Mirror
/
zulip
mirror of https://github.com/zulip/zulip.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
zulip/requirements
History
Anders Kaseorg d4443bc4f8 requirements: Upgrade Python requirements. 
Addresses a potential Pillow DoS vulnerability, among other things.

Signed-off-by: Anders Kaseorg <anders@zulipchat.com>
 		2019-10-28 16:42:20 -07:00
..
README.md requirements: Improve README's format. 2018-05-26 06:26:14 -07:00
common.in requirements: Use webpack4 fork of django-webpack-loader. 2019-10-28 15:53:15 -07:00
dev.in requirements: Upgrade fakeldap to master. 2019-10-17 16:49:53 -07:00
dev.txt requirements: Upgrade Python requirements. 2019-10-28 16:42:20 -07:00
docs.in docs: Upgrade recommonmark to 0.6.0, fixing issues. 2019-10-02 12:29:24 -07:00
docs.txt requirements: Upgrade Python requirements. 2019-10-28 16:42:20 -07:00
mypy.in requirements: Pin mypy to 0.720. 2019-10-08 17:49:28 -07:00
mypy.txt requirements: Upgrade Python requirements. 2019-10-28 16:42:20 -07:00
pip.in requirements: Generate pip.txt from pip.in like the other *.txt files. 2019-09-23 13:23:58 -07:00
pip.txt requirements: Upgrade Python requirements. 2019-10-28 16:42:20 -07:00
prod.in requirements: Remove unnecessary version bounds from *.in. 2019-09-23 13:23:58 -07:00
prod.txt requirements: Upgrade Python requirements. 2019-10-28 16:42:20 -07:00
thumbor-dev.in requirements: Remove unnecessary version bounds from *.in. 2019-09-23 13:23:58 -07:00
thumbor-dev.txt requirements: Upgrade Python requirements. 2019-10-28 16:42:20 -07:00
thumbor.in requirements: Remove unnecessary version bounds from *.in. 2019-09-23 13:23:58 -07:00
thumbor.txt requirements: Upgrade Python requirements. 2019-10-28 16:42:20 -07:00

README.md

The dependency graph of the requirements is as follows:

dev         prod
+ +          +
| +->common<-+
v
mypy,docs

Of the files, only dev, prod, and mypy have been used in the install scripts directly. The rest are implicit dependencies.

common and dev are locked.

Steps to update a lock file, e.g. to update ipython from 5.3.0 to 6.0.0 in common.in and propagate it to dev.txt and prod.txt: 0. Replace ipython==5.4.1 with ipython==6.0.0 in common.in.

  1. Run ./tools/update-locked-requirements.
  2. Increase PROVISION_VERSION in version.py.
  3. Run ./tools/provision to install the new deps and test them.
  4. Commit your changes.