bookwyrm/requirements.txt

aiohttp==3.9.4
bleach==5.0.1
boto3==1.34.74
bw-file-resubmit==0.6.0rc2
celery==5.3.1
colorthief==0.2.1
Django==4.2.11
django-celery-beat==2.6.0
django-compressor==4.4
django-csp==3.8
django-imagekit==5.0.0
django-model-utils==4.4.0
django-oauth-toolkit==2.3.0
django-pgtrigger==4.11.0
django-redis==5.2.0
django-sass-processor==1.4
django-storages==1.14.2
django-storages[azure]
environs==11.0.0
flower==2.0.1
grpcio==1.57.0 # Not a direct dependency, pinned to get a security fix
libsass==0.23.0
Markdown==3.4.1
opentelemetry-api==1.16.0
opentelemetry-exporter-otlp-proto-grpc==1.16.0
opentelemetry-instrumentation-celery==0.37b0
opentelemetry-instrumentation-django==0.37b0
opentelemetry-instrumentation-psycopg2==0.37b0
opentelemetry-sdk==1.16.0
Pillow==10.3.0
pilkit>=3.0 # dependency of django-imagekit, 2.0 is incompatible with Pillow>=10
protobuf==3.20.*
psycopg2==2.9.5
pycryptodome==3.19.1
pyotp==2.8.0
python-dateutil==2.8.2
pytz>=2022.7
qrcode==7.3.1
redis==4.5.4
requests==2.31.0
responses==0.22.0
s3-tar==0.1.13
setuptools>=65.5.1 # Not a direct dependency, pinned to get a security fix
tornado==6.3.3 # Not a direct dependency, pinned to get a security fix

# Dev
black==22.*
celery-types==0.18.0
django-stubs[compatible-mypy]==4.2.4
mypy==1.5.1
pylint==2.15.0
pytest==8.0.2
pytest-cov==5.0.0
pytest-django==4.8.0
pytest-env==0.6.2
pytest-xdist==2.3.0
pytidylib==0.3.2
types-bleach==6.0.0.4
types-dataclasses==0.6.6
types-Markdown==3.4.2.10
types-Pillow==10.2.0.20240311
types-psycopg2==2.9.21.11
types-python-dateutil==2.8.19.14
types-requests==2.31.0.2
Bump aiohttp from 3.9.2 to 3.9.4 Bumps [aiohttp](https://github.com/aio-libs/aiohttp) from 3.9.2 to 3.9.4. - [Release notes](https://github.com/aio-libs/aiohttp/releases) - [Changelog](https://github.com/aio-libs/aiohttp/blob/master/CHANGES.rst) - [Commits](https://github.com/aio-libs/aiohttp/compare/v3.9.2...v3.9.4) --- updated-dependencies: - dependency-name: aiohttp dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> 2024-04-18 15:51:34 +00:00			`aiohttp==3.9.4`
Uses library for html cleanup 2022-07-04 20:14:22 +00:00			`bleach==5.0.1`
Update boto3 to 1.34.74 2024-03-29 21:28:50 +00:00			`boto3==1.34.74`
swap out django-file-resubmit - we decided to fork it, so this now uses the inaugural RC release of bw-file-resubmit (will need to be adjusted once we're confident it's ok to push a full release) - I was accidentally using the wrong widget lol 2023-11-05 05:34:24 +00:00			`bw-file-resubmit==0.6.0rc2`
Upgrade Celery to 5.3.1 2024-03-03 00:03:19 +00:00			`celery==5.3.1`
Update 2021-05-25 21:04:28 +00:00			`colorthief==0.2.1`
Upgrade Django to 4.2 - https://docs.djangoproject.com/en/5.0/releases/4.0/ - https://docs.djangoproject.com/en/5.0/releases/4.1/ - https://docs.djangoproject.com/en/5.0/releases/4.2/ 2024-03-29 19:23:25 +00:00			`Django==4.2.11`
Update django-celery-beat to 2.6.0 2024-03-29 21:30:34 +00:00			`django-celery-beat==2.6.0`
Upgrade django-compressor to 4.4 2024-03-03 00:04:37 +00:00			`django-compressor==4.4`
Update django-csp to 3.8 2024-03-29 21:32:04 +00:00			`django-csp==3.8`
Update django-imagekit to 5.0.0 2024-03-29 21:34:52 +00:00			`django-imagekit==5.0.0`
