website-v2/requirements.in at develop · boostorg/website-v2 · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
Django~=6.0.0
bumpversion
django-admin-env-notice
django-allauth
django-allauth[socialaccount]
django-anymail[mailgun]
django-cors-headers
django-countries
django-db-geventpool
django-extensions
django-health-check
django-imagekit
django-import-export
django-oauth-toolkit
django-redis
django-upgrade
django-waffle
django-widget-tweaks
djangorestframework
environs[django]
greenlet
psycogreen
gevent
gunicorn
interrogate
itsdangerous
psycopg2-binary
whitenoise
django-click
Pillow
python-dateutil
django-storages
wheel
cryptography
boto3
jsoncomment
unidecode
wordcloud
lxml>=6.1.0  # security floor: <6.1.0 has an XXE in iterparse/ETCompatXMLParser (GHSA-vfmq-68hx-4jfw)
algoliasearch
openai
playwright
wagtail
wagtail-markdown

# Logging
django-tracer
python-json-logger
structlog

# Celery
celery
flower
redis>=5,<6

# Testing
Faker
black
django-bakery
django-test-plus
ipython
minio
model_bakery
pre-commit
pytest
pytest-cov
pytest-django
pytest-mock
responses

# Packaging
uv

# Storybook - renders real Django templates via /pattern-library/, staff-gated,
# ships to every environment (see docs/storybook.md)
django-pattern-library>=1.5,<2

# Parsing content from external sources (like S3)
mistletoe
python-frontmatter
beautifulsoup4
# Main-content extraction from arbitrary web pages (Link post Auto-Generate)
trafilatura>=2.0.0,<3.0.0  # pin major version: parses untrusted web content

# used in old mailinglist migrations, squash them and this can probably be removed
django-mptt==0.14
# used by mailman/hyperkitty
django-haystack
elasticsearch>7,<8

# Github
ghapi
requests
urllib3>=2.7.0  # security floor (transitive via requests); <2.7.0 flagged by pip-audit
slack_sdk
chardet