2021-11-10 14:05:46 +00:00
|
|
|
#
|
|
|
|
|
# This file is autogenerated by pip-compile with python 3.9
|
|
|
|
|
# To update, run:
|
|
|
|
|
#
|
|
|
|
|
# pip-compile requirements.in
|
|
|
|
|
#
|
2021-10-27 10:58:21 +01:00
|
|
|
alembic==1.7.4
|
2021-11-10 14:05:46 +00:00
|
|
|
# via flask-migrate
|
2021-10-21 14:33:31 +01:00
|
|
|
amqp==5.0.6
|
2021-11-10 14:05:46 +00:00
|
|
|
# via kombu
|
2021-05-10 18:05:37 +01:00
|
|
|
attrs==21.2.0
|
2021-11-10 14:05:46 +00:00
|
|
|
# via jsonschema
|
2021-10-27 10:58:21 +01:00
|
|
|
awscli==1.21.4
|
2021-11-10 14:05:46 +00:00
|
|
|
# via
|
|
|
|
|
# awscli-cwlogs
|
|
|
|
|
# notifications-utils
|
|
|
|
|
awscli-cwlogs==1.4.6
|
|
|
|
|
# via -r requirements.in
|
2020-08-18 09:57:54 +01:00
|
|
|
bcrypt==3.2.0
|
2021-11-10 14:05:46 +00:00
|
|
|
# via flask-bcrypt
|
|
|
|
|
beautifulsoup4==4.9.3
|
|
|
|
|
# via -r requirements.in
|
2021-10-21 14:33:31 +01:00
|
|
|
billiard==3.6.4.0
|
2021-11-10 14:05:46 +00:00
|
|
|
# via celery
|
2021-10-29 11:45:29 +01:00
|
|
|
bleach==4.1.0
|
2021-11-10 14:05:46 +00:00
|
|
|
# via notifications-utils
|
2020-04-20 15:59:47 +01:00
|
|
|
blinker==1.4
|
2021-11-10 14:05:46 +00:00
|
|
|
# via gds-metrics
|
2021-10-27 10:58:21 +01:00
|
|
|
boto3==1.19.4
|
2021-11-15 11:12:33 +00:00
|
|
|
# via notifications-utils
|
2021-10-27 10:58:21 +01:00
|
|
|
botocore==1.22.4
|
2021-11-10 14:05:46 +00:00
|
|
|
# via
|
|
|
|
|
# awscli
|
|
|
|
|
# boto3
|
|
|
|
|
# s3transfer
|
|
|
|
|
cachetools==4.2.1
|
|
|
|
|
# via
|
|
|
|
|
# -r requirements.in
|
|
|
|
|
# notifications-utils
|
2021-11-15 11:12:33 +00:00
|
|
|
celery[sqs]==5.2.0
|
2021-11-10 14:05:46 +00:00
|
|
|
# via -r requirements.in
|
2021-10-27 10:58:21 +01:00
|
|
|
certifi==2021.10.8
|
2021-08-18 17:22:35 +01:00
|
|
|
# via
|
|
|
|
|
# pyproj
|
|
|
|
|
# requests
|
2021-11-10 14:05:46 +00:00
|
|
|
cffi==1.14.5
|
|
|
|
|
# via
|
|
|
|
|
# -r requirements.in
|
|
|
|
|
# bcrypt
|
2021-10-27 10:58:21 +01:00
|
|
|
charset-normalizer==2.0.7
|
2021-11-10 14:05:46 +00:00
|
|
|
# via requests
|
2021-11-15 11:12:33 +00:00
|
|
|
click==8.0.3
|
2021-11-10 14:05:46 +00:00
|
|
|
# via
|
|
|
|
|
# celery
|
|
|
|
|
# click-datetime
|
|
|
|
|
# click-didyoumean
|
|
|
|
|
# click-plugins
|
|
|
|
|
# click-repl
|
|
|
|
|
# flask
|
|
|
|
|
click-datetime==0.2
|
|
|
|
|
# via -r requirements.in
|
2021-10-28 11:43:58 +01:00
|
|
|
click-didyoumean==0.3.0
|
2021-11-10 14:05:46 +00:00
|
|
|
# via celery
|
2021-10-28 11:43:58 +01:00
|
|
|
click-plugins==1.1.1
|
2021-11-10 14:05:46 +00:00
|
|
|
# via celery
|
2021-10-28 11:43:58 +01:00
|
|
|
click-repl==0.2.0
|
2021-11-10 14:05:46 +00:00
|
|
|
# via celery
|
2020-02-12 15:30:02 +00:00
|
|
|
colorama==0.4.3
