pin all requirements, fixes #353 (#356)

* pin all requirements, fixes #353

* remove old requirements.txt

* more specific about dev requirements

* more specific about dev requirements

* actually list the dev dependencies

* pin in requirements/dev.txt too so tox works

* docker wip

* no need for --pre in tox

Dockerfile

@@ -12,8 +12,7 @@ WORKDIR /app
 
 RUN \
     make virtualenv && \
-    .venv/bin/pip install --constraint jobs/requirements.txt jobs/ && \
-    .venv/bin/pip freeze | grep -v -- 'buildhub' > dependencies.txt
+    .venv/bin/pip install -r jobs/requirements/default.txt -c jobs/requirements/constraints.txt
 
 RUN groupadd -g 10001 app && \
     useradd -M -u 10001 -g 10001 -G app -d /app -s /sbin/nologin app

README.md

@@ -2,7 +2,7 @@
 
 [![Build Status](https://travis-ci.org/mozilla-services/buildhub.svg?branch=master)](https://travis-ci.org/mozilla-services/buildhub)
 
-*Buildhub* aims to provide a public database of comprehensive information about releases and builds.
+_Buildhub_ aims to provide a public database of comprehensive information about releases and builds.
 
 * [Online catalog](https://mozilla-services.github.io/buildhub/)
 * [Web API documentation](https://buildhub.readthedocs.io)
@@ -11,6 +11,26 @@
 
 Apache 2
 
+## Development
+
+1. Create a `virtualenv` based on Python 3.6
+2. Install all the dependencies:
+
+```sh
+pip install -r jobs/requirements/default.txt -r jobs/requirements/dev.txt -c jobs/requirements/constraints.txt
+```
+
+To run tests, install `tox` first: `pip install tox`. Now you can run tests:
+
+```sh
+# To run the functiona unit tests
+tox -e py36
+# To check for linting
+tox -e flake8
+```
+
+TODO: Wanna mention how to run the unit tests without the functional part.
+
 ## Releasing
 
 We don't use `zest.releaser` right now because of some problems with
@@ -22,7 +42,6 @@ The current procedure is:
 
 * Bump version in `jobs/setup.py`
 * Update the release date in `jobs/CHANGELOG.rst`
-* `cd jobs && make build-requirements`
 * `git commit -am "Bump x.y.z"`
 * Open PR, wait for it to become green
 * Merge PR

bin/run.sh

@@ -21,8 +21,8 @@ case $1 in
     ;;
   test)
     python3 -m venv /tmp/tests
-    /tmp/tests/bin/pip install --constraint dependencies.txt jobs/
-    /tmp/tests/bin/pip install -r jobs/dev-requirements.txt
+    /tmp/tests/bin/pip install -e jobs/
+    /tmp/tests/bin/pip install -r jobs/requirements/default.txt -r jobs/requirements/dev.txt -c jobs/requirements/constraints.txt
     /tmp/tests/bin/py.test --ignore=jobs/tests/test_lamdba_s3_event_functional.py --override-ini="cache_dir=/tmp/tests" jobs/tests
     ;;
   lambda.zip)
@@ -38,6 +38,6 @@ case $1 in
     latest-inventory-to-kinto ${@:2}
     ;;
   *)
-    usage
+    exec "$@"
     ;;
 esac

