Mirror
/
zulip
mirror of https://github.com/zulip/zulip.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
zulip/requirements/dev.txt

196 lines
7.0 KiB
Plaintext
Raw Normal View History

requirements: Rename requirements files. This commit renames various source requirements files like `dev.txt`, `mypy.txt` etc to `dev.in`, `mypy.in` etc and various locked requirements files like `dev_lock.txt`, `mypy_lock.txt` etc to `dev.txt`, `mypy.txt` etc. This will help in emphasizing to the user that *.in are actually input to `update-locked-requirements` tool which should be run after updating any of these.
2017-11-17 02:41:06 +01:00
#
# This file is GENERATED. Don't edit directly.
#
# To update, edit the non-"lock" files in requirements/*.txt, then:
#
# tools/update-locked-requirements
#
# For details, see requirements/README.md .
#
requirements: Upgrade psycopg2 to 2.7.3.4. psycopg2 package contains both binary and source currently.The binary would soon be only available in psycopg2-binary. So currently installing psycopg2 will show a warning about the future migration of binary. To avoid the warning we should only install the source. https://www.postgresql.org/message-id/CA%2Bmi_8bd6kJHL TGkuyHSnqcgDrJ1uHgQWvXCKQFD3tPQBUa2Bw%40mail.gmail.com
2018-02-21 08:08:30 +01:00
--no-binary psycopg2
requirements: Delist recursive dependencies from *.in not used directly. Signed-off-by: Anders Kaseorg <anders@zulipchat.com>
2019-07-10 22:42:29 +02:00
alabaster==0.7.12 # via sphinx
requirements: Upgrade apns2 from 0.4.1 to 0.5.0.
2019-07-25 12:19:05 +02:00
apns2==0.5.0
requirements: Upgrade argon2-cffi from 18.3.0 to 19.1.0. This also upgrades various recursive dependencies of Zulip.
2019-01-30 08:38:20 +01:00
argon2-cffi==19.1.0
requirements: Upgrade gitlint from 0.11.0 to 0.12.0.
2019-07-25 13:43:56 +02:00
arrow==0.14.2 # via gitlint
requirements: Update recursive dependencies. This was generated by: * `rm -f requirements/*.txt` * `./tools/update-locked-requirements` and passes tests. The effect is to unpin ourselves from old versions of a bunch of recursive dependencies of our third-party dependencies.
2018-11-13 21:29:10 +01:00
asn1crypto==0.24.0 # via cryptography
requirements: Upgrade moto from 1.3.7 to 1.3.13.
2019-07-25 13:54:47 +02:00
attrs==19.1.0 # via automat, jsonschema, service-identity, twisted
requirements: Update recursive dependencies. This was generated by: * `rm -f requirements/*.txt` * `./tools/update-locked-requirements` and passes tests. The effect is to unpin ourselves from old versions of a bunch of recursive dependencies of our third-party dependencies.
2018-11-13 21:29:10 +01:00
automat==0.7.0 # via twisted
requirements: Upgrade moto from 1.3.7 to 1.3.13.
2019-07-25 13:54:47 +02:00
aws-sam-translator==1.12.0 # via cfn-lint
requirements: Update recursive dependencies. This was generated by: * `rm -f requirements/*.txt` * `./tools/update-locked-requirements` and passes tests. The effect is to unpin ourselves from old versions of a bunch of recursive dependencies of our third-party dependencies.
2018-11-13 21:29:10 +01:00
aws-xray-sdk==0.95 # via moto
requirements: Delist recursive dependencies from *.in not used directly. Signed-off-by: Anders Kaseorg <anders@zulipchat.com>
2019-07-10 22:42:29 +02:00
babel==2.5.3 # via django-phonenumber-field, sphinx
requirements: Upgrade ipython to 6.3.1.
2018-05-02 18:28:16 +02:00
backcall==0.1.0 # via ipython
requirements: Upgrade beautifulsoup4 from 4.7.1 to 4.8.0.
2019-07-25 12:24:07 +02:00
beautifulsoup4==4.8.0
requirements: Upgrade moto from 1.3.7 to 1.3.13.
2019-07-25 13:54:47 +02:00
boto3==1.9.183 # via aws-sam-translator, moto
requirements: Upgrade boto to 2.49.0. Updated the CA Bundle as well as some bucket encryption fixes.
2018-07-30 10:58:12 +02:00
boto==2.49.0
requirements: Upgrade indirect python dependencies.
2019-07-04 12:08:03 +02:00
botocore==1.12.183 # via boto3, moto, s3transfer
auth: Migrate google auth to python-social-auth. This replaces the two custom Google authentication backends originally written in 2012 with using the shared python-social-auth codebase that we already use for the GitHub authentication backend. These are: * GoogleMobileOauth2Backend, the ancient code path for mobile authentication last used by the EOL original Zulip Android app. * The `finish_google_oauth2` code path in zerver/views/auth.py, which was the webapp (and modern mobile app) Google authentication code path. This change doesn't fix any known bugs; its main benefit is that we get to remove hundreds of lines of security-sensitive semi-duplicated code, replacing it with a widely trusted, high quality third-party library.
2019-02-02 16:51:26 +01:00
cachetools==3.1.1 # via premailer
requirements: Update recursive dependencies. This was generated by: * `rm -f requirements/*.txt` * `./tools/update-locked-requirements` and passes tests. The effect is to unpin ourselves from old versions of a bunch of recursive dependencies of our third-party dependencies.
2018-11-13 21:29:10 +01:00
cchardet==2.1.4
requirements: Upgrade certifi from 2019.3.9 to 2019.6.16.
