2021-09-08 03:59:02 +00:00
|
|
|
PyJWT==2.1.0
|
2021-07-21 21:28:22 +00:00
|
|
|
PyNaCl==1.4.0
|
2021-10-11 03:14:42 +00:00
|
|
|
aiodiscover==1.4.5
|
2021-12-01 18:45:16 +00:00
|
|
|
aiohttp==3.8.1
|
2019-06-10 21:38:14 +00:00
|
|
|
aiohttp_cors==0.7.0
|
2021-04-01 22:29:08 +00:00
|
|
|
astral==2.2
|
2022-01-03 12:42:09 +00:00
|
|
|
async-upnp-client==0.23.3
|
2021-11-13 07:47:39 +00:00
|
|
|
async_timeout==4.0.0
|
2021-11-15 10:19:31 +00:00
|
|
|
atomicwrites==1.4.0
|
2021-05-09 20:13:09 +00:00
|
|
|
attrs==21.2.0
|
2022-01-08 15:25:13 +00:00
|
|
|
awesomeversion==22.1.0
|
2021-05-10 15:32:29 +00:00
|
|
|
backports.zoneinfo;python_version<"3.9"
|
2019-07-01 00:23:47 +00:00
|
|
|
bcrypt==3.1.7
|
2021-09-27 02:19:30 +00:00
|
|
|
certifi>=2021.5.30
|
2021-09-26 12:47:29 +00:00
|
|
|
ciso8601==2.2.0
|
2021-11-11 17:27:22 +00:00
|
|
|
cryptography==35.0.0
|
2021-09-26 13:09:13 +00:00
|
|
|
emoji==1.5.0
|
2022-01-10 13:49:25 +00:00
|
|
|
hass-nabucasa==0.51.0
|
2022-01-11 00:13:08 +00:00
|
|
|
home-assistant-frontend==20211229.1
|
2021-11-18 10:11:46 +00:00
|
|
|
httpx==0.21.0
|
2021-05-26 16:06:30 +00:00
|
|
|
ifaddr==0.1.7
|
2021-11-10 10:04:42 +00:00
|
|
|
jinja2==3.0.3
|
2021-11-08 17:16:44 +00:00
|
|
|
paho-mqtt==1.6.1
|
2022-01-11 13:28:48 +00:00
|
|
|
pillow==9.0.0
|
2020-11-30 18:38:39 +00:00
|
|
|
pip>=8.0.3,<20.3
|
2021-08-20 19:04:18 +00:00
|
|
|
pyserial==3.5
|
2020-07-24 14:55:54 +00:00
|
|
|
python-slugify==4.0.1
|
2021-08-20 19:04:18 +00:00
|
|
|
pyudev==0.22.0
|
2021-10-14 07:29:31 +00:00
|
|
|
pyyaml==6.0
|
2022-01-06 18:15:17 +00:00
|
|
|
requests==2.27.1
|
2021-04-25 01:16:52 +00:00
|
|
|
scapy==2.4.5
|
2021-11-26 03:55:17 +00:00
|
|
|
sqlalchemy==1.4.27
|
2022-01-04 17:37:46 +00:00
|
|
|
typing-extensions>=3.10.0.2,<5.0
|
2021-12-20 06:28:15 +00:00
|
|
|
voluptuous-serialize==2.5.0
|
2021-09-26 16:59:00 +00:00
|
|
|
voluptuous==0.12.2
|
2021-01-15 12:19:22 +00:00
|
|
|
yarl==1.6.3
|
2021-12-24 12:26:07 +00:00
|
|
|
zeroconf==0.38.1
|
2017-08-05 06:06:10 +00:00
|
|
|
|
2021-12-15 11:28:04 +00:00
|
|
|
# Constrain pycryptodome to avoid vulnerability
|
|
|
|
|
# see https://github.com/home-assistant/core/pull/16238
|
2018-08-28 10:49:50 +00:00
|
|
|
pycryptodome>=3.6.6
|
|
|
|
|
|
2021-11-04 10:21:30 +00:00
|
|
|
# Constrain urllib3 to ensure we deal with CVE-2020-26137 and CVE-2021-33503
|
|
|
|
|
urllib3>=1.26.5
|
2020-02-20 18:19:09 +00:00
|
|
|
|
2021-01-01 17:39:59 +00:00
|
|
|
# Constrain H11 to ensure we get a new enough version to support non-rfc line endings
|
|
|
|
|
h11>=0.12.0
|
|
|
|
|
|
2021-02-18 11:31:07 +00:00
|
|
|
# Constrain httplib2 to protect against GHSA-93xj-8mrv-444m
|
|
|
|
|
# https://github.com/advisories/GHSA-93xj-8mrv-444m
|
|
|
|
|
httplib2>=0.19.0
|
2020-06-01 07:44:18 +00:00
|
|
|
|
2022-01-11 16:25:50 +00:00
|
|
|
# gRPC is an implicit dependency that we want to make explicit so we manage
|
|
|
|
|
# upgrades intentionally. It is a large package to build from source and we
|
|
|
|
|
# want to ensure we have wheels built.
|
|
|
|
|
grpcio==1.43.0
|
2022-01-05 21:50:11 +00:00
|
|
|
|
2018-02-27 09:58:45 +00:00
|
|
|
# This is a old unmaintained library and is replaced with pycryptodome
|
|
|
|
|
pycrypto==1000000000.0.0
|
2020-08-26 08:20:14 +00:00
|
|
|
|
2020-08-26 14:53:22 +00:00
|
|
|
# To remove reliance on typing
|
|
|
|
|
btlewrap>=0.0.10
|
|
|
|
|
|
2020-08-26 12:51:41 +00:00
|
|
|
# This overrides a built-in Python package
|
|
|
|
|
enum34==1000000000.0.0
|
|
|
|
|
typing==1000000000.0.0
|
2020-08-26 08:20:14 +00:00
|
|
|
uuid==1000000000.0.0
|
2020-08-26 12:51:41 +00:00
|
|
|
|
2021-07-28 08:30:05 +00:00
|
|
|
# Temporary constraint on pandas, to unblock 2021.7 releases
|
|
|
|
|
# until we have fixed the wheels builds for newer versions.
|
|
|
|
|
pandas==1.3.0
|
2021-08-28 13:00:14 +00:00
|
|
|
|
|
|
|
|
# regex causes segfault with version 2021.8.27
|
|
|
|
|
# https://bitbucket.org/mrabarnett/mrab-regex/issues/421/2021827-results-in-fatal-python-error
|
|
|
|
|
# This is fixed in 2021.8.28
|
|
|
|
|
regex==2021.8.28
|
2021-09-09 13:33:09 +00:00
|
|
|
|
|
|
|
|
# anyio has a bug that was fixed in 3.3.1
|
|
|
|
|
# can remove after httpx/httpcore updates its anyio version pin
|
|
|
|
|
anyio>=3.3.1
|
2021-10-28 19:32:22 +00:00
|
|
|
|
2021-12-07 06:07:56 +00:00
|
|
|
# pytest_asyncio breaks our test suite. We rely on pytest-aiohttp instead
|
|
|
|
|
pytest_asyncio==1000000000.0.0
|
