
2019-07-04 12:08:03 +02:00
jedi==0.14.0 # via ipython
requirements: Upgrade Jinja2 from 2.10 to 2.10.1.
2019-04-23 18:39:54 +02:00
jinja2==2.10.1
requirements: Upgrade indirect dependencies.
2019-03-06 11:42:31 +01:00
jmespath==0.9.4 # via boto3, botocore
Revert "requirements: Upgrade moto from 1.3.7 to 1.3.8." This reverts commit 4ee65b70b45b67fd976fb6fcfd85cfa45c56c05e.
2019-04-28 11:14:16 +02:00
jsondiff==1.1.1 # via moto
requirements: Upgrade indirect python dependencies.
2019-07-04 12:08:03 +02:00
jsonpickle==1.2 # via aws-xray-sdk, python-digitalocean
requirements: Upgrade lxml from 4.3.2 to 4.3.3.
2019-04-23 18:43:15 +02:00
lxml==4.3.3
requirements: Rename requirements files. This commit renames various source requirements files like `dev.txt`, `mypy.txt` etc to `dev.in`, `mypy.in` etc and various locked requirements files like `dev_lock.txt`, `mypy_lock.txt` etc to `dev.txt`, `mypy.txt` etc. This will help in emphasizing to the user that *.in are actually input to `update-locked-requirements` tool which should be run after updating any of these.
2017-11-17 02:41:06 +01:00
markdown-include==0.5.1
dependencies: Upgrade markdown from 3.0.1 -> 3.1.1. Fixes #12192.
2019-07-03 06:26:56 +02:00
markdown==3.1.1
requirements: Delist recursive dependencies from *.in not used directly. Signed-off-by: Anders Kaseorg <anders@zulipchat.com>
2019-07-10 22:42:29 +02:00
markupsafe==1.1.1 # via jinja2
requirements: Upgrade python-zulip-api/zulip to 7dfecf557.
2018-08-15 11:34:45 +02:00
matrix-client==0.3.2
requirements: Rename requirements files. This commit renames various source requirements files like `dev.txt`, `mypy.txt` etc to `dev.in`, `mypy.in` etc and various locked requirements files like `dev_lock.txt`, `mypy_lock.txt` etc to `dev.txt`, `mypy.txt` etc. This will help in emphasizing to the user that *.in are actually input to `update-locked-requirements` tool which should be run after updating any of these.
2017-11-17 02:41:06 +01:00
mock==2.0.0
Revert "requirements: Upgrade moto from 1.3.7 to 1.3.8." This reverts commit 4ee65b70b45b67fd976fb6fcfd85cfa45c56c05e.
2019-04-28 11:14:16 +02:00
moto==1.3.7
dependencies: Upgrade mypy to version 0.641. This requires upgrading a few other packages that mypy depends on.
2018-10-19 23:06:16 +02:00
mypy-extensions==0.4.1
requirements: Upgrade mypy to 0.670. Requires minor adjustment for accented 'i' in variable name.
2019-04-06 08:03:54 +02:00
mypy==0.670
requirements: Delist recursive dependencies from *.in not used directly. Signed-off-by: Anders Kaseorg <anders@zulipchat.com>
2019-07-10 22:42:29 +02:00
oauthlib==3.0.1 # via requests-oauthlib, social-auth-core
requirements: Upgrade argon2-cffi from 18.3.0 to 19.1.0. This also upgrades various recursive dependencies of Zulip.
2019-01-30 08:38:20 +01:00
packaging==19.0 # via sphinx
requirements: Update recursive dependencies. This was generated by: * `rm -f requirements/*.txt` * `./tools/update-locked-requirements` and passes tests. The effect is to unpin ourselves from old versions of a bunch of recursive dependencies of our third-party dependencies.
2018-11-13 21:29:10 +01:00
parsel==1.5.1 # via scrapy
requirements: Upgrade indirect python dependencies.
2019-07-04 12:08:03 +02:00
parso==0.5.0 # via jedi
pbr==5.3.1 # via mock
requirements: Upgrade indirect dependencies in dev.txt, prod.txt.