|
2021-11-10 14:05:46 +00:00
|
|
|
# via awscli
|
2020-07-31 10:36:09 +01:00
|
|
|
dnspython==1.16.0
|
2021-11-10 14:05:46 +00:00
|
|
|
# via eventlet
|
|
|
|
|
docopt==0.6.2
|
2021-12-14 13:47:38 +00:00
|
|
|
# via notifications-python-client
|
2019-09-04 10:55:22 +01:00
|
|
|
docutils==0.15.2
|
2021-11-10 14:05:46 +00:00
|
|
|
# via awscli
|
2021-12-14 13:47:38 +00:00
|
|
|
eventlet==0.30.2
|
2021-11-10 14:05:46 +00:00
|
|
|
# via -r requirements.in
|
|
|
|
|
flask==1.1.2
|
|
|
|
|
# via
|
|
|
|
|
# -r requirements.in
|
|
|
|
|
# flask-bcrypt
|
|
|
|
|
# flask-marshmallow
|
|
|
|
|
# flask-migrate
|
|
|
|
|
# flask-redis
|
|
|
|
|
# gds-metrics
|
|
|
|
|
# notifications-utils
|
|
|
|
|
flask-bcrypt==0.7.1
|
|
|
|
|
# via -r requirements.in
|
|
|
|
|
flask-marshmallow==0.14.0
|
|
|
|
|
# via -r requirements.in
|
|
|
|
|
flask-migrate==2.7.0
|
|
|
|
|
# via -r requirements.in
|
2019-06-03 16:08:19 +01:00
|
|
|
flask-redis==0.4.0
|
2021-11-10 14:05:46 +00:00
|
|
|
# via notifications-utils
|
|
|
|
|
flask-sqlalchemy @ git+https://github.com/mitsuhiko/flask-sqlalchemy.git@500e732dd1b975a56ab06a46bd1a20a21e682262
|
|
|
|
|
# via
|
|
|
|
|
# -r requirements.in
|
|
|
|
|
# flask-migrate
|
|
|
|
|
gds-metrics==0.2.4
|
|
|
|
|
# via -r requirements.in
|
2020-07-28 14:43:05 +01:00
|
|
|
geojson==2.5.0
|
2021-11-10 14:05:46 +00:00
|
|
|
# via notifications-utils
|
2021-09-21 11:19:46 +01:00
|
|
|
govuk-bank-holidays==0.10
|
2021-11-10 14:05:46 +00:00
|
|
|
# via notifications-utils
|
2021-10-27 10:58:21 +01:00
|
|
|
greenlet==1.1.2
|
2021-11-10 14:05:46 +00:00
|
|
|
# via
|
|
|
|
|
# eventlet
|
|
|
|
|
# sqlalchemy
|
|
|
|
|
gunicorn==20.1.0
|
|
|
|
|
# via -r requirements.in
|
2021-10-27 10:58:21 +01:00
|
|
|
idna==3.3
|
2021-11-10 14:05:46 +00:00
|
|
|
# via requests
|
|
|
|
|
iso8601==0.1.14
|
|
|
|
|
# via -r requirements.in
|
|
|
|
|
itsdangerous==1.1.0
|
|
|
|
|
# via
|
|
|
|
|
# -r requirements.in
|
|
|
|
|
# flask
|
|
|
|
|
# notifications-utils
|
|
|
|
|
jinja2==3.0.2
|
|
|
|
|
# via
|
|
|
|
|
# flask
|
|
|
|
|
# notifications-utils
|
2020-05-22 10:29:16 +01:00
|
|
|
jmespath==0.10.0
|
2021-11-10 14:05:46 +00:00
|
|
|
# via
|
|
|
|
|
# boto3
|
|
|
|
|
# botocore
|
|
|
|
|
jsonschema==3.2.0
|
|
|
|
|
# via -r requirements.in
|
2021-11-15 11:12:33 +00:00
|
|
|
kombu==5.2.1
|
2021-11-10 14:05:46 +00:00
|
|
|
# via celery
|
2021-12-14 13:47:38 +00:00
|
|
|
lxml==4.7.1
|
2021-11-10 14:05:46 +00:00
|
|
|
# via -r requirements.in
|
|
|
|
|
mako==1.1.5
|
|
|
|
|
# via alembic
|
|
|
|
|
markupsafe==2.0.1
|
|
|
|
|
# via
|
|
|
|
|
# jinja2
|
|
|
|
|
# mako
|
|
|
|
|
marshmallow==2.21.0
|
|
|
|
|
# via
|
|
|
|
|
# -r requirements.in
|
|
|
|
|
