bookwyrm/requirements.txt

aiohttp==3.9.4
bleach==6.1.0
boto3==1.34.74
bw-file-resubmit==0.6.0rc2
celery==5.3.6
colorthief==0.2.1
Django==4.2.11
django-celery-beat==2.6.0
django-compressor==4.4
django-csp==3.8
django-imagekit==5.0.0
django-model-utils==4.4.0
django-oauth-toolkit==2.3.0
django-pgtrigger==4.11.0
django-sass-processor==1.4
django-storages==1.14.2
django-storages[azure]
environs==11.0.0
flower==2.0.1
gunicorn==20.0.4
packaging==21.3
protobuf==3.20.*
pytz>=2022.7
hiredis==2.3.2
libsass==0.23.0
Markdown==3.6
opentelemetry-api==1.24.0
opentelemetry-exporter-otlp-proto-grpc==1.24.0
opentelemetry-instrumentation-celery==0.45b0
opentelemetry-instrumentation-django==0.45b0
opentelemetry-instrumentation-psycopg2==0.45b0
opentelemetry-sdk==1.24.0
Pillow==10.3.0
pilkit>=3.0 # dependency of django-imagekit, 2.0 is incompatible with Pillow>=10
psycopg2==2.9.9
pycryptodome==3.20.0
pyotp==2.9.0
python-dateutil==2.9.0.post0
qrcode==7.4.2
redis==5.0.3
requests==2.32.0
responses==0.25.0
s3-tar==0.1.13

# Indirect dependencies with version constraints for security fixes
grpcio>=1.57.0
setuptools>=65.5.1
tornado>=6.3.3
Bump aiohttp from 3.9.2 to 3.9.4 Bumps [aiohttp](https://github.com/aio-libs/aiohttp) from 3.9.2 to 3.9.4. - [Release notes](https://github.com/aio-libs/aiohttp/releases) - [Changelog](https://github.com/aio-libs/aiohttp/blob/master/CHANGES.rst) - [Commits](https://github.com/aio-libs/aiohttp/compare/v3.9.2...v3.9.4) --- updated-dependencies: - dependency-name: aiohttp dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> 2024-04-18 15:51:34 +00:00			`aiohttp==3.9.4`
Update bleach to 6.1.0 2024-04-01 18:30:53 +02:00			`bleach==6.1.0`
Update boto3 to 1.34.74 2024-03-29 22:28:50 +01:00			`boto3==1.34.74`
swap out django-file-resubmit - we decided to fork it, so this now uses the inaugural RC release of bw-file-resubmit (will need to be adjusted once we're confident it's ok to push a full release) - I was accidentally using the wrong widget lol 2023-11-05 16:34:24 +11:00			`bw-file-resubmit==0.6.0rc2`
Update celery to 5.3.6 2024-04-01 18:33:59 +02:00			`celery==5.3.6`
Update 2021-05-25 23:04:28 +02:00			`colorthief==0.2.1`
Upgrade Django to 4.2 - https://docs.djangoproject.com/en/5.0/releases/4.0/ - https://docs.djangoproject.com/en/5.0/releases/4.1/ - https://docs.djangoproject.com/en/5.0/releases/4.2/ 2024-03-29 20:23:25 +01:00			`Django==4.2.11`
Update django-celery-beat to 2.6.0 2024-03-29 22:30:34 +01:00			`django-celery-beat==2.6.0`
Upgrade django-compressor to 4.4 2024-03-02 16:04:37 -08:00			`django-compressor==4.4`
Update django-csp to 3.8 2024-03-29 22:32:04 +01:00			`django-csp==3.8`
Update django-imagekit to 5.0.0 2024-03-29 22:34:52 +01:00			`django-imagekit==5.0.0`
Update django-model-utils to 4.4.0 2024-03-29 22:36:11 +01:00			`django-model-utils==4.4.0`
Merge branch 'main' into feat/api/oauth 2024-03-31 12:41:12 -07:00			`django-oauth-toolkit==2.3.0`
Upgade django-pgtrigger to 4.11 2024-03-17 21:46:34 -03:00			`django-pgtrigger==4.11.0`
Update django-sass-processor to 1.4 2024-03-29 22:41:19 +01:00			`django-sass-processor==1.4`
Update django-storages to 1.14.2 The problem that boto3 closes files has been worked around in django-storages. 2024-03-29 22:13:09 +01:00			`django-storages==1.14.2`