2019-04-25 14:49:43 +02:00
pexpect==4.7.0 # via ipython
requirements: Explicitly specefy phonenumberslite as a dependency. If we don't specify phonenumberslite explicitly it would be removed when setuptools is upgraded to latest version.
2019-05-27 14:20:54 +02:00
phonenumberslite==8.10.12
requirements: Update recursive dependencies. This was generated by: * `rm -f requirements/*.txt` * `./tools/update-locked-requirements` and passes tests. The effect is to unpin ourselves from old versions of a bunch of recursive dependencies of our third-party dependencies.
2018-11-13 21:29:10 +01:00
pickleshare==0.7.5 # via ipython
requirements: Upgrade pika from 0.12.0 to 0.13.0. The important changes to pika for us are based on this PR of ours: https://github.com/pika/pika/pull/1129 Fixes #11394.
2019-01-31 08:10:34 +01:00
pika==0.13.0
requirements: Upgrade pillow from 5.4.1 to 6.1.0. Fixes #12193
2019-07-05 07:53:18 +02:00
pillow==6.1.0
requirements: Upgrade pip-tools to 2.0.2.
2018-05-02 18:46:25 +02:00
pip-tools==2.0.2
requirements: Upgrade polib to 1.1.0.
2018-02-13 20:53:36 +01:00
polib==1.1.0
requirements: Upgrade premailer from 3.3.0 to 3.4.0.
2019-04-23 20:16:56 +02:00
premailer==3.4.0
requirements: Upgrade indirect dependencies in dev.txt, prod.txt.
2019-04-25 14:49:43 +02:00
prompt-toolkit==1.0.16 # via ipython
requirements: Upgrade psycopg2 from 2.7.7 to 2.8.2.
2019-04-23 20:20:20 +02:00
psycopg2==2.8.2
requirements: Update recursive dependencies. This was generated by: * `rm -f requirements/*.txt` * `./tools/update-locked-requirements` and passes tests. The effect is to unpin ourselves from old versions of a bunch of recursive dependencies of our third-party dependencies.
2018-11-13 21:29:10 +01:00
ptyprocess==0.6.0 # via pexpect
requirements: Upgrade py3dns to 3.2.0. A bunch of minor bug fixes.
2018-07-30 13:17:57 +02:00
py3dns==3.2.0
alert_words: Performance improvements in looking for alert_words. This commit leverages the ahocorasick algorithm to build a set of user_ids that have their alert_words present in the message. It runs in linear time of the order of length of the input message as opposed to number of alert_words. This is after building a ahocorasick Automaton which runs in O(number of alert_words in entire realm) which is usually cached.
2019-02-11 15:19:38 +01:00
pyahocorasick==1.4.0
Revert "requirements: Upgrade moto from 1.3.7 to 1.3.8." This reverts commit 4ee65b70b45b67fd976fb6fcfd85cfa45c56c05e.
2019-04-28 11:14:16 +02:00
pyaml==19.4.1 # via moto
auth: Migrate google auth to python-social-auth. This replaces the two custom Google authentication backends originally written in 2012 with using the shared python-social-auth codebase that we already use for the GitHub authentication backend. These are: * GoogleMobileOauth2Backend, the ancient code path for mobile authentication last used by the EOL original Zulip Android app. * The `finish_google_oauth2` code path in zerver/views/auth.py, which was the webapp (and modern mobile app) Google authentication code path. This change doesn't fix any known bugs; its main benefit is that we get to remove hundreds of lines of security-sensitive semi-duplicated code, replacing it with a widely trusted, high quality third-party library.
2019-02-02 16:51:26 +01:00
pyasn1-modules==0.2.5 # via python-ldap, service-identity
pyasn1==0.4.5 # via pyasn1-modules, python-ldap, service-identity
tools: Upgrade Pycodestyle and fix new linter errors. Here, we are upgrading pycodestyle version from 2.4.0 to 2.5.0. Fixes: #11396.