2019-07-26 10:01:41 +02:00
certifi==2019.6.16 # via requests
requirements: Delist recursive dependencies from *.in not used directly. Signed-off-by: Anders Kaseorg <anders@zulipchat.com>
2019-07-10 22:42:29 +02:00
cffi==1.12.3 # via argon2-cffi, cryptography
requirements: Upgrade moto from 1.3.7 to 1.3.13.
2019-07-25 13:54:47 +02:00
cfn-lint==0.22.3 # via moto
requirements: Delist recursive dependencies from *.in not used directly. Signed-off-by: Anders Kaseorg <anders@zulipchat.com>
2019-07-10 22:42:29 +02:00
chardet==3.0.4 # via requests
requirements: Upgrade gitlint from 0.11.0 to 0.12.0.
2019-07-25 13:43:56 +02:00
click==7.0 # via gitlint, pip-tools
docs: pip upgrade recommonmark and CommonMark Summary: - recommonmark: 0.4.0 -> 0.5.0 - CommonMark: 0.5.4 -> 0.9.0 - Fixed links getting their .md file extension cut off - Supressed 262 new warnings Details: Appended #anchors to markdown github links as a workaround to recommonmark 0.5.0 cutting off the ".md" part from them. Sphinx build would fail as follows [documentation_crawler] ERROR: Please check link: <404 https://github.com/zulip/zulipbot/blob/master/.github/CONTRIBUTING> <404 https://github.com/zulip/zulip/blob/master/requirements/README> <404 https://github.com/zulip/python-zulip-api/blob/master/zulip_bots/README> sphinx build would also log a "WARNING: None:any reference target not found" for every link ending in .html So a good temporary solution is to suppress all warnings with the method suggested here: https://stackoverflow.com/questions/37359407/suppress-warnings-for-unfound-references-with-default-role-any-in-sphinx A better solution would be to edit all links ending .html and use .md instead; which would also solve PR #11719. Fixes #11395.
2019-08-16 03:14:05 +02:00
commonmark==0.9.0
requirements: Rename requirements files. This commit renames various source requirements files like `dev.txt`, `mypy.txt` etc to `dev.in`, `mypy.in` etc and various locked requirements files like `dev_lock.txt`, `mypy_lock.txt` etc to `dev.txt`, `mypy.txt` etc. This will help in emphasizing to the user that *.in are actually input to `update-locked-requirements` tool which should be run after updating any of these.
2017-11-17 02:41:06 +01:00
constantly==15.1.0 # via twisted
requirements: Upgrade coverage from 4.5.2 to 4.5.3.
2019-04-24 19:23:42 +02:00
coverage==4.5.3
requirements: Upgrade moto from 1.3.7 to 1.3.13.
2019-07-25 13:54:47 +02:00
cryptography==2.6.1 # via apns2, moto, pyopenssl, requests, service-identity, sshpubkeys
requirements: Update recursive dependencies. This was generated by: * `rm -f requirements/*.txt` * `./tools/update-locked-requirements` and passes tests. The effect is to unpin ourselves from old versions of a bunch of recursive dependencies of our third-party dependencies.
2018-11-13 21:29:10 +01:00
cssselect==1.0.3 # via parsel, premailer, scrapy
requirements: Rename requirements files. This commit renames various source requirements files like `dev.txt`, `mypy.txt` etc to `dev.in`, `mypy.in` etc and various locked requirements files like `dev_lock.txt`, `mypy_lock.txt` etc to `dev.txt`, `mypy.txt` etc. This will help in emphasizing to the user that *.in are actually input to `update-locked-requirements` tool which should be run after updating any of these.
2017-11-17 02:41:06 +01:00
cssutils==1.0.2 # via premailer
requirements: Upgrade moto from 1.3.7 to 1.3.13.
2019-07-25 13:54:47 +02:00
datetime==4.3 # via moto
requirements: Add 'decorator' dependency. We already had this as an indirect dependency, but now it's going to be needed to write a decorator for rate limiting authenticate() functions, so it should be added to common.in.
2019-08-01 15:04:02 +02:00
decorator==4.4.0
requirements: Upgrade defusedxml from 0.5.0 to 0.6.0.
2019-07-26 10:04:24 +02:00
defusedxml==0.6.0
requirements: Upgrade disposable-email-domains from 0.0.49 to 0.0.52.
2019-07-25 12:29:01 +02:00
disposable-email-domains==0.0.52
requirements: Upgrade django-auth-ldap from 1.7.0 to 2.0.0.
2019-07-25 12:33:44 +02:00
django-auth-ldap==2.0.0
requirements: Upgrade django-bitfield from 1.9.5 to 1.9.6.
2019-07-25 12:38:29 +02:00
django-bitfield==1.9.6
requirements: Add dependencies for two-factor auth. We're not yet ready to add 2FA to Zulip yet, but we've determined we'd like to work from these libraries. I'm not bothering to bump PROVISION_VERSION for this, since we're likely to do something else that bumps it soon, and we're not merging anything that uses these new libraries.
2017-11-29 00:13:09 +01:00
django-formtools==2.1 # via django-two-factor-auth
requirements: Upgrade django-otp from 0.5.2 to 0.6.0. This indirect dependency was upgraded separately since it contained a migration with autogenerated name.
2019-07-04 14:48:01 +02:00
django-otp==0.6.0 # via django-two-factor-auth
requirements: Add dependencies for two-factor auth. We're not yet ready to add 2FA to Zulip yet, but we've determined we'd like to work from these libraries. I'm not bothering to bump PROVISION_VERSION for this, since we're likely to do something else that bumps it soon, and we're not merging anything that uses these new libraries.
2017-11-29 00:13:09 +01:00
django-phonenumber-field==1.3.0 # via django-two-factor-auth
django-pylibmc: Add dependancy and use as cache backend for memcached.