jobs/requirements/constraints.txt

@@ -0,0 +1,170 @@
+requests==2.18.4 \
+    --hash=sha256:6a1b267aa90cac58ac3a765d067950e7dbbf75b1da07e895d1f594193a40a38b \
+    --hash=sha256:9c443e7324ba5b85070c4a818ade28bfabedf16ea10206da1132edaa6dda237e
+packaging==16.8 \
+    --hash=sha256:99276dc6e3a7851f32027a68f1095cd3f77c148091b092ea867a351811cfe388 \
+    --hash=sha256:5d50835fdf0a7edf0b55e311b7c887786504efea1177abd7e69329a8e5ea619e
+botocore==1.7.40 \
+    --hash=sha256:2b89030441341d4683d218b499c892b20fb812207a20fbea5b2568dbbb6699ac \
+    --hash=sha256:5d75ecccb304dd1e4a73a6cbe999225dd000949d505f94643aa3691f80ba3c73
+wrapt==1.10.11 \
+    --hash=sha256:d4d560d479f2c21e1b5443bbd15fe7ec4b37fe7e53d335d3b9b0a7b1226fe3c6
+multidict==4.1.0 \
+    --hash=sha256:0fd4d255adcbab3341d64a2fff5acce23409e57bb94e626485dea3db70ddc35e \
+    --hash=sha256:93f1af99bbe75c854370460a60823d6726f9af2196818a64346000d02e074ed7 \
+    --hash=sha256:65546242d0c481c0daf0ef20c1be81c075fb763c5f4346f18f748b422fc40f32 \
+    --hash=sha256:0462372fc74e4c061335118a4a5992b9a618d6c584b028ef03cf3e9b88a960e2 \
+    --hash=sha256:63663541d395ffe4d51a3c021467d0a7b46c965b63fa1646cb46e2e2f1f36415 \
+    --hash=sha256:84a1cb5320f1494cd444ca3bd09ddba2e0af0cb210f9263bcf17357ab22671a1 \
+    --hash=sha256:241c11614f64535e213ea143efa8b7e598793256601fc795e77075bdfa54f5d6 \
+    --hash=sha256:ea8a18ea02bf84981ec93faded773a866554666f13955c92139127892c4bb45c \
+    --hash=sha256:b46ec31bb7729eaa678a3bb1c999460902df1e295fcc093b9aa5f2c7e68d5803 \
+    --hash=sha256:608f7eef60e6558418d7da6551dd3d07ccc1290ecc85755d781bd8100322ea5b \
+    --hash=sha256:068e91060e3e211441b1a31f5e65de88fc346490e1fae583c35a75a5295c8ef7 \
+    --hash=sha256:288e8f94fb6f586e7386c1f22c979ce3ec866ab23371fa8fef1dd526cd4dfde1 \
+    --hash=sha256:503ae54582601b0ff647731fee5efcdff5db1f4da0350febb31b628236a5f0b5 \
+    --hash=sha256:6d5f6f26f9025756035c473167b39c5a72e4e519a2286c9399d21f6682e4e5bc \
+    --hash=sha256:e13265feabb1fa26f9cd49cbafd9b5de70ad768093ddb092af477c9823f44f0e \
+    --hash=sha256:50de6f3786ba868ffb7d78d4bcacf0928321f9892366b2f4a0426bba644e3f25 \
+    --hash=sha256:16c78b10e897a512aa34ab1969982e42246e53077ae903c1b334926e1ea832d1 \
+    --hash=sha256:e04b5bf8581718cf84c1c60bda40221d926ceb06f942ebabfc3baf467a1e34be \
+    --hash=sha256:d99819e9e15e1295a31a757360cab65bc96162870f90c29432564bd8e8999aca \
+    --hash=sha256:cd172509bfc9144395204dd2c0eb305ae5e89f8ad1714ffd7d793607c53c3244 \
+    --hash=sha256:3508bea4974ee30fabcf7c8852fca7d9d54d496eaa068bee8311e0ac4df4ade3 \
+    --hash=sha256:fb4412490324705dcd2172baa8a3ea58ae23c5f982476805cad58ae929fe2a52
+chardet==3.0.4 \
+    --hash=sha256:fc323ffcaeaed0e0a02bf4d117757b98aed530d9ed4531e3e15460124c106691 \
+    --hash=sha256:84ab92ed1c4d4f16916e05906b6b75a6c0fb5db821cc65e70cbd64a3e2a5eaae
+async_timeout==2.0.0 \
+    --hash=sha256:c17d8ac2d735d59aa62737d76f2787a6c938f5a944ecf768a8c0ab70b0dea566 \
+    --hash=sha256:d3a195a827b0f4068d1616ae2da04aac62e365d14f2b13dbc071f9feed9db4e2
+yarl==1.1.1 \
+    --hash=sha256:d9ca55a5a297408f08e5401c23ad22bd9f580dab899212f0d5dc1830f0909404 \
+    --hash=sha256:17e57a495efea42bcfca08b49e16c6d89e003acd54c99c903ea1cb3de0ba1248 \