2019-01-31 14:32:37 +01:00
pycodestyle==2.5.0
requirements: Update recursive dependencies. This was generated by: * `rm -f requirements/*.txt` * `./tools/update-locked-requirements` and passes tests. The effect is to unpin ourselves from old versions of a bunch of recursive dependencies of our third-party dependencies.
2018-11-13 21:29:10 +01:00
pycparser==2.19 # via cffi
requirements: Upgrade indirect python dependencies.
2019-07-04 12:08:03 +02:00
pycryptodome==3.8.2 # via python-jose
requirements: Rename requirements files. This commit renames various source requirements files like `dev.txt`, `mypy.txt` etc to `dev.in`, `mypy.in` etc and various locked requirements files like `dev_lock.txt`, `mypy_lock.txt` etc to `dev.txt`, `mypy.txt` etc. This will help in emphasizing to the user that *.in are actually input to `update-locked-requirements` tool which should be run after updating any of these.
2017-11-17 02:41:06 +01:00
pydispatcher==2.0.5 # via scrapy
requirements: Upgrade pyflakes from 2.1.0 to 2.1.1.
2019-03-06 10:02:29 +01:00
pyflakes==2.1.1
requirements: Upgrade Pygments from 2.2.0 to 2.3.1.
2019-01-07 11:55:47 +01:00
pygments==2.3.1
requirements: Upgrade Twisted to 18.9.0.
2018-11-12 07:55:13 +01:00
pyhamcrest==1.9.0 # via twisted
requirements: Add pyinotify dependency.
2019-05-29 01:25:49 +02:00
pyinotify==0.9.6
requirements: Upgrade PyJWT from 1.6.4 to 1.7.1.
2019-01-07 11:59:17 +01:00
pyjwt==1.7.1
ldap: Make Zulip compatible with django-auth-ldap==1.5. In version 1.5, get_or_create_user method is not used. It exists just for the compatibility. The main function to use now is get_or_build_user. See the changelog: https://django-auth-ldap.readthedocs.io/en/latest/changes.html#id1 Fixes #9307
2018-05-22 08:33:56 +02:00
pyldap==3.0.0.post1 # via fakeldap
requirements: Upgrade pylibmc to 1.6.0.
2018-11-12 08:51:28 +01:00
pylibmc==1.6.0
requirements: Rename requirements files. This commit renames various source requirements files like `dev.txt`, `mypy.txt` etc to `dev.in`, `mypy.in` etc and various locked requirements files like `dev_lock.txt`, `mypy_lock.txt` etc to `dev.txt`, `mypy.txt` etc. This will help in emphasizing to the user that *.in are actually input to `update-locked-requirements` tool which should be run after updating any of these.
2017-11-17 02:41:06 +01:00
pyoembed==0.1.2
requirements: Remove unused dependencies. * backports-abc: For old Python versions. * backports.ssl-match-hostname: For old Python versions. * docopt: Has never been used directly. * gitdb: Has never been used directly. * ndg-httpsclient: No longer used by requests ≥ 2.12.1. * pycrypto: Has never been used directly. * smmap: Has never been used directly. * typing: For old Python versions. * typing_extensions: For old Python versions. PROVISION_VERSION is not bumped because these were already unused since at least the last major bump. Signed-off-by: Anders Kaseorg <anders@zulipchat.com>
2019-07-10 22:49:21 +02:00
pyopenssl==19.0.0 # via requests, scrapy
requirements: Upgrade indirect dependencies in dev.txt, prod.txt.
2019-04-25 14:49:43 +02:00
pyparsing==2.4.0 # via packaging
requirements: Upgrade indirect python dependencies.
2019-07-04 12:08:03 +02:00
pysocks==1.7.0 # via twilio
requirements: Upgrade python-dateutil from 2.7.5 to 2.8.0.
2019-03-06 10:05:21 +01:00
python-dateutil==2.8.0
requirements: Upgrade python-digital-ocean to 1.14.0.
