Skip to content
Snippets Groups Projects
constraints.txt 3.52 KiB
Newer Older
# Version constraints for pip-installation.
#
# This file doesn't install any packages. It specifies version constraints
# that will be applied if a package is needed.
#
# When pinning something here, please provide an explanation of why.  Ideally,
# link to other information that will help people in the future to remove the
# pin when possible.  Writing an issue against the offending project and
# linking to it here is good.


# This file contains all common constraints for edx-repos
-c https://raw.githubusercontent.com/edx/edx-lint/master/edx_lint/files/common_constraints.txt

# latest version breaks the tests.
django<2.2.21

Soban Javed's avatar
Soban Javed committed
# celery 5.0 has dropped python3.5 support.
celery<5.0
# cryptography 3.3 has dropped python3.5 support.
cryptography<3.3

# PYJWT[crypto]==2.0.1 requires cryptography>=3.3.1
PyJWT[crypto]<2.0.0
# social-auth-core>=4.0.0 requires PYJWT>=2.0.0
social-auth-core<4.0.0

# The CORS_ORIGIN_WHITELIST changes in a backwards incompatible way in 3.0.0, needs matching configuration repo changes
django-cors-headers<3.0.0

# It seems like django-countries > 5.5 may cause performance issues for us.
django-countries==5.5

# django-storages version 1.9 drops support for boto storage backend.
django-storages<1.9
Feanil Patel's avatar
Feanil Patel committed
# The team that owns this package will manually bump this package rather than having it pulled in automatically.
# This is to allow them to better control its deployment and to do it in a process that works better
# for them.
# Newer versions need a more recent version of python-dateutil
freezegun==0.3.12

# 4.0.0 dropped support for Python 3.5
inflect<4.0.0

# 5.0.0 dropped support for Python 3.5
isort<5.0.0

# 0.15.0 dropped support for Python 3.5
joblib<0.15.0

# jsonfield2 3.1.0 drops support for python 3.5
jsonfield2<3.1.0

# kiwisolver 1.2.0 requires Python 3.6+
kiwisolver<1.2.0

# 4.5.1 introduced a bug when used together with xmlsec: https://bugs.launchpad.net/lxml/+bug/1880251
# Tests passed, but hit a problem in stage
lxml<4.5.1

# Matplotlib 3.1 requires Python 3.6
matplotlib<3.1

Zulqarnain's avatar
Zulqarnain committed
# maxminddb 2.0.0 has dropped support for Python 3.5
arbi-bom's avatar
arbi-bom committed
# oauthlib>3.0.1 causes test failures ( also remove the django-oauth-toolkit constraint when this is fixed )
arbi-bom's avatar
arbi-bom committed
# django-auth-toolkit==1.3.3 requires oauthlib>=3.1.0 which is pinned because of test failures
django-oauth-toolkit<=1.3.2

# path 13.2.0 drops support for Python 3.5
path<13.2.0

# ARCHBOM-1141: pip-tools upgrade requires pip upgrade
pip-tools<6.0
# Upgrading to 2.5.3 on 2020-01-03 triggered "'tzlocal' object has no attribute '_std_offset'" errors in production
python-dateutil==2.4.0

# stevedore 2.0.0 requires python >= 3.6
stevedore<2.0.0

# Constraint from astroid 2.3.3
wrapt==1.11.*

# zipp 2.0.0 requires Python >= 3.6
zipp==1.0.0
# Matplotlib 3.1 requires Python 3.6
matplotlib<3.1
# geoip2 requires Python 3.6
geoip2<4.0.1
bom's avatar
bom committed

# tests failing for pymongo==3.11
pymongo<3.11
# sympy latest version causing test failures.
sympy==1.6.2
# python3-saml==1.10.0 version started breaking a11y tests
python3-saml<1.10.0

# With greater version these tests `common.djangoapps.terrain.stubs.tests` becomes flaky on jenkins.
httpretty<1.0

# latest version of diff-cover conflicts with pygments version see https://github.com/Bachmann1234/diff_cover/commit/01f91760321cee1ad28cfa0d801c4acd8b9765a6
diff-cover==4.0.0
# transifex-client==0.14.2(latest) requires python-slugify<5.0.0 for Python 2.0 support.
# This can be removed once transifex-client drops support for Python 2.0 and removes the required constraint.
python-slugify<5.0.0