requirements.txt

# pyup: ignore file
# This file is autogenerated. Do not edit it manually.
# Run `make freeze-requirements` to update requirements.txt
# with package version changes made in requirements-app.txt

ago==0.0.93
govuk-bank-holidays==0.8
humanize==2.6.0
Flask==1.1.2
Flask-WTF==0.14.3
Flask-Login==0.5.0

blinker==1.4
pyexcel==0.6.4
pyexcel-io==0.5.20
pyexcel-xls==0.5.9
pyexcel-xlsx==0.5.8
pyexcel-ods3==0.5.3
pytz==2020.1
gunicorn==20.0.4
eventlet==0.26.1
notifications-python-client==5.7.0
Shapely==1.7.1

# PaaS
awscli-cwlogs>=1.4,<1.5
itsdangerous==1.1.0

git+https://github.com/alphagov/notifications-utils.git@41.0.1#egg=notifications-utils==41.0.1
git+https://github.com/alphagov/govuk-frontend-jinja.git@v0.5.1-alpha#egg=govuk-frontend-jinja==0.5.1-alpha

# gds-metrics requires prometheseus 0.2.0, override that requirement as later versions bring significant performance gains
prometheus-client==0.8.0
gds-metrics==0.2.4

## The following requirements were added by pip freeze:
awscli==1.18.129
bleach==3.1.4
boto3==1.10.38
botocore==1.17.52
cachetools==4.1.0
certifi==2020.6.20
chardet==3.0.4
click==7.1.2
colorama==0.4.3
dnspython==1.16.0
docopt==0.6.2
docutils==0.15.2
et-xmlfile==1.0.1
flask-redis==0.4.0
future==0.18.2
geojson==2.5.0
greenlet==0.4.16
idna==2.10
jdcal==1.4.1
Jinja2==2.11.2
jmespath==0.10.0
lml==0.0.9
lxml==4.5.2
MarkupSafe==1.1.1
mistune==0.8.4
monotonic==1.5
openpyxl==3.0.5
orderedset==2.0.1
phonenumbers==8.11.2
pyasn1==0.4.8
pyexcel-ezodf==0.3.4
PyJWT==1.7.1
PyPDF2==1.26.0
python-dateutil==2.8.1
python-json-logger==0.1.11
PyYAML==5.3.1
redis==3.5.3
requests==2.24.0
rsa==4.5
s3transfer==0.3.3
six==1.15.0
smartypants==2.0.1
statsd==3.3.0
texttable==1.6.2
urllib3==1.25.10
webencodings==0.5.1
Werkzeug==1.0.1
WTForms==2.3.3
xlrd==1.2.0
xlwt==1.3.0
Make pyup ignore requirements.txt We don't want pyup.io upgrading sub-dependencies listed in the requirements.txt file since it does it whenever a new version is available regardless of what our application dependencies require. 2018-07-30 16:43:44 +01:00			`# pyup: ignore file`
			`# This file is autogenerated. Do not edit it manually.`
Pin all requirements in requirements.txt The list of top-level dependencies is moved to requirements-app.txt, which is used by `make freeze-requirements` to generate the full list of requirements in requirements.txt. (See alphagov/notifications-api#1938 for details.) 2018-07-10 15:16:14 +01:00			# Run `make freeze-requirements` to update requirements.txt
			`# with package version changes made in requirements-app.txt`