+    --hash=sha256:3353fae45d93cc3e7e41bfcb1b633acc37db821d368e660b03068dbfcf68f8c8 \
+    --hash=sha256:51a084ff8756811101f8b5031a14d1c2dd26c666976e1b18579c6b1c8761a102 \
+    --hash=sha256:045dbba18c9142278113d5dc62622978a6f718ba662392d406141c59b540c514 \
+    --hash=sha256:213e8f54b4a942532d6ac32314c69a147d3b82fa1725ca05061b7c1a19a1d9b1 \
+    --hash=sha256:7236eba4911a5556b497235828e7a4bc5d90957efa63b7c4b3e744d2d2cf1b94 \
+    --hash=sha256:e9a6a319c4bbfb57618f207e86a7c519ab0f637be3d2366e4cdac271577834b8 \
+    --hash=sha256:6e75753065c310befab71c5077a59b7cb638d2146b1cfbb1c3b8f08b51362714 \
+    --hash=sha256:64727a2593fdba5d6ef69e94eba793a196deeda7152c7bd3a64edda6b1f95f6e \
+    --hash=sha256:5580f22ac1298261cd24e8e584180d83e2cca9a6167113466d2d16cb2aa1f7b1 \
+    --hash=sha256:e072edbd1c5628c0b8f97d00cf6c9fcd6a4ee2b5ded10d463fcb6eaa066cf40c \
+    --hash=sha256:a69dd7e262cdb265ac7d5e929d55f2f3d07baaadd158c8f19caebf8dde08dfe8
+six==1.11.0 \
+    --hash=sha256:832dc0e10feb1aa2c68dcc57dbb658f1c7e65b9b61af69048abc87a2db00a0eb \
+    --hash=sha256:70e8a77beed4562e7f14fe23a786b54f6296e34344c23bc42f07b15018ff98e9
+Unidecode==1.0.22 \
+    --hash=sha256:72f49d3729f3d8f5799f710b97c1451c5163102e76d64d20e170aedbbd923582 \
+    --hash=sha256:8c33dd588e0c9bc22a76eaa0c715a5434851f726131bd44a6c26471746efabf5
+ruamel.yaml==0.15.35 \
+    --hash=sha256:14d161558e3bf89e87d77c218098be22fa9a0d6d0bea40250fce525b1d0cbee2 \
+    --hash=sha256:02babffd019911841ba01b76e23dfec7c9e9b2725503fb2698c4982fa1a6e835 \
+    --hash=sha256:c0908896e34b617ead40552cab03c1769bdc43d1da02419160dc900c5dfddde2 \
+    --hash=sha256:fcfc24a21594c071cc4588e84b7657a1f47ebcf6037c6c43fa15c4bbd3989ec2 \
+    --hash=sha256:01e30ecb1b1c0ebf9fce814dc20dace402571517277799291202b61b22096c24 \
+    --hash=sha256:b6c5d5f03ba78e3f27c7188a00c4e09b6a4507fe3154ba40a294e09cb30ee016 \
+    --hash=sha256:9225c83952d28f302cfc23c3d9a6f8231bfd581476d7aff1e3c7de49eecb4ee9 \
+    --hash=sha256:c41e04b526d0153c9246cfab87d7ddefdc9f165cb8886a8ec48ba7a2b73069f6 \
+    --hash=sha256:6d05c5a5baf829c70916c226ef3200650846a7227de226bca8a59efaf88bb973 \
+    --hash=sha256:e3bbfe0d294e08fdbb0cb05485435a2ceb4e168e98b5dc611f051c1864986b4b \
+    --hash=sha256:68c8f2986bcb91b6db1aea8698941769840c7257e951a9377048f7eff35be773 \
+    --hash=sha256:072f6364a89972e8dc0afdce3335a709d5464dfeaa4f736d092a54574338b874 \
+    --hash=sha256:5504398fc755a2b14c9983b2101161a8591a4b30812590cc1c365e7fcc117dfa \
+    --hash=sha256:e2d2715bf92156bec5fb42e92e95dac1c4d9904f8a3d4e2d0c438758fe9092d7 \
+    --hash=sha256:6d7929b24e329d662fa43b657fddfee5260e2d35d0a543065cd755d4e17a9b2f \
+    --hash=sha256:f2d02a4af5a13b09d0b823cdd0317b54f3e0115e50b5ac4d9840c3a1b566817f \
+    --hash=sha256:8dc74821e4bb6b21fb1ab35964e159391d99ee44981d07d57bf96e2395f3ef75
+idna==2.6 \
+    --hash=sha256:8c7309c718f94b3a625cb648ace320157ad16ff131ae0af362c9f21b80ef6ec4 \
+    --hash=sha256:2c6a5de3089009e3da7c5dde64a141dbc8551d5b7f6cf4ed7c2568d0cc520a8f
+certifi==2018.1.18 \
+    --hash=sha256:14131608ad2fd56836d33a71ee60fa1c82bc9d2c8d98b7bdbc631fe1b3cd1296 \