2018-11-09 16:11:57 +01:00
python-digitalocean==1.14.0
requirements: Rename requirements files. This commit renames various source requirements files like `dev.txt`, `mypy.txt` etc to `dev.in`, `mypy.in` etc and various locked requirements files like `dev_lock.txt`, `mypy_lock.txt` etc to `dev.txt`, `mypy.txt` etc. This will help in emphasizing to the user that *.in are actually input to `update-locked-requirements` tool which should be run after updating any of these.
2017-11-17 02:41:06 +01:00
python-gcm==0.4
requirements: Upgrade moto from 1.3.3 to 1.3.7.
2019-01-07 09:34:11 +01:00
python-jose==2.0.2 # via moto
requirements: Upgrade indirect dependencies in dev.txt, prod.txt.
2019-04-25 14:49:43 +02:00
python-ldap==3.2.0 # via django-auth-ldap, pyldap
url preview: Add python-magic dependency for content-type sniffing.
2019-05-05 05:28:13 +02:00
python-magic==0.4.15
requirements: Upgrade python-twitter to 3.5.
2018-11-09 16:13:21 +01:00
python-twitter==3.5
requirements: Rename requirements files. This commit renames various source requirements files like `dev.txt`, `mypy.txt` etc to `dev.in`, `mypy.in` etc and various locked requirements files like `dev_lock.txt`, `mypy_lock.txt` etc to `dev.txt`, `mypy.txt` etc. This will help in emphasizing to the user that *.in are actually input to `update-locked-requirements` tool which should be run after updating any of these.
2017-11-17 02:41:06 +01:00
python3-openid==3.1.0 # via social-auth-core
requirements: Upgrade pytz from 2018.9 to 2019.1.
2019-04-23 20:23:45 +02:00
pytz==2019.1
requirements: Upgrade indirect python dependencies.
2019-07-04 12:08:03 +02:00
pyyaml==5.1.1 # via pyaml, yamole
requirements: Upgrade argon2-cffi from 18.3.0 to 19.1.0. This also upgrades various recursive dependencies of Zulip.
2019-01-30 08:38:20 +01:00
qrcode==6.1 # via django-two-factor-auth
requirements: Update recursive dependencies. This was generated by: * `rm -f requirements/*.txt` * `./tools/update-locked-requirements` and passes tests. The effect is to unpin ourselves from old versions of a bunch of recursive dependencies of our third-party dependencies.
2018-11-13 21:29:10 +01:00
queuelib==1.5.0 # via scrapy
Revert "docs: Update dependencies for docs." This reverts commit 4303b42abdf14c2d7d17b4e9477455faff0cb845. This appears to have broken various documentation links to e.g. README.md on GitHub.
2019-03-06 18:55:51 +01:00
recommonmark==0.4.0
requirements: Rename requirements files. This commit renames various source requirements files like `dev.txt`, `mypy.txt` etc to `dev.in`, `mypy.in` etc and various locked requirements files like `dev_lock.txt`, `mypy_lock.txt` etc to `dev.txt`, `mypy.txt` etc. This will help in emphasizing to the user that *.in are actually input to `update-locked-requirements` tool which should be run after updating any of these.
2017-11-17 02:41:06 +01:00
redis==2.10.6
requirements: Upgrade indirect python dependencies.
2019-07-04 12:08:03 +02:00
regex==2019.6.8
requirements: Delist recursive dependencies from *.in not used directly. Signed-off-by: Anders Kaseorg <anders@zulipchat.com>
2019-07-10 22:42:29 +02:00
requests-oauthlib==1.0.0 # via python-twitter, social-auth-core
requirements: Upgrade indirect python dependencies.
2019-07-04 12:08:03 +02:00
requests[security]==2.22.0 # via aws-xray-sdk, docker, hypchat, matrix-client, moto, premailer, pyoembed, python-digitalocean, python-gcm, python-twitter, requests-oauthlib, responses, social-auth-core, sphinx, stripe, twilio
requirements: Upgrade indirect dependencies in dev.txt, prod.txt.
