Pin PyJWT to 2.4.0 via constraints file

EnricoMi · Mar 14, 2023 · 908fcc0 · 908fcc0
1 parent dd0a084
commit 908fcc0
Show file tree

Hide file tree

Showing 3 changed files with 4 additions and 2 deletions.
diff --git a/.github/upgrade-pip-packages.sh b/.github/upgrade-pip-packages.sh
@@ -3,7 +3,7 @@ set -euo pipefail
 
 base="$(dirname "$0")"
 
-pip install --upgrade --upgrade-strategy eager -r "$base/../python/requirements-direct.txt"
+pip install --upgrade --upgrade-strategy eager -r "$base/../python/requirements-direct.txt" -c "$base/../python/constraints.txt"
 
 pip install pipdeptree
 grep -e "^#" -e ";" "$base/../python/requirements-direct.txt" > "$base/../python/requirements.txt"

diff --git a/python/constraints.txt b/python/constraints.txt
@@ -0,0 +1,2 @@
+# latest version for PyJWT on Windows and macOS and Python 3.6
+PyJWT==2.4.0
diff --git a/python/requirements.txt b/python/requirements.txt
@@ -8,7 +8,7 @@ psutil==5.9.4
 PyGithub==1.56
   Deprecated==1.2.13
     wrapt==1.15.0
-  PyJWT==2.6.0
+  PyJWT==2.4.0
   PyNaCl==1.5.0
     cffi==1.15.1
       pycparser==2.21
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1,2 @@
		# latest version for PyJWT on Windows and macOS and Python 3.6
		PyJWT==2.4.0