# flask-marshmallow
|
|
|
|
|
# marshmallow-sqlalchemy
|
|
|
|
|
marshmallow-sqlalchemy==0.23.1
|
|
|
|
|
# via -r requirements.in
|
2019-01-08 14:15:20 +00:00
|
|
|
mistune==0.8.4
|
2021-11-10 14:05:46 +00:00
|
|
|
# via notifications-utils
|
|
|
|
|
notifications-python-client==6.0.2
|
|
|
|
|
# via -r requirements.in
|
2022-02-04 10:46:02 +00:00
|
|
|
notifications-utils @ git+https://github.com/alphagov/notifications-utils.git@53.0.0
|
2021-11-10 14:05:46 +00:00
|
|
|
# via -r requirements.in
|
2020-12-07 14:28:17 +00:00
|
|
|
orderedset==2.0.3
|
2021-11-10 14:05:46 +00:00
|
|
|
# via notifications-utils
|
2021-07-07 17:35:15 +01:00
|
|
|
packaging==21.0
|
2021-11-10 14:05:46 +00:00
|
|
|
# via bleach
|
2021-10-27 10:58:21 +01:00
|
|
|
phonenumbers==8.12.36
|
2021-11-10 14:05:46 +00:00
|
|
|
# via notifications-utils
|
|
|
|
|
prometheus-client==0.10.1
|
|
|
|
|
# via
|
|
|
|
|
# -r requirements.in
|
|
|
|
|
# gds-metrics
|
2021-10-28 11:43:58 +01:00
|
|
|
prompt-toolkit==3.0.21
|
2021-11-10 14:05:46 +00:00
|
|
|
# via click-repl
|
|
|
|
|
psycopg2-binary==2.8.6
|
|
|
|
|
# via -r requirements.in
|
2019-11-18 15:48:38 +00:00
|
|
|
pyasn1==0.4.8
|
2021-11-10 14:05:46 +00:00
|
|
|
# via rsa
|
2020-03-09 15:29:18 +00:00
|
|
|
pycparser==2.20
|
2021-11-10 14:05:46 +00:00
|
|
|
# via cffi
|
|
|
|
|
pyjwt==2.0.1
|
|
|
|
|
# via
|
|
|
|
|
# -r requirements.in
|
|
|
|
|
# notifications-python-client
|
2021-10-27 10:58:21 +01:00
|
|
|
pyparsing==3.0.1
|
2021-11-10 14:05:46 +00:00
|
|
|
# via packaging
|
|
|
|
|
pypdf2==1.26.0
|
|
|
|
|
# via notifications-utils
|
2021-08-18 17:22:35 +01:00
|
|
|
pyproj==3.2.1
|
|
|
|
|
# via notifications-utils
|
2021-07-07 17:35:15 +01:00
|
|
|
pyrsistent==0.18.0
|
2021-11-10 14:05:46 +00:00
|
|
|
# via jsonschema
|
2021-07-19 14:27:16 +03:00
|
|
|
python-dateutil==2.8.2
|
2021-11-10 14:05:46 +00:00
|
|
|
# via
|
|
|
|
|
# awscli-cwlogs
|
|
|
|
|
# botocore
|
2021-07-27 15:17:47 +01:00
|
|
|
python-json-logger==2.0.2
|
2021-11-10 14:05:46 +00:00
|
|
|
# via notifications-utils
|
2021-10-27 10:58:21 +01:00
|
|
|
pytz==2021.3
|
2021-11-10 14:05:46 +00:00
|
|
|
# via
|
|
|
|
|
# celery
|
|
|
|
|
# notifications-utils
|
|
|
|
|
pyyaml==5.4.1
|
|
|
|
|
# via
|
|
|
|
|
# awscli
|
|
|
|
|
# notifications-utils
|
2020-06-09 10:34:44 +01:00
|
|
|
redis==3.5.3
|
2021-11-10 14:05:46 +00:00
|
|
|
# via flask-redis
|
2021-07-19 14:27:16 +03:00
|
|
|
requests==2.26.0
|
2021-11-10 14:05:46 +00:00
|
|
|
# via
|
|
|
|
|
# awscli-cwlogs
|
|
|
|
|
# govuk-bank-holidays
|
|
|
|
|
# notifications-python-client
|
|
|
|
|
# notifications-utils
|
|
|
|
|
rfc3987==1.3.8
|
|
|
|
|
# via -r requirements.in
|
2021-04-19 11:36:04 +01:00
|
|
|
rsa==4.7.2
|