Freeze requirements 2018-10-29 16:40:29 +00:00			`ago==0.0.93`
make freeze requirements 2020-06-18 11:38:52 +01:00			`govuk-bank-holidays==0.8`
make freeze requirements 2020-08-18 09:55:52 +01:00			`humanize==2.6.0`
Freeze requirements 2020-04-29 11:51:08 +01:00			`Flask==1.1.2`
Update flask-wtf from 0.14.2 to 0.14.3 2020-02-10 13:47:05 +00:00			`Flask-WTF==0.14.3`
upgrade flask_login to 0.5.0 flask_login sets a bunch of variables in the session object. We only use one of them, `user_id`. We set that to the user id from the database, and refer to it all over the place. However, in flask_login 0.5.0 they prefix this with an underscore to prevent people accidentally overwriting it etc. So when a user logs in we need to make sure that we set user_id manually so we can still use it. flask_login sets a bunch of variables on the `flask.session` object. However, this session object isn't the one that gets passed in to the request context by flask - that one can only be modified outside of requests from within the session_transaction context manager (see [1]). So, flask_login populates the normal session and then we need to copy all of those values across. We didn't need to do this previously because we already set the `user_id` value on line 20 of tests/__init__.py, but now that flask_login is looking for `_user_id` instead we need to do this properly. [1] https://flask.palletsprojects.com/en/1.1.x/testing/#accessing-and-modifying-sessions 2020-03-06 15:41:13 +00:00			`Flask-Login==0.5.0`
Add link to Bleach bugtracker Explains why we’re using forked version of Weasyprint 2016-12-20 13:43:53 +00:00
Missing requirement 2016-04-27 16:45:50 +01:00			`blinker==1.4`
make freeze requirements 2020-09-01 16:46:25 +01:00			`pyexcel==0.6.4`
Freeze requirements 2019-08-29 13:50:28 +01:00			`pyexcel-io==0.5.20`
make freeze requirements 2020-09-01 16:46:25 +01:00			`pyexcel-xls==0.5.9`
bump requirements 2020-01-21 14:21:48 +00:00			`pyexcel-xlsx==0.5.8`
Freeze requirements 2018-11-27 10:08:26 +00:00			`pyexcel-ods3==0.5.3`
Freeze requirements 2020-05-07 08:13:28 +01:00			`pytz==2020.1`
bump reqs 2020-02-04 17:16:58 +00:00			`gunicorn==20.0.4`
Bump eventlet dnspython had been changed from 1.16.0 to 2.0.0 in a previous commit, but this was not compatible with eventlet 0.25.2. This bumps eventlet to a later version, which has the effect of downgrading dnspython again. 2020-07-31 10:38:44 +01:00			`eventlet==0.26.1`
freeze requirements 2020-08-04 12:13:35 +01:00			`notifications-python-client==5.7.0`
make freeze requirements 2020-09-01 16:46:25 +01:00			`Shapely==1.7.1`
Integrated logging from the utils repo 2016-01-07 15:39:36 +00:00
Add awslogs logging for PaaS 2017-02-14 16:17:30 +00:00			`# PaaS`
			`awscli-cwlogs>=1.4,<1.5`
Upgrade itsdangerous Version 1.1.0 has reverted the breaking change (moving from sha1 to sha256) that was introduced in version 1.0.0. Upgrading now so that we can take advantage of this bug fix: https://github.com/pallets/itsdangerous/issues/46 2020-02-19 13:47:35 +00:00			`itsdangerous==1.1.0`
Update notifications-utils to 30.5.6 This brings in the change to email validation which removes obscure white space from email addresses. 2018-10-29 10:21:04 +00:00
Bump utils to bring in accessibility fix 2020-08-14 16:16:13 +01:00			`git+https://github.com/alphagov/notifications-utils.git@41.0.1#egg=notifications-utils==41.0.1`
bump requirements 2020-01-21 14:21:48 +00:00			`git+https://github.com/alphagov/govuk-frontend-jinja.git@v0.5.1-alpha#egg=govuk-frontend-jinja==0.5.1-alpha`
Pin all requirements in requirements.txt The list of top-level dependencies is moved to requirements-app.txt, which is used by `make freeze-requirements` to generate the full list of requirements in requirements.txt. (See alphagov/notifications-api#1938 for details.) 2018-07-10 15:16:14 +01:00
Revert "Revert "Statsd to prometheus"" 2020-07-01 13:27:12 +01:00			`# gds-metrics requires prometheseus 0.2.0, override that requirement as later versions bring significant performance gains`
			`prometheus-client==0.8.0`
freeze requirements 2020-08-04 12:13:35 +01:00			`gds-metrics==0.2.4`
Revert "Revert "Statsd to prometheus"" 2020-07-01 13:27:12 +01:00
Pin all requirements in requirements.txt The list of top-level dependencies is moved to requirements-app.txt, which is used by `make freeze-requirements` to generate the full list of requirements in requirements.txt. (See alphagov/notifications-api#1938 for details.) 2018-07-10 15:16:14 +01:00			`## The following requirements were added by pip freeze:`