2018-06-11 04:19:16 +02:00
django-pylibmc==0.6.1
requirements: Use maintained fork django-sendfile2 of django-sendfile The original seems to be unmaintained (johnsensible/django-sendfile#65). Notably, this fixes a bug in the filename parameter, which perviously showed the Python 3 repr of a byte string (johnsensible/django-sendfile#49). Signed-off-by: Anders Kaseorg <anders@zulipchat.com>
2019-08-12 01:52:09 +02:00
django-sendfile2==0.4.2
requirements: Rename requirements files. This commit renames various source requirements files like `dev.txt`, `mypy.txt` etc to `dev.in`, `mypy.in` etc and various locked requirements files like `dev_lock.txt`, `mypy_lock.txt` etc to `dev.txt`, `mypy.txt` etc. This will help in emphasizing to the user that *.in are actually input to `update-locked-requirements` tool which should be run after updating any of these.
2017-11-17 02:41:06 +01:00
django-statsd-mozilla==0.4.0
requirements: Upgrade django-two-factor-auth from 1.8.0 to 1.9.1.
2019-07-25 12:43:13 +02:00
django-two-factor-auth==1.9.1
requirements: Upgrade django-webpack-loader to 0.6.0.
2018-04-01 15:04:08 +02:00
django-webpack-loader==0.6.0
requirements: Upgrade Django from 1.11.22 to 1.11.23.
2019-08-15 08:56:20 +02:00
django==1.11.23
requirements: Upgrade indirect python dependencies.
2019-07-04 12:08:03 +02:00
docker==4.0.2 # via moto
requirements: Delist recursive dependencies from *.in not used directly. Signed-off-by: Anders Kaseorg <anders@zulipchat.com>
2019-07-10 22:42:29 +02:00
docutils==0.14 # via botocore, recommonmark, sphinx
requirements: Upgrade moto from 1.3.7 to 1.3.13.
2019-07-25 13:54:47 +02:00
ecdsa==0.13.2 # via python-jose, sshpubkeys
requirements: Upgrade to fakeldap 0.6.1. Tweaked by tabbott to remove the unnecessary GitHub indirection.
2017-11-11 01:02:56 +01:00
fakeldap==0.6.1
requirements: When removing future requirement, leave it commented. futures is no longer there to be removed. Be clear about why we’re removing future (it was never a “pip-tools bug”), and leave evidence behind to help indicate how long that will be needed. Signed-off-by: Anders Kaseorg <anders@zulipchat.com>
2019-08-25 01:27:27 +02:00
# future==0.17.1 # via commonmark, python-jose, python-twitter
requirements: Upgrade gitlint from 0.11.0 to 0.12.0.
2019-07-25 13:43:56 +02:00
gitlint==0.12.0
requirements: Rename requirements files. This commit renames various source requirements files like `dev.txt`, `mypy.txt` etc to `dev.in`, `mypy.in` etc and various locked requirements files like `dev_lock.txt`, `mypy_lock.txt` etc to `dev.txt`, `mypy.txt` etc. This will help in emphasizing to the user that *.in are actually input to `update-locked-requirements` tool which should be run after updating any of these.
2017-11-17 02:41:06 +01:00
h2==2.6.2 # via hyper
hpack==3.0.0 # via h2
requirements: Upgrade html2text to 2018.1.9.
2018-02-13 20:10:51 +01:00
html2text==2018.1.9
requirements: Upgrade httplib2 from 0.12.3 to 0.13.0.
2019-07-25 12:48:02 +02:00
httplib2==0.13.0
requirements: Upgrade httpretty to 0.9.6.
2018-11-09 11:17:11 +01:00
httpretty==0.9.6
hipchat: Improve import of public room subscribers. Now, if you pass an api_key, we'll initialize the public room subscribers to be whatever they were at the time the import happened. Also, document the situation on the caveats section.
2019-01-10 00:42:38 +01:00
hypchat==0.21
requirements: Rename requirements files. This commit renames various source requirements files like `dev.txt`, `mypy.txt` etc to `dev.in`, `mypy.in` etc and various locked requirements files like `dev_lock.txt`, `mypy_lock.txt` etc to `dev.txt`, `mypy.txt` etc. This will help in emphasizing to the user that *.in are actually input to `update-locked-requirements` tool which should be run after updating any of these.
2017-11-17 02:41:06 +01:00
hyper==0.7.0 # via apns2
hyperframe==3.2.0 # via h2, hyper
bugdown: Force absolute urls in topic links. If a url doesn't have a scheme, browsers would treat it as a relative url and open something like: https://chat.zulip.org/google.com instead. This PR fixes the issue on the backend; the frontend implementation remains out of sync and the user sending the message wouldn't see any linkification for urls without a scheme. Fixes #12791.
2019-07-19 07:46:07 +02:00
hyperlink==19.0.0
requirements: Upgrade moto from 1.3.7 to 1.3.13.
2019-07-25 13:54:47 +02:00
idna==2.8 # via hyperlink, moto, requests
requirements: Upgrade ijson from 2.3 to 2.4.
2019-07-25 12:52:50 +02:00
ijson==2.4
requirements: Delist recursive dependencies from *.in not used directly. Signed-off-by: Anders Kaseorg <anders@zulipchat.com>
2019-07-10 22:42:29 +02:00
imagesize==1.1.0 # via sphinx
requirements: Rename requirements files. This commit renames various source requirements files like `dev.txt`, `mypy.txt` etc to `dev.in`, `mypy.in` etc and various locked requirements files like `dev_lock.txt`, `mypy_lock.txt` etc to `dev.txt`, `mypy.txt` etc. This will help in emphasizing to the user that *.in are actually input to `update-locked-requirements` tool which should be run after updating any of these.