2021-11-10 14:05:46 +00:00
|
|
|
# via awscli
|
2021-07-19 14:27:16 +03:00
|
|
|
s3transfer==0.5.0
|
2021-11-10 14:05:46 +00:00
|
|
|
# via
|
|
|
|
|
# awscli
|
|
|
|
|
# boto3
|
|
|
|
|
shapely==1.8.0
|
|
|
|
|
# via notifications-utils
|
2021-05-10 18:05:37 +01:00
|
|
|
six==1.16.0
|
2021-11-10 14:05:46 +00:00
|
|
|
# via
|
|
|
|
|
# awscli-cwlogs
|
|
|
|
|
# bcrypt
|
|
|
|
|
# bleach
|
|
|
|
|
# click-repl
|
|
|
|
|
# eventlet
|
|
|
|
|
# flask-marshmallow
|
|
|
|
|
# jsonschema
|
|
|
|
|
# python-dateutil
|
Pin all application requirements in requirements.txt
The list of top-level dependencies is moved to requirements-app.txt,
which is used by `make freeze-requirements` to generate the full
list of requirements in requirements.txt.
This is based on alphagov/digitalmarketplace-api#615, so rationale
from that PR applies here.
We had a problem with unpinned packages on new deployments leading
to failed tests (e.g. alphagov/notifications-admin#2144) which is
why we're implementing this now.
After re-evaluating pipenv again, this still seems like the least
disruptive approach:
* pyup.io has experimental support for Pipfile, but doesn't respect
version ranges or updating hashes in the lock file
* CloudFoundry buildpack recognizes and supports Pipfiles out of the
box, but the support is relatively new. For example until recently
CF would install dev packages during deployment. It's also based on
generating a requirements file from the Pipfile, which doesn't
properly support pinning VCS dependencies (eg it doesn't set the
#egg= version, meaning pip will not upgrade the package if it's
already installed).
* pipenv has a strict dependency resolution algorithm, which doesn't
appear to be well documented and can cause some unexpected failures.
For example, pipenv doesn't seem to be able to install `awscli-cwlogs`
package at all, believing it to have a version conflict for `botocore`
(which it doesn't list as a direct dependency) while neither `pip` nor
`pip-tools` highlight any issues with it.
* While trying out `pipenv install` on our list of dependencies it would
regularly fail to install utils with a "Will try again." message.
While the installation succeeds after a retry, this doesn't inspire
confidence.
* The switch to Pipfile and pipenv-managed virtualenvs requires a series
of changes to `make` targets and scripts - replacing `pip install` with
`pipenv`, removing references to requirements files and prefixing
commands with `pipenv run`. While it's likely to simplify the overall
process of managing dependencies, it would require time to properly
implement across our applications and environments (Jenkins, PaaS,
docker containers, and dev machines).
