build: pin windows-only transitive dependencies

Author: nedbat

requirements/kit.in

@@ -11,3 +11,9 @@ build
 cibuildwheel
 setuptools
 wheel
+
+# Build has a windows-only dependency on colorama:
+# https://github.com/pypa/build/blob/main/setup.cfg#L32
+#   colorama;os_name == "nt"
+# We copy it here so it can get pinned.
+colorama

requirements/light-threads.in

@@ -3,8 +3,11 @@
 
 -c pins.pip
 
-# The light-threads packages we test against
+# The light-threads packages we test against.
 
 eventlet
 gevent
 greenlet
+
+# gevent needs cffi, but only on Windows, not sure why.
+cffi>=1.12.2

requirements/pins.pip

@@ -9,3 +9,8 @@
 
 # https://github.com/jazzband/pip-tools/issues/1617
 pip<22.1
+
+# requests gets different versions in dev.pip and doc/requirements.pip, not
+# sure why, and they then ask for different versions of certifi, and we can't
+# install, so pin certifi.
+certifi==2022.5.18.1

requirements/pytest.in

@@ -12,4 +12,17 @@ pytest
 pytest-xdist
 # Use a fork of PyContracts that supports Python 3.9
 #PyContracts==1.8.12
-git+https://github.com/slorg1/contracts@collections_and_validator
+# git+https://github.com/slorg1/contracts@collections_and_validator
+https://github.com/slorg1/contracts/archive/c5a6da27d4dc9985f68e574d20d86000880919c3.zip
+
+# Pytest has a windows-only dependency on colorama:
+# https://github.com/pytest-dev/pytest/blob/main/setup.cfg#L49
+#   colorama;sys_platform=="win32"
+# We copy it here so it can get pinned.
+colorama
+
+# Pytest has a windows-only dependency on atomicwrites:
+# https://github.com/pytest-dev/pytest/blob/7.1.2/setup.cfg#L50
+#   atomicwrites>=1.0;sys_platform=="win32"
+# though it's been removed on main.
+atomicwrites>=1.0

requirements/tox.in

@@ -8,3 +8,9 @@
 
 tox
 tox-gh-actions
+
+# Tox has a windows-only dependency on colorama:
+# https://github.com/tox-dev/tox/blob/master/setup.cfg#L44
+#   colorama>=0.4.1 ;platform_system=="Windows"
+# We copy it here so it can get pinned.
+colorama>=0.4.1