2017-11-17 02:41:06 +01:00
incremental==17.5.0 # via twisted
ipython-genutils==0.2.0 # via traitlets
requirements: Upgrade ipython to 6.5.0. No major changes. Miscellaneous bug fixes and compatibility with Python 3.7.
2018-07-30 12:39:26 +02:00
ipython==6.5.0
requirements: Upgrade isort from 4.3.17 to 4.3.21.
2019-07-25 13:48:58 +02:00
isort==4.3.21
requirements: Upgrade indirect python dependencies.
2019-07-04 12:08:03 +02:00
jedi==0.14.0 # via ipython
requirements: Upgrade Jinja2 from 2.10 to 2.10.1.
2019-04-23 18:39:54 +02:00
jinja2==2.10.1
requirements: Upgrade indirect dependencies.
2019-03-06 11:42:31 +01:00
jmespath==0.9.4 # via boto3, botocore
requirements: Upgrade moto from 1.3.7 to 1.3.13.
2019-07-25 13:54:47 +02:00
jsondiff==1.1.2 # via moto
jsonpatch==1.23 # via cfn-lint
requirements: Upgrade indirect python dependencies.
2019-07-04 12:08:03 +02:00
jsonpickle==1.2 # via aws-xray-sdk, python-digitalocean
requirements: Upgrade moto from 1.3.7 to 1.3.13.
2019-07-25 13:54:47 +02:00
jsonpointer==2.0 # via jsonpatch
jsonschema==3.0.1 # via aws-sam-translator, cfn-lint
requirements: Remove editable flag from *.in. Fixes #12374. Signed-off-by: Anders Kaseorg <anders@zulipchat.com>
2019-08-25 01:38:20 +02:00
git+https://github.com/zulip/libthumbor.git@60ed2431c07686a12f2770b2d852c5650f3ccfc6#egg=libthumbor==1.3.2zulip
git+https://github.com/zulip/line_profiler.git#egg=line_profiler==2.1.2.zulip1
requirements: Upgrade lxml from 4.3.3 to 4.3.4.
2019-07-25 12:57:45 +02:00
lxml==4.3.4
requirements: Rename requirements files. This commit renames various source requirements files like `dev.txt`, `mypy.txt` etc to `dev.in`, `mypy.in` etc and various locked requirements files like `dev_lock.txt`, `mypy_lock.txt` etc to `dev.txt`, `mypy.txt` etc. This will help in emphasizing to the user that *.in are actually input to `update-locked-requirements` tool which should be run after updating any of these.
2017-11-17 02:41:06 +01:00
markdown-include==0.5.1
dependencies: Upgrade markdown from 3.0.1 -> 3.1.1. Fixes #12192.
2019-07-03 06:26:56 +02:00
markdown==3.1.1
requirements: Delist recursive dependencies from *.in not used directly. Signed-off-by: Anders Kaseorg <anders@zulipchat.com>
2019-07-10 22:42:29 +02:00
markupsafe==1.1.1 # via jinja2
requirements: Upgrade python-zulip-api/zulip to 7dfecf557.
2018-08-15 11:34:45 +02:00
matrix-client==0.3.2
requirements: Upgrade mock from 2.0.0 to 3.0.5.
2019-07-25 13:02:58 +02:00
mock==3.0.5
requirements: Upgrade moto from 1.3.7 to 1.3.13.
2019-07-25 13:54:47 +02:00
moto==1.3.13
mypy: Migrate from mypy_extensions to typing_extensions. This gives us access to typing_extensions.Deque, which was not added to typing until 3.5.4. (PROVISION_VERSION is not bumped because the transitive dependency set in dev.txt hasn’t changed.) Signed-off-by: Anders Kaseorg <anders@zulipchat.com>
2019-08-06 01:29:34 +02:00
mypy-extensions==0.4.1 # via mypy
requirements: Upgrade to mypy 0.720. We also add the option of the newly added `--warn_unreachable` flag.
2019-07-23 21:08:41 +02:00
mypy==0.720
requirements: Delist recursive dependencies from *.in not used directly. Signed-off-by: Anders Kaseorg <anders@zulipchat.com>
2019-07-10 22:42:29 +02:00
oauthlib==3.0.1 # via requests-oauthlib, social-auth-core
requirements: Upgrade argon2-cffi from 18.3.0 to 19.1.0. This also upgrades various recursive dependencies of Zulip.
2019-01-30 08:38:20 +01:00
packaging==19.0 # via sphinx
requirements: Update recursive dependencies. This was generated by: * `rm -f requirements/*.txt` * `./tools/update-locked-requirements` and passes tests. The effect is to unpin ourselves from old versions of a bunch of recursive dependencies of our third-party dependencies.
2018-11-13 21:29:10 +01:00
parsel==1.5.1 # via scrapy
requirements: Upgrade indirect python dependencies.
2019-07-04 12:08:03 +02:00
parso==0.5.0 # via jedi
requirements: Upgrade indirect dependencies in dev.txt, prod.txt.
2019-04-25 14:49:43 +02:00
pexpect==4.7.0 # via ipython
requirements: Upgrade phonenumberslite from 8.10.12 to 8.10.15.
2019-07-25 13:07:52 +02:00
phonenumberslite==8.10.15
requirements: Update recursive dependencies. This was generated by: * `rm -f requirements/*.txt` * `./tools/update-locked-requirements` and passes tests. The effect is to unpin ourselves from old versions of a bunch of recursive dependencies of our third-party dependencies.
2018-11-13 21:29:10 +01:00
pickleshare==0.7.5 # via ipython
requirements: Upgrade pika from 0.12.0 to 0.13.0. The important changes to pika for us are based on this PR of ours: https://github.com/pika/pika/pull/1129 Fixes #11394.
