Pin package constraints

Dockerfile

@@ -59,6 +59,7 @@ RUN pip3 install --user bsddb3==6.2.7
 
 WORKDIR /sio2/oioioi
 
+COPY --chown=oioioi:oioioi setup.py requirements_pinned.txt ./
 COPY --chown=oioioi:oioioi setup.py requirements.txt ./
 RUN pip3 install -r requirements.txt --user
 COPY --chown=oioioi:oioioi requirements_static.txt ./

requirements.in

@@ -0,0 +1,69 @@
+# All modules in the newest versions at the time of upgrade to Django 4.2
+# unless specified otherwise.
+# This list includes requirements for sioworkers 1.4.3 (near the end of file)
+#
+# To recompile requirements (pin newest compatible versions) run:
+#   pip-compile --output-file=requirements_pinned.txt requirements.in
+#
+
+Django>=4.2,<4.3
+pytz>=2023.3,<2023.4
+SQLAlchemy<2.1.0
+beautifulsoup4>=4.12,<4.13
+PyYAML>=6.0,<6.1
+python-dateutil>=2.8,<2.9
+django-two-factor-auth>=1.15,<1.16
+django-formtools>=2.4,<2.5
+django-registration-redux>=2.12,<2.13
+Celery<5.4.0
+coreapi>=2.3,<2.4
+dj-pagination>=2.5,<2.6
+django-compressor>=4.3,<4.4
+Pygments>=2.15,<2.16
+django-libsass>=0.9,<0.10
+django-debug-toolbar
+django-extensions>=3.2,<3.3
+djangorestframework>=3.14,<3.15
+Werkzeug
+pytest>=7.2,<8.0
+pytest-cov>=4.0,<5.0
+pytest-django>=4.4,<5.0
+pytest-html>=3.1,<4.0
+pytest-metadata>=3.0,<4.0
+pytest-xdist>=3.2,<4.0
+requests>=2.31,<2.32
+fpdf>=1.7,<1.8
+unicodecsv>=0.14,<0.15
+dnslib>=0.9,<0.10
+bleach>=6.0,<6.1
+chardet>=5.1,<5.2
+django-gravatar2>=1.4,<1.5
+django-mptt>=0.14,<0.15
+mistune<2.0   # 2.0 is breaking
+pika>=1.3,<1.4
+Unidecode>=1.3,<1.4
+sentry-sdk>=1.25,<1.26
+fontawesomefree>=6.4,<6.5
+# A library allowing to nest inlines in django admin.
+# Used in quizzes module for adding new quizzes.
+django-nested-admin>=4.0,<4.1
+# SIO2 dependencies:
+filetracker>=2.1,<3.0
+django-simple-captcha>=0.5,<=0.5.18
+phonenumbers>=8.13,<8.14
+pdfminer.six==20221105
+# https://stackoverflow.com/questions/73929564/entrypoints-object-has-no-attribute-get-digital-ocean
+importlib-metadata<5.0
+supervisor<4.3  # previously http://github.com/Supervisor/supervisor/zipball/master#egg=supervisor==4.0.0.dev0
+django-supervisor@git+https://github.com/sio2project/django-supervisor#egg=django-supervisor  # previously http://github.com/badochov/djsupervisor/zipball/master#egg=djsupervisor==0.4.0
+
+
+# sioworkers requirements as of 1.4.3
+filetracker>=2.1.5,<3.0
+bsddb3==6.2.7
+simplejson==3.14.0
+supervisor>=4.0,<4.3
+Twisted==20.3.0
+sortedcontainers==2.1.0
+six
+urllib3>=1.26.14,<2.0

requirements.txt

@@ -1,3 +1,6 @@
+# Pinned versions of requirements
+-r requirements_pinned.txt
+
 # These dependencies need to be installed from external sources,
 # therefore they must be listed here. Moreover, they cannot be listed in
 # setup.py, as pip is not able to install them.