Update django-model-utils to 4.4.0 2024-03-29 21:36:11 +00:00			`django-model-utils==4.4.0`
Merge branch 'main' into feat/api/oauth 2024-03-31 19:41:12 +00:00			`django-oauth-toolkit==2.3.0`
Upgade django-pgtrigger to 4.11 2024-03-18 00:46:34 +00:00			`django-pgtrigger==4.11.0`
Alphabetize requirements.txt Alphabetize requirements.txt for developer convenience; this helps to find duplicates and unnecessarily-pinned subdependencies, as well as making the file easier to read and use. 2024-03-02 23:41:06 +00:00			`django-redis==5.2.0`
Update django-sass-processor to 1.4 2024-03-29 21:41:19 +00:00			`django-sass-processor==1.4`
Update django-storages to 1.14.2 The problem that boto3 closes files has been worked around in django-storages. 2024-03-29 21:13:09 +00:00			`django-storages==1.14.2`
Alphabetize requirements.txt Alphabetize requirements.txt for developer convenience; this helps to find duplicates and unnecessarily-pinned subdependencies, as well as making the file easier to read and use. 2024-03-02 23:41:06 +00:00			`django-storages[azure]`
Update environs to 11.0.0 2024-03-29 20:56:39 +00:00			`environs==11.0.0`
flower 2.0.1 fixes a few link bugs (particularly for favicon) 2024-03-29 11:07:52 +00:00			`flower==2.0.1`
Fix typo in operator 2024-03-03 01:29:42 +00:00			`grpcio==1.57.0 # Not a direct dependency, pinned to get a security fix`
Update libsass to 0.23.0 2024-03-29 21:41:56 +00:00			`libsass==0.23.0`
Update requirements.txt Important bugfixes and performance updates. did not touch opentelemetry or the dev dependencies. No breaking changes. 2023-01-26 15:51:32 +00:00			`Markdown==3.4.1`
Bump opentelemetry versions This isn't actually required for anything, just good practice to keep things up to date. 2023-03-16 17:57:19 +00:00			`opentelemetry-api==1.16.0`
			`opentelemetry-exporter-otlp-proto-grpc==1.16.0`
			`opentelemetry-instrumentation-celery==0.37b0`
			`opentelemetry-instrumentation-django==0.37b0`
Add automatic instrumentation to Postgres queries This enables automatic instrumentation of Postgres queries when OpenTelemetry instrumentation is enabled, which will help with debugging performance problems. 2023-04-07 05:58:49 +00:00			`opentelemetry-instrumentation-psycopg2==0.37b0`
Bump opentelemetry versions This isn't actually required for anything, just good practice to keep things up to date. 2023-03-16 17:57:19 +00:00			`opentelemetry-sdk==1.16.0`
Bump pillow from 10.2.0 to 10.3.0 Bumps [pillow](https://github.com/python-pillow/Pillow) from 10.2.0 to 10.3.0. - [Release notes](https://github.com/python-pillow/Pillow/releases) - [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst) - [Commits](https://github.com/python-pillow/Pillow/compare/10.2.0...10.3.0) --- updated-dependencies: - dependency-name: pillow dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> 2024-04-03 16:45:11 +00:00			`Pillow==10.3.0`
Change pilkit constraint to the version that does work 2024-04-11 12:45:13 +00:00			`pilkit>=3.0 # dependency of django-imagekit, 2.0 is incompatible with Pillow>=10`
Updates and fixes opentelemetry install 2022-08-04 18:05:18 +00:00			`protobuf==3.20.*`
Alphabetize requirements.txt Alphabetize requirements.txt for developer convenience; this helps to find duplicates and unnecessarily-pinned subdependencies, as well as making the file easier to read and use. 2024-03-02 23:41:06 +00:00			`psycopg2==2.9.5`