2019-01-31 08:10:34 +01:00
pika==0.13.0
requirements: Upgrade pillow from 5.4.1 to 6.1.0. Fixes #12193
2019-07-05 07:53:18 +02:00
pillow==6.1.0
requirements: Upgrade pip-tools to 3.8.0; downgrade pip to 19.1.1. These are not the latest versions, but pip-tools 3.9.0 or 4.0.0 fails to resolve dependencies from Git URLs: pip._internal.exceptions.DistributionNotFound: No matching distribution found for zulip==0.6.1_git (from -r requirements/common.in (line 135)) while pip 19.2 breaks pip-tools 3.8.0: TypeError: __init__() got an unexpected keyword argument 'find_links' Fixes #10802. Signed-off-by: Anders Kaseorg <anders@zulipchat.com>
2019-08-25 01:12:15 +02:00
pip-tools==3.8.0
requirements: Upgrade polib to 1.1.0.
2018-02-13 20:53:36 +01:00
polib==1.1.0
requirements: Upgrade premailer from 3.4.0 to 3.5.0.
2019-07-25 13:16:09 +02:00
premailer==3.5.0
requirements: Upgrade indirect dependencies in dev.txt, prod.txt.
2019-04-25 14:49:43 +02:00
prompt-toolkit==1.0.16 # via ipython
requirements: Upgrade psycopg2 from 2.8.2 to 2.8.3.
2019-07-25 13:21:07 +02:00
psycopg2==2.8.3
requirements: Update recursive dependencies. This was generated by: * `rm -f requirements/*.txt` * `./tools/update-locked-requirements` and passes tests. The effect is to unpin ourselves from old versions of a bunch of recursive dependencies of our third-party dependencies.
2018-11-13 21:29:10 +01:00
ptyprocess==0.6.0 # via pexpect
requirements: Upgrade py3dns to 3.2.0. A bunch of minor bug fixes.
2018-07-30 13:17:57 +02:00
py3dns==3.2.0
alert_words: Performance improvements in looking for alert_words. This commit leverages the ahocorasick algorithm to build a set of user_ids that have their alert_words present in the message. It runs in linear time of the order of length of the input message as opposed to number of alert_words. This is after building a ahocorasick Automaton which runs in O(number of alert_words in entire realm) which is usually cached.
2019-02-11 15:19:38 +01:00
pyahocorasick==1.4.0
auth: Migrate google auth to python-social-auth. This replaces the two custom Google authentication backends originally written in 2012 with using the shared python-social-auth codebase that we already use for the GitHub authentication backend. These are: * GoogleMobileOauth2Backend, the ancient code path for mobile authentication last used by the EOL original Zulip Android app. * The `finish_google_oauth2` code path in zerver/views/auth.py, which was the webapp (and modern mobile app) Google authentication code path. This change doesn't fix any known bugs; its main benefit is that we get to remove hundreds of lines of security-sensitive semi-duplicated code, replacing it with a widely trusted, high quality third-party library.
2019-02-02 16:51:26 +01:00
pyasn1-modules==0.2.5 # via python-ldap, service-identity
pyasn1==0.4.5 # via pyasn1-modules, python-ldap, service-identity
tools: Upgrade Pycodestyle and fix new linter errors. Here, we are upgrading pycodestyle version from 2.4.0 to 2.5.0. Fixes: #11396.
2019-01-31 14:32:37 +01:00
pycodestyle==2.5.0
requirements: Update recursive dependencies. This was generated by: * `rm -f requirements/*.txt` * `./tools/update-locked-requirements` and passes tests. The effect is to unpin ourselves from old versions of a bunch of recursive dependencies of our third-party dependencies.
2018-11-13 21:29:10 +01:00
pycparser==2.19 # via cffi
requirements: Upgrade indirect python dependencies.
2019-07-04 12:08:03 +02:00
pycryptodome==3.8.2 # via python-jose
requirements: Rename requirements files. This commit renames various source requirements files like `dev.txt`, `mypy.txt` etc to `dev.in`, `mypy.in` etc and various locked requirements files like `dev_lock.txt`, `mypy_lock.txt` etc to `dev.txt`, `mypy.txt` etc. This will help in emphasizing to the user that *.in are actually input to `update-locked-requirements` tool which should be run after updating any of these.
2017-11-17 02:41:06 +01:00
pydispatcher==2.0.5 # via scrapy
requirements: Upgrade pyflakes from 2.1.0 to 2.1.1.
2019-03-06 10:02:29 +01:00
pyflakes==2.1.1
requirements: Upgrade Pygments from 2.3.1 to 2.4.2.
2019-07-25 13:26:05 +02:00
pygments==2.4.2
requirements: Upgrade Twisted to 18.9.0.
2018-11-12 07:55:13 +01:00
pyhamcrest==1.9.0 # via twisted
requirements: Add pyinotify dependency.
2019-05-29 01:25:49 +02:00
pyinotify==0.9.6
requirements: Upgrade PyJWT from 1.6.4 to 1.7.1.
2019-01-07 11:59:17 +01:00
pyjwt==1.7.1
ldap: Make Zulip compatible with django-auth-ldap==1.5. In version 1.5, get_or_create_user method is not used. It exists just for the compatibility. The main function to use now is get_or_build_user. See the changelog: https://django-auth-ldap.readthedocs.io/en/latest/changes.html#id1 Fixes #9307
2018-05-22 08:33:56 +02:00
pyldap==3.0.0.post1 # via fakeldap
requirements: Upgrade pylibmc to 1.6.0.