+    --hash=sha256:edbc3f203427eef571f79a7692bb160a2b0f7ccaa31953e99bd17e307cf63f7d
+urllib3==1.22 \
+    --hash=sha256:06330f386d6e4b195fbfc736b297f58c5a892e4440e54d294d7004e3a9bbea1b \
+    --hash=sha256:cc44da8e1145637334317feebd728bd869a35285b93cbb4cca2577da7e62db4f
+jmespath==0.9.3 \
+    --hash=sha256:f11b4461f425740a1d908e9a3f7365c3d2e569f6ca68a2ff8bc5bcd9676edd63 \
+    --hash=sha256:6a81d4c9aa62caf061cb517b4d9ad1dd300374cd4706997aff9cd6aedd61fc64
+python-dateutil==2.6.1 \
+    --hash=sha256:891c38b2a02f5bb1be3e4793866c8df49c7d19baabf9c1bad62547e0b4866aca \
+    --hash=sha256:95511bae634d69bc7329ba55e646499a842bc4ec342ad54a8cdb65645a0aad3c
+docutils==0.14 \
+    --hash=sha256:7a4bd47eaf6596e1295ecb11361139febe29b084a87bf005bf899f9a42edc3c6 \
+    --hash=sha256:02aec4bd92ab067f6ff27a38a38a41173bf01bed8f89157768c1573f53e474a6 \
+    --hash=sha256:51e64ef2ebfb29cae1faa133b3710143496eca21c530f3f71424d77687764274
+pyparsing==2.2.0 \
+    --hash=sha256:fee43f17a9c4087e7ed1605bd6df994c6173c1e977d7ade7b651292fab2bd010 \
+    --hash=sha256:0832bcf47acd283788593e7a0f542407bd9550a55a8a8435214a1960e04bcb04 \
+    --hash=sha256:9e8143a3e15c13713506886badd96ca4b579a87fbdf49e550dbfc057d6cb218e \
+    --hash=sha256:281683241b25fe9b80ec9d66017485f6deff1af5cde372469134b56ca8447a07 \
+    --hash=sha256:b8b3117ed9bdf45e14dcc89345ce638ec7e0e29b2b579fa1ecf32ce45ebac8a5 \
+    --hash=sha256:8f1e18d3fd36c6795bb7e02a39fd05c611ffc2596c1e0d995d34d67630426c18 \
+    --hash=sha256:e4d45427c6e20a59bf4f88c639dcc03ce30d193112047f94012102f235853a58
+pyflakes==1.6.0 \
+    --hash=sha256:08bd6a50edf8cffa9fa09a463063c425ecaaf10d1eb0335a7e8b1401aef89e6f \
+    --hash=sha256:8d616a382f243dbf19b54743f280b80198be0bca3a5396f1d2e1fca6223e8805
+mccabe==0.6.1 \
+    --hash=sha256:ab8a6258860da4b6677da4bd2fe5dc2c659cff31b3ee4f7f5d64e79735b80d42 \
+    --hash=sha256:dd8d182285a0fe56bace7f45b5e7d1a6ebcbf524e8f3bd87eb0f125271b8831f
+pycodestyle==2.3.1 \
+    --hash=sha256:6c4245ade1edfad79c3446fadfc96b0de2759662dc29d07d80a6f27ad1ca6ba9 \
+    --hash=sha256:682256a5b318149ca0d2a9185d365d8864a768a28db66a84a2ea946bcc426766
+py==1.5.2 \
+    --hash=sha256:8cca5c229d225f8c1e3085be4fcf306090b00850fefad892f9d96c7b6e2f310f \
+    --hash=sha256:ca18943e28235417756316bfada6cd96b23ce60dd532642690dcfdaba988a76d
+pluggy==0.6.0 \
+    --hash=sha256:7f8ae7f5bdf75671a718d2daf0a64b7885f74510bcd98b1a0bb420eb9a9d0cff
+attrs==17.4.0 \
+    --hash=sha256:a17a9573a6f475c99b551c0e0a812707ddda1ec9653bed04c13841404ed6f450 \
+    --hash=sha256:1c7960ccfd6a005cd9f7ba884e6316b5e430a3f1a6c37c5f87d8b43f83b54ec9
+execnet==1.5.0 \
+    --hash=sha256:fc155a6b553c66c838d1a22dba1dc9f5f505c43285a878c6f74a79c024750b83 \
+    --hash=sha256:a7a84d5fa07a089186a329528f127c9d73b9de57f1a1131b82bb5320ee651f6a
+pytest-cov==2.5.1 \
+    --hash=sha256:03aa752cf11db41d281ea1d807d954c4eda35cfa1b21d6971966cc041bbf6e2d \
+    --hash=sha256:890fe5565400902b0c78b5357004aab1c814115894f4f21370e2433256a3eeec
+termcolor==1.1.0 \
+    --hash=sha256:1d6d69ce66211143803fbc56652b41d73b4a400a2891d7bf7a1cdf4c02de613b
+apipkg==1.4 \
+    --hash=sha256:65d2aa68b28e7d31233bb2ba8eb31cda40e4671f8ac2d6b241e358c9652a74b9 \