			`pycryptodome==3.19.1`
Update requirements.txt Important bugfixes and performance updates. did not touch opentelemetry or the dev dependencies. No breaking changes. 2023-01-26 15:51:32 +00:00			`pyotp==2.8.0`
Alphabetize requirements.txt Alphabetize requirements.txt for developer convenience; this helps to find duplicates and unnecessarily-pinned subdependencies, as well as making the file easier to read and use. 2024-03-02 23:41:06 +00:00			`python-dateutil==2.8.2`
			`pytz>=2022.7`
prepare for 2FA - add and migrate User fields for 2FA - add views for 2FA - add new forms for 2FA - update package list in requirements.txt - add URLs for 2FA views 2022-09-11 03:48:52 +00:00			`qrcode==7.3.1`
Alphabetize requirements.txt Alphabetize requirements.txt for developer convenience; this helps to find duplicates and unnecessarily-pinned subdependencies, as well as making the file easier to read and use. 2024-03-02 23:41:06 +00:00			`redis==4.5.4`
			`requests==2.31.0`
			`responses==0.22.0`
initial work on fixing user exports with s3 - custom storages - tar.gz within bucket using s3_tar - slightly changes export directory structure - major problems still outstanding re delivering s3 files to end users 2024-01-14 01:14:44 +00:00			`s3-tar==0.1.13`
Pin setuptools at 65.5.1 2024-03-03 01:20:48 +00:00			`setuptools>=65.5.1 # Not a direct dependency, pinned to get a security fix`
Pin Tornado at 6.3.3 2024-03-03 00:08:41 +00:00			`tornado==6.3.3 # Not a direct dependency, pinned to get a security fix`
Add black command 2021-02-22 07:07:58 +00:00
			`# Dev`
requirements.txt: add black This way, IDEs can be set up to use the black version from the environment instead of a globally available/bundled black version. 2024-03-20 11:43:14 +00:00			`black==22.*`
Alphabetize requirements.txt Alphabetize requirements.txt for developer convenience; this helps to find duplicates and unnecessarily-pinned subdependencies, as well as making the file easier to read and use. 2024-03-02 23:41:06 +00:00			`celery-types==0.18.0`
			`django-stubs[compatible-mypy]==4.2.4`
			`mypy==1.5.1`
Upgrade Pylint to 2.15.0 2024-03-03 00:09:06 +00:00			`pylint==2.15.0`
Update pytest-cov to 5.0.0 2024-03-29 20:58:49 +00:00			`pytest==8.0.2`
			`pytest-cov==5.0.0`
Update pytest-django to 4.8.0 2024-03-29 20:55:03 +00:00			`pytest-django==4.8.0`
Updates test 2021-08-03 02:30:42 +00:00			`pytest-env==0.6.2`
Try running tests in parellel 2021-08-02 19:34:18 +00:00			`pytest-xdist==2.3.0`
Adds html linting to test 2021-09-28 17:21:12 +00:00			`pytidylib==0.3.2`
Dump dependencies related to typing 2023-09-13 07:09:43 +00:00			`types-bleach==6.0.0.4`
Added mypy to scripts and workflow, and some first annotations for celerywyrm 2023-07-22 11:27:43 +00:00			`types-dataclasses==0.6.6`
Dump dependencies related to typing 2023-09-13 07:09:43 +00:00			`types-Markdown==3.4.2.10`
requirements.txt: make typing-Pillow match Pillow 2024-03-18 18:52:40 +00:00			`types-Pillow==10.2.0.20240311`
Dump dependencies related to typing 2023-09-13 07:09:43 +00:00			`types-psycopg2==2.9.21.11`
			`types-python-dateutil==2.8.19.14`
			`types-requests==2.31.0.2`