2018-11-12 08:51:28 +01:00
pylibmc==1.6.0
requirements: Rename requirements files. This commit renames various source requirements files like `dev.txt`, `mypy.txt` etc to `dev.in`, `mypy.in` etc and various locked requirements files like `dev_lock.txt`, `mypy_lock.txt` etc to `dev.txt`, `mypy.txt` etc. This will help in emphasizing to the user that *.in are actually input to `update-locked-requirements` tool which should be run after updating any of these.
2017-11-17 02:41:06 +01:00
pyoembed==0.1.2
requirements: Remove unused dependencies. * backports-abc: For old Python versions. * backports.ssl-match-hostname: For old Python versions. * docopt: Has never been used directly. * gitdb: Has never been used directly. * ndg-httpsclient: No longer used by requests ≥ 2.12.1. * pycrypto: Has never been used directly. * smmap: Has never been used directly. * typing: For old Python versions. * typing_extensions: For old Python versions. PROVISION_VERSION is not bumped because these were already unused since at least the last major bump. Signed-off-by: Anders Kaseorg <anders@zulipchat.com>
2019-07-10 22:49:21 +02:00
pyopenssl==19.0.0 # via requests, scrapy
requirements: Upgrade indirect dependencies in dev.txt, prod.txt.
2019-04-25 14:49:43 +02:00
pyparsing==2.4.0 # via packaging
requirements: Upgrade moto from 1.3.7 to 1.3.13.
2019-07-25 13:54:47 +02:00
pyrsistent==0.15.3 # via jsonschema
requirements: Upgrade indirect python dependencies.
2019-07-04 12:08:03 +02:00
pysocks==1.7.0 # via twilio
requirements: Upgrade python-dateutil from 2.7.5 to 2.8.0.
2019-03-06 10:05:21 +01:00
python-dateutil==2.8.0
requirements: Upgrade python-digital-ocean to 1.14.0.
2018-11-09 16:11:57 +01:00
python-digitalocean==1.14.0
requirements: Rename requirements files. This commit renames various source requirements files like `dev.txt`, `mypy.txt` etc to `dev.in`, `mypy.in` etc and various locked requirements files like `dev_lock.txt`, `mypy_lock.txt` etc to `dev.txt`, `mypy.txt` etc. This will help in emphasizing to the user that *.in are actually input to `update-locked-requirements` tool which should be run after updating any of these.
2017-11-17 02:41:06 +01:00
python-gcm==0.4
requirements: Upgrade moto from 1.3.3 to 1.3.7.
2019-01-07 09:34:11 +01:00
python-jose==2.0.2 # via moto
requirements: Upgrade indirect dependencies in dev.txt, prod.txt.
2019-04-25 14:49:43 +02:00
python-ldap==3.2.0 # via django-auth-ldap, pyldap
url preview: Add python-magic dependency for content-type sniffing.
2019-05-05 05:28:13 +02:00
python-magic==0.4.15
requirements: Upgrade python-twitter to 3.5.
2018-11-09 16:13:21 +01:00
python-twitter==3.5
requirements: Rename requirements files. This commit renames various source requirements files like `dev.txt`, `mypy.txt` etc to `dev.in`, `mypy.in` etc and various locked requirements files like `dev_lock.txt`, `mypy_lock.txt` etc to `dev.txt`, `mypy.txt` etc. This will help in emphasizing to the user that *.in are actually input to `update-locked-requirements` tool which should be run after updating any of these.
2017-11-17 02:41:06 +01:00
python3-openid==3.1.0 # via social-auth-core
requirements: Upgrade pytz from 2018.9 to 2019.1.
2019-04-23 20:23:45 +02:00
pytz==2019.1
requirements: Upgrade moto from 1.3.7 to 1.3.13.
2019-07-25 13:54:47 +02:00
pyyaml==5.1.1 # via cfn-lint, moto, yamole
requirements: Upgrade argon2-cffi from 18.3.0 to 19.1.0. This also upgrades various recursive dependencies of Zulip.
2019-01-30 08:38:20 +01:00
qrcode==6.1 # via django-two-factor-auth
requirements: Update recursive dependencies. This was generated by: * `rm -f requirements/*.txt` * `./tools/update-locked-requirements` and passes tests. The effect is to unpin ourselves from old versions of a bunch of recursive dependencies of our third-party dependencies.
2018-11-13 21:29:10 +01:00
queuelib==1.5.0 # via scrapy
docs: pip upgrade recommonmark and CommonMark Summary: - recommonmark: 0.4.0 -> 0.5.0 - CommonMark: 0.5.4 -> 0.9.0 - Fixed links getting their .md file extension cut off - Supressed 262 new warnings Details: Appended #anchors to markdown github links as a workaround to recommonmark 0.5.0 cutting off the ".md" part from them. Sphinx build would fail as follows [documentation_crawler] ERROR: Please check link: <404 https://github.com/zulip/zulipbot/blob/master/.github/CONTRIBUTING> <404 https://github.com/zulip/zulip/blob/master/requirements/README> <404 https://github.com/zulip/python-zulip-api/blob/master/zulip_bots/README> sphinx build would also log a "WARNING: None:any reference target not found" for every link ending in .html So a good temporary solution is to suppress all warnings with the method suggested here: https://stackoverflow.com/questions/37359407/suppress-warnings-for-unfound-references-with-default-role-any-in-sphinx A better solution would be to edit all links ending .html and use .md instead; which would also solve PR #11719. Fixes #11395.
