constraints.txt

# Version constraints for pip-installation.
#
# This file doesn't install any packages. It specifies version constraints
# that will be applied if a package is needed.
#
# When pinning something here, please provide an explanation of why.  Ideally,
# link to other information that will help people in the future to remove the
# pin when possible.  Writing an issue against the offending project and
# linking to it here is good.

# These packages are backports which can only be installed on Python 2.7
functools32 ; python_version == "2.7"
futures ; python_version == "2.7"
python-openid ; python_version == "2.7"
pysqlite ; python_version == "2.7"

# six is at 1.12.0, but transifex-client requires ==1.11.0
# https://github.com/transifex/transifex-client/issues/252
six==1.11.0

# Convert text markup to HTML; used in capa problems, forums, and course wikis; pin Markdown version as tests failed for its upgrade to latest release
Markdown==2.6.11

# mysqlclient 1.5 is scheduled to change internal APIs used by Django 1.11
mysqlclient<1.5

# required by edx-lint and pinned explicitly here because newer versions don't guarantee python 2 support.
# Can be removed when we get to Python 3.
pylint-plugin-utils==0.3

# transifex-client 0.13.6 requires urllib3<1.24, but requests will pull in urllib3==1.24 (https://github.com/transifex/transifex-client/pull/241/files)
urllib3<1.24

# Bumping requests-oauthlib to 1.2 updates oauthlib to 3.0.0, which changes a response code in certain cases
# This causes a test to fail. Before fixing, we would need to make sure mobile apps are functional with this change
# See https://github.com/oauthlib/oauthlib/issues/264 for more context
requests-oauthlib==1.1.0
oauthlib==2.1.0

# pytest-randomly dropped support for Python 2 with 2.0.0, and only supports Python 3.4+
pytest-randomly<2.0.0

# python3-saml 1.6.0 breaks unittests in common/djangoapps/third_party_auth/tests/test_views.py::SAMLMetadataTest
python3-saml==1.5.0

# version 1.3.0 breaks make upgrade, as it requires py3.5 or above
scipy<=1.2.1

# Unless we constrain pytest to <4.6.0, it may break all tests inside of
# xmodule.tests.test_resource_templates.ResourceTemplatesTests See TE-2391 for details.
pytest<4.6.0

# Pinning to older version of edx-rbac until ENT-2002 is resolved.
edx-rbac==0.2.1

# transifex-client 0.13.6 requires python-slugify 1.2.6, but the latest version is 3.0.2
python-slugify==1.2.6

# 1.2.3 breaks unittest in
# lms.djangoapps.course_api.tests.test_views.CourseListSearchViewTest.test_list_all_with_search_term
# acceptance.tests.lms.test_lms_course_discovery.CourseDiscoveryTest.test_search
edx-search==1.2.2