From 7832c862a1e1c00dc60681c911516183f78f4402 Mon Sep 17 00:00:00 2001
From: Chris Hill-Scott <me@quis.cc>
Date: Wed, 2 Jun 2021 15:24:38 +0100
Subject: [PATCH] Pin Flask to less than version 2

Flask 2.0 requires Jinja 3.0

govuk_frontend_jinja is not compatible with Jinja 3.0 yet
---
 requirements.in  |  6 +++---
 requirements.txt | 11 ++++++-----
 2 files changed, 9 insertions(+), 8 deletions(-)

diff --git a/requirements.in b/requirements.in
index 48bd4ecb3..94cc82379 100644
--- a/requirements.in
+++ b/requirements.in
@@ -4,7 +4,7 @@
 ago==0.0.93
 govuk-bank-holidays==0.8
 humanize==3.6.0
-Flask==2.0.1
+Flask==1.1.2  # pyup: <2
 Flask-WTF==0.15.1
 Flask-Login==0.5.0
 
@@ -24,14 +24,14 @@ fido2==0.9.1
 
 # PaaS
 awscli-cwlogs>=1.4,<1.5
-itsdangerous==2.0.1
+itsdangerous==1.1.0  # pyup: <2
 
 git+https://github.com/alphagov/notifications-utils.git@44.2.2#egg=notifications-utils==44.2.2
 git+https://github.com/alphagov/govuk-frontend-jinja.git@v0.5.8-alpha#egg=govuk-frontend-jinja==0.5.8-alpha
 
 # cryptography 3.4+ incorporates Rust code, which isn't supported on PaaS
 # e.g. https://github.com/alphagov/notifications-api/pull/3126
-cryptography==3.4.7
+cryptography<3.4 # pyup: ignore
 
 # gds-metrics requires prometheseus 0.2.0, override that requirement as later versions bring significant performance gains
 # version 0.10.0 introduced exceptions when workers crashed due to deprecating lower case `prometheus_multiproc_dir`.
diff --git a/requirements.txt b/requirements.txt
index c6fc64ce9..83a11ef77 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -37,7 +37,7 @@ click==8.0.1
     # via flask
 colorama==0.4.3
     # via awscli
-cryptography==3.4.7
+cryptography==3.3.2
     # via
     #   -r requirements.in
     #   fido2
@@ -59,7 +59,7 @@ flask-redis==0.4.0
     # via notifications-utils
 flask-wtf==0.15.1
     # via -r requirements.in
-flask==2.0.1
+flask==1.1.2
     # via
     #   -r requirements.in
     #   flask-login
@@ -87,13 +87,13 @@ idna==2.10
     # via requests
 importlib-metadata==4.4.0
     # via click
-itsdangerous==2.0.1
+itsdangerous==1.1.0
     # via
     #   -r requirements.in
     #   flask
     #   flask-wtf
     #   notifications-utils
-jinja2==3.0.1
+jinja2==2.11.3
     # via
     #   flask
     #   govuk-frontend-jinja
@@ -197,6 +197,7 @@ six==1.16.0
     # via
     #   awscli-cwlogs
     #   bleach
+    #   cryptography
     #   eventlet
     #   fido2
     #   govuk-bank-holidays
@@ -215,7 +216,7 @@ urllib3==1.26.5
     #   requests
 webencodings==0.5.1
     # via bleach
-werkzeug==2.0.1
+werkzeug==1.0.1
     # via flask
 wtforms==2.3.3
     # via flask-wtf