2019-08-16 03:14:05 +02:00
recommonmark==0.5.0
requirements: Upgrade redis from 2.10.6 to 3.2.1. Fixes #11209. This requires changing how zadd is used in rate_limiter.py: In redis-py >= 3.0 the pairs to ZADD need to be passed as a dictionary, not as *args or **kwargs, as described at https://pypi.org/project/redis/3.2.1/ in the section "Upgrading from redis-py 2.X to 3.0". The rate_limiter change has to be in one commit with the redis upgrade, because the dict format is not supported before redis-py 3.0.
2019-07-28 15:08:55 +02:00
redis==3.2.1
requirements: Upgrade indirect python dependencies.
2019-07-04 12:08:03 +02:00
regex==2019.6.8
requirements: Delist recursive dependencies from *.in not used directly. Signed-off-by: Anders Kaseorg <anders@zulipchat.com>
2019-07-10 22:42:29 +02:00
requests-oauthlib==1.0.0 # via python-twitter, social-auth-core
requirements: Upgrade moto from 1.3.7 to 1.3.13.
2019-07-25 13:54:47 +02:00
requests[security]==2.22.0 # via aws-xray-sdk, cfn-lint, docker, hypchat, matrix-client, moto, premailer, pyoembed, python-digitalocean, python-gcm, python-twitter, requests-oauthlib, responses, social-auth-core, sphinx, stripe, twilio
requirements: Upgrade indirect dependencies in dev.txt, prod.txt.
2019-04-25 14:49:43 +02:00
responses==0.10.6 # via moto
requirements: Upgrade indirect python dependencies.
2019-07-04 12:08:03 +02:00
s3transfer==0.2.1 # via boto3
requirements: Upgrade Scrapy from 1.6.0 to 1.7.2.
2019-07-25 13:59:39 +02:00
scrapy==1.7.2
requirements: Upgrade beautifulsoup4 from 4.6.3 to 4.7.1.
2019-01-07 08:50:53 +01:00
service-identity==18.1.0 # via scrapy
requirements: Upgrade gitlint from 0.10.0 to 0.11.0.
2019-04-24 19:27:14 +02:00
sh==1.12.14 # via gitlint
requirements: Rename requirements files. This commit renames various source requirements files like `dev.txt`, `mypy.txt` etc to `dev.in`, `mypy.in` etc and various locked requirements files like `dev_lock.txt`, `mypy_lock.txt` etc to `dev.txt`, `mypy.txt` etc. This will help in emphasizing to the user that *.in are actually input to `update-locked-requirements` tool which should be run after updating any of these.
2017-11-17 02:41:06 +01:00
simplegeneric==0.8.1 # via ipython
requirements: Upgrade six from 1.11.0 to 1.12.0.
2019-01-07 16:32:53 +01:00
six==1.12.0
requirements: Upgrade snakeviz from 2.0.0 to 2.0.1.
2019-07-25 14:04:28 +02:00
snakeviz==2.0.1
requirements: Delist recursive dependencies from *.in not used directly. Signed-off-by: Anders Kaseorg <anders@zulipchat.com>
2019-07-10 22:42:29 +02:00
snowballstemmer==1.2.1 # via sphinx
requirements: Upgrade social-auth-app-django to 3.1.0.
2018-11-09 16:18:35 +01:00
social-auth-app-django==3.1.0
requirements: Upgrade indirect python dependencies.
2019-07-04 12:08:03 +02:00
social-auth-core==3.2.0 # via social-auth-app-django
requirements: Upgrade sockjs-tornado to 1.0.6.
2018-11-09 16:19:45 +01:00
sockjs-tornado==1.0.6
requirements: Upgrade indirect python dependencies.
2019-07-04 12:08:03 +02:00
soupsieve==1.9.2 # via beautifulsoup4
requirements: Rename requirements files. This commit renames various source requirements files like `dev.txt`, `mypy.txt` etc to `dev.in`, `mypy.in` etc and various locked requirements files like `dev_lock.txt`, `mypy_lock.txt` etc to `dev.txt`, `mypy.txt` etc. This will help in emphasizing to the user that *.in are actually input to `update-locked-requirements` tool which should be run after updating any of these.
2017-11-17 02:41:06 +01:00
sourcemap==0.2.1
requirements: Upgrade sphinx-rtd-theme from 0.4.2 to 0.4.3.
2019-03-06 10:12:43 +01:00
sphinx-rtd-theme==0.4.3
requirements: Upgrade sphinx from 1.8.3 to 1.8.4.
2019-03-06 17:08:06 +01:00
sphinx==1.8.4
requirements: Upgrade indirect python dependencies.
2019-07-04 12:08:03 +02:00
sphinxcontrib-websupport==1.1.2 # via sphinx
requirements: Upgrade SQLAlchemy from 1.3.3 to 1.3.6.
2019-07-25 13:33:49 +02:00
sqlalchemy==1.3.6
requirements: Upgrade moto from 1.3.7 to 1.3.13.
2019-07-25 13:54:47 +02:00
sshpubkeys==3.1.0 # via moto
requirements: Update recursive dependencies. This was generated by: * `rm -f requirements/*.txt` * `./tools/update-locked-requirements` and passes tests. The effect is to unpin ourselves from old versions of a bunch of recursive dependencies of our third-party dependencies.
2018-11-13 21:29:10 +01:00
statsd==3.3.0 # via django-statsd-mozilla
requirements: Upgrade stripe pip package from 2.21.0 to 2.35.0.
2019-08-19 10:47:22 +02:00
stripe==2.35.0
requirements: Remove editable flag from *.in. Fixes #12374. Signed-off-by: Anders Kaseorg <anders@zulipchat.com>
2019-08-25 01:38:20 +02:00
git+https://github.com/zulip/talon.git@7d8bdc4dbcfcc5a73298747293b99fe53da55315#egg=talon==1.2.10.zulip1
requirements: Upgrade tblib from 1.3.2 to 1.4.0.