+    --hash=sha256:2e38399dbe842891fe85392601aab8f40a8f4cc5a9053c326de35a1cc0297ac6
+coverage==4.5.1 \
+    --hash=sha256:7608a3dd5d73cb06c531b8925e0ef8d3de31fed2544a7de6c63960a1e73ea4bc \
+    --hash=sha256:3a2184c6d797a125dca8367878d3b9a178b6fdd05fdc2d35d758c3006a1cd694 \
+    --hash=sha256:f3f501f345f24383c0000395b26b726e46758b71393267aeae0bd36f8b3ade80 \
+    --hash=sha256:0b136648de27201056c1869a6c0d4e23f464750fd9a9ba9750b8336a244429ed \
+    --hash=sha256:337ded681dd2ef9ca04ef5d93cfc87e52e09db2594c296b4a0a3662cb1b41249 \
+    --hash=sha256:69bf008a06b76619d3c3f3b1983f5145c75a305a0fea513aca094cae5c40a8f5 \
+    --hash=sha256:2eb564bbf7816a9d68dd3369a510be3327f1c618d2357fa6b1216994c2e3d508 \
+    --hash=sha256:3eb42bf89a6be7deb64116dd1cc4b08171734d721e7a7e57ad64cc4ef29ed2f1 \
+    --hash=sha256:be6cfcd8053d13f5f5eeb284aa8a814220c3da1b0078fa859011c7fffd86dab9 \
+    --hash=sha256:9d6dd10d49e01571bf6e147d3b505141ffc093a06756c60b053a859cb2128b1f \
+    --hash=sha256:701cd6093d63e6b8ad7009d8a92425428bc4d6e7ab8d75efbb665c806c1d79ba \
+    --hash=sha256:5a13ea7911ff5e1796b6d5e4fbbf6952381a611209b736d48e675c2756f3f74e \
+    --hash=sha256:c1bb572fab8208c400adaf06a8133ac0712179a334c09224fb11393e920abcdd \
+    --hash=sha256:03481e81d558d30d230bc12999e3edffe392d244349a90f4ef9b88425fac74ba \
+    --hash=sha256:28b2191e7283f4f3568962e373b47ef7f0392993bb6660d079c62bd50fe9d162 \
+    --hash=sha256:de4418dadaa1c01d497e539210cb6baa015965526ff5afc078c57ca69160108d \
+    --hash=sha256:8c3cb8c35ec4d9506979b4cf90ee9918bc2e49f84189d9bf5c36c0c1119c6558 \
+    --hash=sha256:7e1fe19bd6dce69d9fd159d8e4a80a8f52101380d5d3a4d374b6d3eae0e5de9c \
+    --hash=sha256:6bc583dc18d5979dc0f6cec26a8603129de0304d5ae1f17e57a12834e7235062 \
+    --hash=sha256:198626739a79b09fa0a2f06e083ffd12eb55449b5f8bfdbeed1df4910b2ca640 \
+    --hash=sha256:7aa36d2b844a3e4a4b356708d79fd2c260281a7390d678a10b91ca595ddc9e99 \
+    --hash=sha256:3d72c20bd105022d29b14a7d628462ebdc61de2f303322c0212a054352f3b287 \
+    --hash=sha256:4635a184d0bbe537aa185a34193898eee409332a8ccb27eea36f262566585000 \
+    --hash=sha256:e05cb4d9aad6233d67e0541caa7e511fa4047ed7750ec2510d466e806e0255d6 \
+    --hash=sha256:76ecd006d1d8f739430ec50cc872889af1f9c1b6b8f48e29941814b09b0fd3cc \
+    --hash=sha256:7d3f553904b0c5c016d1dad058a7554c7ac4c91a789fca496e7d8347ad040653 \
+    --hash=sha256:3c79a6f7b95751cdebcd9037e4d06f8d5a9b60e4ed0cd231342aa8ad7124882a \
+    --hash=sha256:56e448f051a201c5ebbaa86a5efd0ca90d327204d8b059ab25ad0f35fbfd79f1 \
+    --hash=sha256:9e112fcbe0148a6fa4f0a02e8d58e94470fc6cb82a5481618fea901699bf34c4 \
+    --hash=sha256:15b111b6a0f46ee1a485414a52a7ad1d703bdf984e9ed3c288a4414d3871dcbd \
+    --hash=sha256:e4d96c07229f58cb686120f168276e434660e4358cc9cf3b0464210b04913e77 \
+    --hash=sha256:f8a923a85cb099422ad5a2e345fe877bbc89a8a8b23235824a93488150e45f6e \
+    --hash=sha256:ac4fef68da01116a5c117eba4dd46f2e06847a497de5ed1d64bb99a5fda1ef91 \
+    --hash=sha256:1c383d2ef13ade2acc636556fd544dba6e14fa30755f26812f54300e401f98f2 \
+    --hash=sha256:b8815995e050764c8610dbc82641807d196927c3dbed207f0a079833ffcf588d \
+    --hash=sha256:104ab3934abaf5be871a583541e8829d6c19ce7bde2923b2751e0d3ca44db60a