make freeze requirements 2020-09-01 16:46:25 +01:00			`awscli==1.18.129`
Bump utils to 36.9.3 to bring in new version of Bleach 2020-03-31 08:59:45 +01:00			`bleach==3.1.4`
Strip extra newlines from text messages Brings in: - [x] https://github.com/alphagov/notifications-utils/pull/680 2019-12-18 10:33:18 +00:00			`boto3==1.10.38`
make freeze requirements 2020-09-01 16:46:25 +01:00			`botocore==1.17.52`
bump utils 2020-06-18 16:06:18 +01:00			`cachetools==4.1.0`
Import request cache from utils We’ve making the request cache shared code now so we can remove it from this app and refer to the version in utils instead. Delete unused module 2020-06-22 09:39:32 +01:00			`certifi==2020.6.20`
Pin all requirements in requirements.txt The list of top-level dependencies is moved to requirements-app.txt, which is used by `make freeze-requirements` to generate the full list of requirements in requirements.txt. (See alphagov/notifications-api#1938 for details.) 2018-07-10 15:16:14 +01:00			`chardet==3.0.4`
Freeze requirements 2020-04-29 11:51:08 +01:00			`click==7.1.2`
Update flask-wtf from 0.14.2 to 0.14.3 2020-02-10 13:47:05 +00:00			`colorama==0.4.3`
Bump eventlet dnspython had been changed from 1.16.0 to 2.0.0 in a previous commit, but this was not compatible with eventlet 0.25.2. This bumps eventlet to a later version, which has the effect of downgrading dnspython again. 2020-07-31 10:38:44 +01:00			`dnspython==1.16.0`
Pin all requirements in requirements.txt The list of top-level dependencies is moved to requirements-app.txt, which is used by `make freeze-requirements` to generate the full list of requirements in requirements.txt. (See alphagov/notifications-api#1938 for details.) 2018-07-10 15:16:14 +01:00			`docopt==0.6.2`
Bump rest of the packages 2019-08-29 14:47:15 +01:00			`docutils==0.15.2`
Pin all requirements in requirements.txt The list of top-level dependencies is moved to requirements-app.txt, which is used by `make freeze-requirements` to generate the full list of requirements in requirements.txt. (See alphagov/notifications-api#1938 for details.) 2018-07-10 15:16:14 +01:00			`et-xmlfile==1.0.1`
Bump utils to 32.0.1 This updates requirements and brings in the change to preserve trailing semicolons on URLs. 2019-06-03 16:14:46 +01:00			`flask-redis==0.4.0`
frozen reqs 2019-11-11 11:40:09 +00:00			`future==0.18.2`
Add some views for selecting broadcast areas These are just so we have some pages to click through for now. They don’t use real templates, or any of the broadcast stuff from the database. But I think it’s useful to get some skeleton pages in first so that we can see the map etc working in production, then build on that, without having to do it all in one mega PR. For that reason there are two short term things I’ve done in this commit which should be revisited soon: - no tests for the endpoints - data about which areas are selected is stored in the session 2020-07-06 10:53:14 +01:00			`geojson==2.5.0`
Bump utils to 39.4.3 Brings in a bug fix for when a personalisation value is an empty list. 2020-06-09 10:34:32 +01:00			`greenlet==0.4.16`
Freeze requirements 2020-06-30 13:30:54 +01:00			`idna==2.10`
Bump utils to 31.2.5 2019-04-25 11:13:48 +01:00			`jdcal==1.4.1`
fix letter notification status around UTC/BST timezones grr blah blah blah 2020-04-10 11:25:20 +01:00			`Jinja2==2.11.2`
Bump utils to 39.1.0 Allows letters to be previewed with international postage 2020-05-15 12:47:34 +01:00			`jmespath==0.10.0`
bump utils brings in redis 3 2019-01-08 15:00:42 +00:00			`lml==0.0.9`
Bump utils to 40.6.0 This brings in validation for invalid characters in address lines. 2020-07-28 13:43:27 +01:00			`lxml==4.5.2`
Bump utils Brings in: - [ ] https://github.com/alphagov/notifications-utils/pull/592 2019-03-18 14:40:03 +00:00			`MarkupSafe==1.1.1`
bump utils brings in redis 3 2019-01-08 15:00:42 +00:00			`mistune==0.8.4`
Pin all requirements in requirements.txt The list of top-level dependencies is moved to requirements-app.txt, which is used by `make freeze-requirements` to generate the full list of requirements in requirements.txt. (See alphagov/notifications-api#1938 for details.) 2018-07-10 15:16:14 +01:00			`monotonic==1.5`
