comparison scripts/Docker/requirements.txt @ 8550:2c59d8deb653

bug: set minimum level for docker requirements.txt packages Choose minimum versions that do not have outstanding CVE's.
author John Rouillard <rouilj@ieee.org>
date Sun, 29 Mar 2026 15:42:52 -0400
parents 61ffdc71cf46
children
comparison
equal deleted inserted replaced
8548:98011edc6c60 8550:2c59d8deb653
1 # Get newest versions, but specify minimum versions to get versions
2 # without known vulnerabilities as reported by:
3 # https://tools.simonwillison.net/python-vulnerability-lookup
4
1 # setuptools required for installation - missing from newer base images 5 # setuptools required for installation - missing from newer base images
2 setuptools 6 setuptools >= 78.1.1
3 # human timezones 7 # human timezones
4 pytz 8 pytz
5 # indexer 9 # indexer
6 Whoosh 10 Whoosh
7 # xapian is also installed 11 # xapian is also installed
8 # extra database support 12 # extra database support
9 psycopg2 13 psycopg2
10 mysqlclient 14 mysqlclient
11 redis 15 redis >= 4.5.4
12 # encryption 16 # encryption
13 gpg 17 gpg
14 # java web tokens 18 # java web tokens
15 PyJWT 19 PyJWT >= 2.12.0
16 # extra HTTP compression methods 20 # extra HTTP compression methods
17 Brotli 21 Brotli >= 1.2.0
18 zstd 22 zstd >= 1.5.4
19 # jinja2 template engine 23 # jinja2 template engine
20 Jinja2 24 Jinja2 >= 3.1.6

Roundup Issue Tracker: http://roundup-tracker.org/