jobs/requirements/default.txt

@@ -0,0 +1,28 @@
+aiobotocore==0.5.2 \
+    --hash=sha256:a06aea3aedb5e501f9625cdd10dd2645e6e70487837961c230530abe8860cfaf \
+    --hash=sha256:5400ef95d4f73b06cd2bb648a33f714cea682bcfea639b2af221a4bd1b8af962
+aiohttp==2.3.0 \
+    --hash=sha256:4ef8aa726fec5d8fa810e61c6c42b51276c7ae962391bcdc6ac1066b49c90e7c \
+    --hash=sha256:4b1d216a1ef7b7f2b06172243b1361362b94fbdbc790479c7c4f97a3c7d2e76e \
+    --hash=sha256:842abbbfefbe8b9c2433c6305a533a1c361541136937e4fb3bbe70da010b5326 \
+    --hash=sha256:9039c784bea791de382719056383f61e672318273cf13a8824721eb50012ebc6 \
+    --hash=sha256:1ed6ce22fee3ad6d56ae139a5af0dbb6361b52ce035a4dc585a8afa5f85b394e \
+    --hash=sha256:a230016d972cb45dcf2b20512e39dc1f4d043eedfc181c811199ff1ef7c4df59 \
+    --hash=sha256:1f73f38145a6952c4b9931f759e3ff14aaddd8f1c6ac2140fd4ecec8d1b159f6 \
+    --hash=sha256:3441fdc7378192a482a263d3b8ba0ddcb5210076e1fb0b6005f3ae765db85ee4 \
+    --hash=sha256:a4d106cb3cb1fa25d822510d5cd6b3610f6d75b8d276c1c1cdd44d425efb2d63 \
+    --hash=sha256:371d70d62bca62da3de107a9c9f7222960755d865edd6631e530ba702ee5aa86 \
+    --hash=sha256:759d6dc3e8b05ac1921301ccb0557552ad7b0530e27376a6e997bc99778379ec \
+    --hash=sha256:e15f55a285ad46a9fbcde3d7d555691e6bebcf4e74e856cbcefb6be38f862221 \
+    --hash=sha256:944f9f94a9d66f2506a3f22bf9447c5b77b9ae389eead007db1d618acd157c99
+backoff==1.4.3 \
+    --hash=sha256:bc8ef5a3b0cc7e90d56dd4d9d385557ada1a6dbdfcdd2b44038beeabae119038
+kinto-http==9.1.1 \
+    --hash=sha256:63c53d73f1e238c6cf1ae888d2d0190b562ef41e963f4502927dad2c7edd2660 \
+    --hash=sha256:b3e33bbae9365ed75ca0f832760693a8077e80414249c38d89d652aeac895a44
+kinto-wizard==2.3.0 \
+    --hash=sha256:7b9a4f856b50e53079cd728feb87787b3001b0cd3b3c0ff9981a1f196adf6f2d \
+    --hash=sha256:c83102fcff999b4914a2bd146114566634f34a99b963885054a123b0426612a9
+raven==6.5.0 \
+    --hash=sha256:0adae40e004dfe2181d1f2883aa3d4ca1cf16dbe449ae4b445b011c6eb220a90 \
+    --hash=sha256:84da75114739191bdf2388f296ffd6177e83567a7fbaf2701e034ad6026e4f3b