2019-07-25 14:09:09 +02:00
tblib==1.4.0
requirements: Upgrade tornado to 4.5.3.
2018-02-13 21:44:35 +01:00
tornado==4.5.3
requirements: Rename requirements files. This commit renames various source requirements files like `dev.txt`, `mypy.txt` etc to `dev.in`, `mypy.in` etc and various locked requirements files like `dev_lock.txt`, `mypy_lock.txt` etc to `dev.txt`, `mypy.txt` etc. This will help in emphasizing to the user that *.in are actually input to `update-locked-requirements` tool which should be run after updating any of these.
2017-11-17 02:41:06 +01:00
traitlets==4.3.2 # via ipython
requirements: Upgrade transifex-client to 0.12.5.
2018-02-14 09:13:32 +01:00
transifex-client==0.12.5
requirements: Upgrade twilio from 6.26.2 to 6.29.2.
2019-07-25 13:38:52 +02:00
twilio==6.29.2
requirements: Upgrade Twisted from 19.2.0 to 19.2.1.
2019-07-04 11:32:41 +02:00
twisted==19.2.1
requirements: Upgrade mypy to 0.711. This comes with it a big performance improvement; mypy is now only barely our slowest linter even if it wasn't previously running. Fixes: #12058
2019-04-16 07:14:51 +02:00
typed-ast==1.4.0 # via mypy
mypy: Migrate from mypy_extensions to typing_extensions. This gives us access to typing_extensions.Deque, which was not added to typing until 3.5.4. (PROVISION_VERSION is not bumped because the transitive dependency set in dev.txt hasn’t changed.) Signed-off-by: Anders Kaseorg <anders@zulipchat.com>
2019-08-06 01:29:34 +02:00
typing-extensions==3.7.4
requirements: Remove editable flag from *.in. Fixes #12374. Signed-off-by: Anders Kaseorg <anders@zulipchat.com>
2019-08-25 01:38:20 +02:00
git+https://github.com/zulip/ultrajson@70ac02bec#egg=ujson==1.35+git
requirements: Upgrade indirect python dependencies.
2019-07-04 12:08:03 +02:00
urllib3==1.25.3 # via botocore, requests, transifex-client
requirements: Upgrade virtualenv-clone from 0.5.1 to 0.5.3.
2019-04-23 20:39:19 +02:00
virtualenv-clone==0.5.3
requirements: Upgrade argon2-cffi from 18.3.0 to 19.1.0. This also upgrades various recursive dependencies of Zulip.
2019-01-30 08:38:20 +01:00
w3lib==1.20.0 # via parsel, scrapy
requirements: Rename requirements files. This commit renames various source requirements files like `dev.txt`, `mypy.txt` etc to `dev.in`, `mypy.in` etc and various locked requirements files like `dev_lock.txt`, `mypy_lock.txt` etc to `dev.txt`, `mypy.txt` etc. This will help in emphasizing to the user that *.in are actually input to `update-locked-requirements` tool which should be run after updating any of these.
2017-11-17 02:41:06 +01:00
wcwidth==0.1.7 # via prompt-toolkit
requirements: Upgrade indirect dependencies in dev.txt, prod.txt.
2019-04-25 14:49:43 +02:00
websocket-client==0.56.0 # via docker
requirements: Upgrade indirect python dependencies.
2019-07-04 12:08:03 +02:00
werkzeug==0.15.4 # via moto
wrapt==1.11.2 # via aws-xray-sdk
requirements: Upgrade indirect dependencies.
2019-03-06 11:42:31 +01:00
xmltodict==0.12.0 # via moto
requirements: Upgrade yamole from 2.1.5 to 2.1.6.
2019-01-07 16:47:23 +01:00
yamole==2.1.6
requirements: Upgrade moto from 1.3.7 to 1.3.13.
2019-07-25 13:54:47 +02:00
zope.interface==4.6.0 # via datetime, twisted
requirements: Remove editable flag from *.in. Fixes #12374. Signed-off-by: Anders Kaseorg <anders@zulipchat.com>
2019-08-25 01:38:20 +02:00
git+https://github.com/zulip/zulint@aaed679f1ad38b230090eadd3870b7682500f60c#egg=zulint==0.0.1
git+https://github.com/zulip/python-zulip-api.git@804501610b6a205334e71b4e441fca60acf650da#egg=zulip==0.6.1_git&subdirectory=zulip
git+https://github.com/zulip/python-zulip-api.git@804501610b6a205334e71b4e441fca60acf650da#egg=zulip_bots==0.6.1+git&subdirectory=zulip_bots
requirements: Upgrade pip-tools to 3.8.0; downgrade pip to 19.1.1. These are not the latest versions, but pip-tools 3.9.0 or 4.0.0 fails to resolve dependencies from Git URLs: pip._internal.exceptions.DistributionNotFound: No matching distribution found for zulip==0.6.1_git (from -r requirements/common.in (line 135)) while pip 19.2 breaks pip-tools 3.8.0: TypeError: __init__() got an unexpected keyword argument 'find_links' Fixes #10802. Signed-off-by: Anders Kaseorg <anders@zulipchat.com>
2019-08-25 01:12:15 +02:00
# The following packages are considered to be unsafe in a requirements file:
requirements: Include packages that pip-tools considers unsafe. It’s unclear why pip-tools considers these packages unsafe, and excluding them from being pinned has resulted in nondeterministic output that makes our test suite unhappy. Signed-off-by: Anders Kaseorg <anders@zulipchat.com>
2019-08-26 01:04:18 +02:00
pip==19.1.1
setuptools==41.0.1 # via cfn-lint, ipython, jsonschema, markdown, pyhamcrest, sphinx, zope.interface