2019-04-25 14:49:43 +02:00
responses==0.10.6 # via moto
requirements: Upgrade indirect python dependencies.
2019-07-04 12:08:03 +02:00
s3transfer==0.2.1 # via boto3
requirements: Upgrade Scrapy from 1.5.2 to 1.6.0.
2019-03-06 10:09:49 +01:00
scrapy==1.6.0
requirements: Upgrade beautifulsoup4 from 4.6.3 to 4.7.1.
2019-01-07 08:50:53 +01:00
service-identity==18.1.0 # via scrapy
requirements: Upgrade gitlint from 0.10.0 to 0.11.0.
2019-04-24 19:27:14 +02:00
sh==1.12.14 # via gitlint
requirements: Rename requirements files. This commit renames various source requirements files like `dev.txt`, `mypy.txt` etc to `dev.in`, `mypy.in` etc and various locked requirements files like `dev_lock.txt`, `mypy_lock.txt` etc to `dev.txt`, `mypy.txt` etc. This will help in emphasizing to the user that *.in are actually input to `update-locked-requirements` tool which should be run after updating any of these.
2017-11-17 02:41:06 +01:00
simplegeneric==0.8.1 # via ipython
requirements: Upgrade six from 1.11.0 to 1.12.0.
2019-01-07 16:32:53 +01:00
six==1.12.0
requirements: Upgrade snakeviz from 1.0.0 to 2.0.0.
2019-04-24 14:15:38 +02:00
snakeviz==2.0.0
requirements: Delist recursive dependencies from *.in not used directly. Signed-off-by: Anders Kaseorg <anders@zulipchat.com>
2019-07-10 22:42:29 +02:00
snowballstemmer==1.2.1 # via sphinx
requirements: Upgrade social-auth-app-django to 3.1.0.
2018-11-09 16:18:35 +01:00
social-auth-app-django==3.1.0
requirements: Upgrade indirect python dependencies.
2019-07-04 12:08:03 +02:00
social-auth-core==3.2.0 # via social-auth-app-django
requirements: Upgrade sockjs-tornado to 1.0.6.
2018-11-09 16:19:45 +01:00
sockjs-tornado==1.0.6
requirements: Upgrade indirect python dependencies.
2019-07-04 12:08:03 +02:00
soupsieve==1.9.2 # via beautifulsoup4
requirements: Rename requirements files. This commit renames various source requirements files like `dev.txt`, `mypy.txt` etc to `dev.in`, `mypy.in` etc and various locked requirements files like `dev_lock.txt`, `mypy_lock.txt` etc to `dev.txt`, `mypy.txt` etc. This will help in emphasizing to the user that *.in are actually input to `update-locked-requirements` tool which should be run after updating any of these.
2017-11-17 02:41:06 +01:00
sourcemap==0.2.1
requirements: Upgrade sphinx-rtd-theme from 0.4.2 to 0.4.3.
2019-03-06 10:12:43 +01:00
sphinx-rtd-theme==0.4.3
requirements: Upgrade sphinx from 1.8.3 to 1.8.4.
2019-03-06 17:08:06 +01:00
sphinx==1.8.4
requirements: Upgrade indirect python dependencies.
2019-07-04 12:08:03 +02:00
sphinxcontrib-websupport==1.1.2 # via sphinx
requirements: Upgrade SQLAlchemy from 1.3.0 to 1.3.3.
2019-04-23 20:28:53 +02:00
sqlalchemy==1.3.3
requirements: Update recursive dependencies. This was generated by: * `rm -f requirements/*.txt` * `./tools/update-locked-requirements` and passes tests. The effect is to unpin ourselves from old versions of a bunch of recursive dependencies of our third-party dependencies.
2018-11-13 21:29:10 +01:00
statsd==3.3.0 # via django-statsd-mozilla
requirements: Downgrade stripe from 2.27.0 to 2.21.0. Reverts c09962b and 697b4b2. The lines that break look like stripe.Invoice.finalize_invoice(stripe_invoice). Something like stripe_invoice.finalize_invoice() would work, but it's a big change given how the tests in test_stripe.py currently work.