jobs/requirements/dev.txt

@@ -0,0 +1,19 @@
+aioresponses==0.4.0 \
+    --hash=sha256:b901daac9f14165a9b42377a82dd92eb9a9687bb24c956ed545a2cf14a2a8b32 \
+    --hash=sha256:bdb5316e90522472258a8ba679708d30d1d8886ceec34ac192ba537a4672a7f3
+asynctest==0.11.1 \
+    --hash=sha256:f47eb8fd1f78a63a68709c2fd471bbde038deffd4e99b8d614b988a8610c09b2 \
+    --hash=sha256:f7ef31994c5e751201bd6ce6f92f60f16ad798bfaed8e2b79a74afaa4475927b
+flake8==3.5.0 \
+    --hash=sha256:c7841163e2b576d435799169b78703ad6ac1bbb0f199994fc05f700b2a90ea37 \
+    --hash=sha256:7253265f7abd8b313e3892944044a365e3f4ac3fcdcfb4298f55ee9ddf188ba0
+pytest==3.3.2 \
+    --hash=sha256:b84878865558194630c6147f44bdaef27222a9f153bbd4a08908b16bf285e0b1 \
+    --hash=sha256:53548280ede7818f4dc2ad96608b9f08ae2cc2ca3874f2ceb6f97e3583f25bc4
+pytest-cache==1.0 \
+    --hash=sha256:be7468edd4d3d83f1e844959fd6e3fd28e77a481440a7118d430130ea31b07a9
+pytest-cover==3.0.0 \
+    --hash=sha256:5bdb6c1cc3dd75583bb7bc2c57f5e1034a1bfcb79d27c71aceb0b16af981dbf4 \
+    --hash=sha256:578249955eb3b5f3991209df6e532bb770b647743b7392d3d97698dc02f39ebb
+pytest-sugar==0.9.1 \
+    --hash=sha256:ab8cc42faf121344a4e9b13f39a51257f26f410e416c52ea11078cdd00d98a2c

jobs/setup.py

@@ -16,15 +16,6 @@ def read_file(filename):
 CHANGELOG = read_file('CHANGELOG.rst')
 CONTRIBUTORS = read_file('CONTRIBUTORS.rst')
 
-REQUIREMENTS = [
-    "aiohttp<=2.3.0",  # Because of aiobotocore
-    "aiobotocore",
-    "backoff",
-    "kinto-http>=9.1.1",  # Retry 409
-    "kinto-wizard >= 2.2.0",  # async load.
-    "raven",
-]
-
 ENTRY_POINTS = {
     'console_scripts': [
         'to-kinto = buildhub.to_kinto:run',
@@ -57,5 +48,8 @@ def read_file(filename):
       package_data={'buildhub': ['initialization.yml']},
       include_package_data=True,
       zip_safe=False,
-      install_requires=REQUIREMENTS,
+      # Use
+      #  `pip -r requirements/default.txt -c requirements/constraints.txt`
+      # instead.
+      install_requires=[],
       entry_points=ENTRY_POINTS)

jobs/tox.ini

@@ -5,11 +5,15 @@ skip_missing_interpreters = True
 [testenv]
 usedevelop=true
 commands =
+    python setup.py develop
     py.test --cov-report term-missing --cov buildhub tests {posargs}
+
 deps =
-    -rdev-requirements.txt
+    -r{toxinidir}/requirements/dev.txt
+    -r{toxinidir}/requirements/default.txt
+    -c{toxinidir}/requirements/constraints.txt
 
-install_command = pip install --pre {opts} {packages}
+install_command = pip install {opts} {packages}
 
 [testenv:flake8]
 commands = flake8 buildhub tests