Updated deps accoring to the docs guidelines.

closes pulp#1093
ipanova · Oct 3, 2022 · 66a62a2 · 66a62a2
1 parent 9eafbbd
commit 66a62a2
Show file tree

Hide file tree

Showing 3 changed files with 24 additions and 4 deletions.
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -0,0 +1,9 @@
+version: 2
+updates:
+- package-ecosystem: pip
+  directory: "/"
+  schedule:
+    interval: weekly
+  open-pull-requests-limit: 10
+  commit-message:
+    prefix: "[noissue]"
diff --git a/CHANGES/1093.misc b/CHANGES/1093.misc
@@ -0,0 +1 @@
+Adds upper and lower bound to dependencies. Enable dependabot.
diff --git a/requirements.txt b/requirements.txt
@@ -1,6 +1,16 @@
 # remember to also update unittest_requirements.txt when updating this file
+aiohttp>=3.8.1,<=3.8.3
+cryptography>=38.0.1<=38.0.1
+Django~=3.2.15  # LTS version, switch only if we have a compelling reason to
+djangorestframework>=3.13.1,<=3.14.0
+django-filter>=22.1,<=22.1
+django-import-export>=2.9,<=2.9.0
+drf-access-policy>=1.1.2,<=1.1.2
+drf-spectacular==0.24.2  # We monkeypatch this so we need a very narrow requirement string
+ecdsa>=0.14,<=0.18.0
+jsonschema>=4.4,<4.17
 pulpcore>=3.20.0.dev,<3.25
-ecdsa~=0.14
-pyjwkest~=1.4
-pyjwt[crypto]~=2.4
-jsonschema~=4.4
+pyjwkest>=1.4,<=1.4.2
+pyjwt[crypto]>=2.4,<=2.5
+python-gnupg>=0.5,<=0.5.0
+setuptools>=39.2,<65.5.0
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1 @@
		Adds upper and lower bound to dependencies. Enable dependabot.