EnricoMi · EnricoMi · Mar 14, 2023 · Mar 14, 2023 · Mar 14, 2023 · Mar 14, 2023
diff --git a/.github/upgrade-pip-packages.sh b/.github/upgrade-pip-packages.sh
@@ -0,0 +1,13 @@
+#!/bin/bash
+set -euo pipefail
+
+base="$(dirname "$0")"
+
+pip install --upgrade --upgrade-strategy eager -r "$base/../python/requirements-direct.txt" -c "$base/../python/constraints.txt"
+
+pip install pipdeptree
+grep -e "^#" -e ";" "$base/../python/requirements-direct.txt" > "$base/../python/requirements.txt"
+pipdeptree --packages="$(grep -v "^#" "$base/../python/requirements-direct.txt" | sed -e "s/;.*//" -e "s/=.*//g" | paste -s -d ,)" --freeze >> "$base/../python/requirements.txt"
+
+git diff "$base/../python/requirements.txt"
+
diff --git a/.github/workflows/ci-cd.yml b/.github/workflows/ci-cd.yml
@@ -14,6 +14,22 @@ on:
 permissions: {}
 
 jobs:
+  dependencies:
+    name: Test python/requirements.txt
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v3
+      - name: Check requirements.txt against requirements-direct.txt
+        run: |
+          (diff -w python/requirements-direct.txt python/requirements.txt || true) | (! grep -e "^<")
+        shell: bash
+      - name: Check for dependency updates
+        continue-on-error: true
+        run:
+          .github/upgrade-pip-packages.sh
+        shell: bash
+
   test:
     name: Test (python-${{ matrix.python-version }}, ${{ matrix.os }})
     runs-on: ${{ matrix.os }}

diff --git a/python/constraints.txt b/python/constraints.txt
@@ -0,0 +1,2 @@
+# latest version for PyJWT on Windows and macOS and Python 3.6
+PyJWT==2.4.0
diff --git a/python/requirements-direct.txt b/python/requirements-direct.txt
@@ -0,0 +1,9 @@
+# dataclasses does not exist before Python3.7, needed as dependency
+dataclasses;python_version<"3.7"
+humanize==3.14.0
+junitparser==2.8.0
+lxml==4.9.1
+psutil==5.9.4
+PyGithub==1.56
+requests==2.27.1
+urllib3==1.26.13
diff --git a/python/requirements.txt b/python/requirements.txt
@@ -2,8 +2,18 @@
 dataclasses;python_version<"3.7"
 humanize==3.14.0
 junitparser==2.8.0
+  future==0.18.3
 lxml==4.9.1
 psutil==5.9.4
 PyGithub==1.56
-requests==2.27.1
-urllib3==1.26.13
+  Deprecated==1.2.13
+    wrapt==1.15.0
+  PyJWT==2.4.0
+  PyNaCl==1.5.0
+    cffi==1.15.1
+      pycparser==2.21
+  requests==2.27.1
+    certifi==2022.12.7
+    charset-normalizer==2.0.12
+    idna==3.4
+    urllib3==1.26.13
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1,2 @@
		# latest version for PyJWT on Windows and macOS and Python 3.6
		PyJWT==2.4.0