make freeze requirements 2020-09-01 16:46:25 +01:00			`openpyxl==3.0.5`
Pin all requirements in requirements.txt The list of top-level dependencies is moved to requirements-app.txt, which is used by `make freeze-requirements` to generate the full list of requirements in requirements.txt. (See alphagov/notifications-api#1938 for details.) 2018-07-10 15:16:14 +01:00			`orderedset==2.0.1`
Bump utils to fix bleach security vulnerability 2020-02-25 10:39:50 +00:00			`phonenumbers==8.11.2`
bump reqs utils bump, and a bunch of test dependencies can't bump pytest-xdist as it requires pytest>4 2019-11-18 14:56:56 +00:00			`pyasn1==0.4.8`
Pin all requirements in requirements.txt The list of top-level dependencies is moved to requirements-app.txt, which is used by `make freeze-requirements` to generate the full list of requirements in requirements.txt. (See alphagov/notifications-api#1938 for details.) 2018-07-10 15:16:14 +01:00			`pyexcel-ezodf==0.3.4`
Freeze requirements 2018-12-14 13:11:31 +00:00			`PyJWT==1.7.1`
Pin all requirements in requirements.txt The list of top-level dependencies is moved to requirements-app.txt, which is used by `make freeze-requirements` to generate the full list of requirements in requirements.txt. (See alphagov/notifications-api#1938 for details.) 2018-07-10 15:16:14 +01:00			`PyPDF2==1.26.0`
frozen reqs 2019-11-11 11:40:09 +00:00			`python-dateutil==2.8.1`
Bump utils to 32.0.1 This updates requirements and brings in the change to preserve trailing semicolons on URLs. 2019-06-03 16:14:46 +01:00			`python-json-logger==0.1.11`
Bump utils to 36.9.3 to bring in new version of Bleach 2020-03-31 08:59:45 +01:00			`PyYAML==5.3.1`
Bump utils to 39.4.3 Brings in a bug fix for when a personalisation value is an empty list. 2020-06-09 10:34:32 +01:00			`redis==3.5.3`
make freeze requirements 2020-06-18 11:38:52 +01:00			`requests==2.24.0`
Bump utils to 40.6.0 This brings in validation for invalid characters in address lines. 2020-07-28 13:43:27 +01:00			`rsa==4.5`
Update flask-wtf from 0.14.2 to 0.14.3 2020-02-10 13:47:05 +00:00			`s3transfer==0.3.3`
Bump utils to 39.4.0 Adds delivery estimates for letters posted to Europe or the rest of the world. 2020-05-22 10:43:12 +01:00			`six==1.15.0`
Pin all requirements in requirements.txt The list of top-level dependencies is moved to requirements-app.txt, which is used by `make freeze-requirements` to generate the full list of requirements in requirements.txt. (See alphagov/notifications-api#1938 for details.) 2018-07-10 15:16:14 +01:00			`smartypants==2.0.1`
bump utils brings in redis 3 2019-01-08 15:00:42 +00:00			`statsd==3.3.0`
Bump PyExcel to 0.6.1 0.6.0 has been withdrawn because it contained a bug (which wouldn’t affect us). But we can’t use it now because pip can’t find it to install. So needs upgrading to the next version now. 2020-05-04 11:48:53 +01:00			`texttable==1.6.2`
Bump utils to 40.6.0 This brings in validation for invalid characters in address lines. 2020-07-28 13:43:27 +01:00			`urllib3==1.25.10`
Pin all requirements in requirements.txt The list of top-level dependencies is moved to requirements-app.txt, which is used by `make freeze-requirements` to generate the full list of requirements in requirements.txt. (See alphagov/notifications-api#1938 for details.) 2018-07-10 15:16:14 +01:00			`webencodings==0.5.1`
Update humanize from 1.0.0 to 2.2.0 2020-03-30 14:49:04 +01:00			`Werkzeug==1.0.1`
Bump eventlet dnspython had been changed from 1.16.0 to 2.0.0 in a previous commit, but this was not compatible with eventlet 0.25.2. This bumps eventlet to a later version, which has the effect of downgrading dnspython again. 2020-07-31 10:38:44 +01:00			`WTForms==2.3.3`
Remove WhiteNoise We’re now serving assets from S3 when running on PaaS. So we’ll set the appropriate caching headers there or in Cloudfront. This means that the app no longer needs to serve cache headers, which is what we were using WhiteNoise for. This commits removes WhiteNoise in favour of letting Flask handle the serving of static assets. 2018-12-21 10:40:00 +00:00			`xlrd==1.2.0`
Pin all requirements in requirements.txt The list of top-level dependencies is moved to requirements-app.txt, which is used by `make freeze-requirements` to generate the full list of requirements in requirements.txt. (See alphagov/notifications-api#1938 for details.) 2018-07-10 15:16:14 +01:00			`xlwt==1.3.0`