2019-05-16 00:00:53 +02:00
stripe==2.21.0
requirements: Rename requirements files. This commit renames various source requirements files like `dev.txt`, `mypy.txt` etc to `dev.in`, `mypy.in` etc and various locked requirements files like `dev_lock.txt`, `mypy_lock.txt` etc to `dev.txt`, `mypy.txt` etc. This will help in emphasizing to the user that *.in are actually input to `update-locked-requirements` tool which should be run after updating any of these.
2017-11-17 02:41:06 +01:00
tblib==1.3.2
requirements: Upgrade tornado to 4.5.3.
2018-02-13 21:44:35 +01:00
tornado==4.5.3
requirements: Rename requirements files. This commit renames various source requirements files like `dev.txt`, `mypy.txt` etc to `dev.in`, `mypy.in` etc and various locked requirements files like `dev_lock.txt`, `mypy_lock.txt` etc to `dev.txt`, `mypy.txt` etc. This will help in emphasizing to the user that *.in are actually input to `update-locked-requirements` tool which should be run after updating any of these.
2017-11-17 02:41:06 +01:00
traitlets==4.3.2 # via ipython
requirements: Upgrade transifex-client to 0.12.5.
2018-02-14 09:13:32 +01:00
transifex-client==0.12.5
requirements: Upgrade twilio from 6.26.1 to 6.26.2.
2019-04-25 11:29:22 +02:00
twilio==6.26.2
requirements: Upgrade Twisted from 19.2.0 to 19.2.1.
2019-07-04 11:32:41 +02:00
twisted==19.2.1
requirements: Upgrade indirect python dependencies.
2019-07-04 12:08:03 +02:00
typed-ast==1.3.5 # via mypy
requirements: Upgrade typing to 3.6.6.
2018-11-12 07:57:00 +01:00
typing==3.6.6
requirements: Upgrade indirect python dependencies.
2019-07-04 12:08:03 +02:00
urllib3==1.25.3 # via botocore, requests, transifex-client
requirements: Upgrade virtualenv-clone from 0.5.1 to 0.5.3.
2019-04-23 20:39:19 +02:00
virtualenv-clone==0.5.3
requirements: Upgrade argon2-cffi from 18.3.0 to 19.1.0. This also upgrades various recursive dependencies of Zulip.
2019-01-30 08:38:20 +01:00
w3lib==1.20.0 # via parsel, scrapy
requirements: Rename requirements files. This commit renames various source requirements files like `dev.txt`, `mypy.txt` etc to `dev.in`, `mypy.in` etc and various locked requirements files like `dev_lock.txt`, `mypy_lock.txt` etc to `dev.txt`, `mypy.txt` etc. This will help in emphasizing to the user that *.in are actually input to `update-locked-requirements` tool which should be run after updating any of these.
2017-11-17 02:41:06 +01:00
wcwidth==0.1.7 # via prompt-toolkit
requirements: Upgrade indirect dependencies in dev.txt, prod.txt.
2019-04-25 14:49:43 +02:00
websocket-client==0.56.0 # via docker
requirements: Upgrade indirect python dependencies.
2019-07-04 12:08:03 +02:00
werkzeug==0.15.4 # via moto
wrapt==1.11.2 # via aws-xray-sdk
requirements: Upgrade indirect dependencies.
2019-03-06 11:42:31 +01:00
xmltodict==0.12.0 # via moto
requirements: Upgrade yamole from 2.1.5 to 2.1.6.
2019-01-07 16:47:23 +01:00
yamole==2.1.6
requirements: Update recursive dependencies. This was generated by: * `rm -f requirements/*.txt` * `./tools/update-locked-requirements` and passes tests. The effect is to unpin ourselves from old versions of a bunch of recursive dependencies of our third-party dependencies.
2018-11-13 21:29:10 +01:00
zope.interface==4.6.0 # via twisted