2018-07-10 14:50:30 +01:00
|
|
|
smartypants==2.0.1
|
2021-11-10 14:05:46 +00:00
|
|
|
# via notifications-utils
|
2021-03-24 11:09:07 +00:00
|
|
|
soupsieve==2.2.1
|
2021-11-10 14:05:46 +00:00
|
|
|
# via beautifulsoup4
|
|
|
|
|
sqlalchemy==1.4.10
|
|
|
|
|
# via
|
|
|
|
|
# -r requirements.in
|
|
|
|
|
# alembic
|
|
|
|
|
# marshmallow-sqlalchemy
|
2019-01-08 14:15:20 +00:00
|
|
|
statsd==3.3.0
|
2021-11-10 14:05:46 +00:00
|
|
|
# via notifications-utils
|
|
|
|
|
strict-rfc3339==0.7
|
|
|
|
|
# via -r requirements.in
|
2021-09-21 11:19:46 +01:00
|
|
|
urllib3==1.26.7
|
2021-11-10 14:05:46 +00:00
|
|
|
# via
|
|
|
|
|
# botocore
|
|
|
|
|
# requests
|
2021-10-28 11:43:58 +01:00
|
|
|
vine==5.0.0
|
2021-11-10 14:05:46 +00:00
|
|
|
# via
|
|
|
|
|
# amqp
|
|
|
|
|
# celery
|
|
|
|
|
# kombu
|
2021-10-28 11:43:58 +01:00
|
|
|
wcwidth==0.2.5
|
2021-11-10 14:05:46 +00:00
|
|
|
# via prompt-toolkit
|
Pin all application requirements in requirements.txt
The list of top-level dependencies is moved to requirements-app.txt,
which is used by `make freeze-requirements` to generate the full
list of requirements in requirements.txt.
This is based on alphagov/digitalmarketplace-api#615, so rationale
from that PR applies here.
We had a problem with unpinned packages on new deployments leading
to failed tests (e.g. alphagov/notifications-admin#2144) which is
why we're implementing this now.
After re-evaluating pipenv again, this still seems like the least
disruptive approach:
* pyup.io has experimental support for Pipfile, but doesn't respect
version ranges or updating hashes in the lock file
* CloudFoundry buildpack recognizes and supports Pipfiles out of the
box, but the support is relatively new. For example until recently
CF would install dev packages during deployment. It's also based on
generating a requirements file from the Pipfile, which doesn't
properly support pinning VCS dependencies (eg it doesn't set the
#egg= version, meaning pip will not upgrade the package if it's
already installed).
* pipenv has a strict dependency resolution algorithm, which doesn't
appear to be well documented and can cause some unexpected failures.
For example, pipenv doesn't seem to be able to install `awscli-cwlogs`
package at all, believing it to have a version conflict for `botocore`
(which it doesn't list as a direct dependency) while neither `pip` nor
`pip-tools` highlight any issues with it.
* While trying out `pipenv install` on our list of dependencies it would
regularly fail to install utils with a "Will try again." message.
While the installation succeeds after a retry, this doesn't inspire
confidence.
* The switch to Pipfile and pipenv-managed virtualenvs requires a series
of changes to `make` targets and scripts - replacing `pip install` with
`pipenv`, removing references to requirements files and prefixing
commands with `pipenv run`. While it's likely to simplify the overall
process of managing dependencies, it would require time to properly
implement across our applications and environments (Jenkins, PaaS,
docker containers, and dev machines).
2018-07-10 14:50:30 +01:00
|
|
|
webencodings==0.5.1
|
2021-11-10 14:05:46 +00:00
|
|
|
# via bleach
|
|
|
|
|
werkzeug==2.0.2
|
|
|
|
|
# via
|
|
|
|
|
# -r requirements.in
|
|
|
|
|
# flask
|
|
|
|
|
|
|
|
|
|
# The following packages are considered to be unsafe in a requirements file:
|
|
|
|
|
# setuptools
|