Alphabetize requirements.txt Alphabetize requirements.txt for developer convenience; this helps to find duplicates and unnecessarily-pinned subdependencies, as well as making the file easier to read and use. 2024-03-02 15:41:06 -08:00			`django-storages[azure]`
Update environs to 11.0.0 2024-03-29 21:56:39 +01:00			`environs==11.0.0`
flower 2.0.1 fixes a few link bugs (particularly for favicon) 2024-03-29 12:07:52 +01:00			`flower==2.0.1`
Use gunicorn as production runner 2021-01-05 19:28:13 -08:00			`gunicorn==20.0.4`
Merge branch 'main' into production 2024-03-25 16:11:26 -07:00			`packaging==21.3`
Updates and fixes opentelemetry install 2022-08-04 11:05:18 -07:00			`protobuf==3.20.*`
Alphabetize requirements.txt Alphabetize requirements.txt for developer convenience; this helps to find duplicates and unnecessarily-pinned subdependencies, as well as making the file easier to read and use. 2024-03-02 15:41:06 -08:00			`pytz>=2022.7`
Switch from django-redis to the built-in Redis cache backend 2024-04-01 22:07:01 +02:00			`hiredis==2.3.2`
Update libsass to 0.23.0 2024-03-29 22:41:56 +01:00			`libsass==0.23.0`
Update Markdown to 3.6 2024-04-01 18:36:12 +02:00			`Markdown==3.6`
Update opentelemetry dependencies 2024-03-29 22:45:42 +01:00			`opentelemetry-api==1.24.0`
			`opentelemetry-exporter-otlp-proto-grpc==1.24.0`
			`opentelemetry-instrumentation-celery==0.45b0`
			`opentelemetry-instrumentation-django==0.45b0`
			`opentelemetry-instrumentation-psycopg2==0.45b0`
			`opentelemetry-sdk==1.24.0`
Bump pillow from 10.2.0 to 10.3.0 Bumps [pillow](https://github.com/python-pillow/Pillow) from 10.2.0 to 10.3.0. - [Release notes](https://github.com/python-pillow/Pillow/releases) - [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst) - [Commits](https://github.com/python-pillow/Pillow/compare/10.2.0...10.3.0) --- updated-dependencies: - dependency-name: pillow dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> 2024-04-03 16:45:11 +00:00			`Pillow==10.3.0`
Change pilkit constraint to the version that does work 2024-04-11 14:45:13 +02:00			`pilkit>=3.0 # dependency of django-imagekit, 2.0 is incompatible with Pillow>=10`
Update psycopg to 2.9.9 2024-04-01 15:36:22 +02:00			`psycopg2==2.9.9`
Update pycryptodome to 3.20.0 2024-03-29 22:57:37 +01:00			`pycryptodome==3.20.0`
Update pyotp to 2.9.0 2024-03-29 22:58:29 +01:00			`pyotp==2.9.0`
Update python-dateutil to 2.9.0.post0 2024-03-29 23:01:17 +01:00			`python-dateutil==2.9.0.post0`
Update qrcode to 7.4.2 2024-04-01 20:53:19 +02:00			`qrcode==7.4.2`
Update redis-py to 5.0.3 2024-04-01 18:39:28 +02:00			`redis==5.0.3`
--- updated-dependencies: - dependency-name: requests dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> 2024-05-21 05:41:48 +00:00			`requests==2.32.0`
Update responses to 0.25.0 2024-04-01 20:32:06 +02:00			`responses==0.25.0`
initial work on fixing user exports with s3 - custom storages - tar.gz within bucket using s3_tar - slightly changes export directory structure - major problems still outstanding re delivering s3 files to end users 2024-01-14 12:14:44 +11:00			`s3-tar==0.1.13`
Group version constraints for indirect dependencies and change to >= 2024-04-01 19:11:27 +02:00
			`# Indirect dependencies with version constraints for security fixes`
			`grpcio>=1.57.0`
			`setuptools>=65.5.1`
			`tornado>=6.3.3`