Merge pull request #30 from pamelafox/update-reqs

Update requirements to pip-tools

.github/dependabot.yaml

@@ -5,7 +5,19 @@
 
 version: 2
 updates:
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: monthly
+    groups:
+      github-actions:
+        patterns:
+          - "*"
   - package-ecosystem: "pip" # See documentation for possible values
     directory: "/" # Location of package manifests
     schedule:
-      interval: "weekly"
+      interval: "weekly"
+    groups:
+      python-requirements:
+        patterns:
+          - "*"

requirements-dev.txt

@@ -4,4 +4,5 @@ ruff
 pre-commit
 pytest
 pytest-asyncio
-pytest-cov
+pytest-cov
+pip-tools

src/requirements.in

@@ -0,0 +1,8 @@
+quart==0.18.4
+werkzeug==2.3.7
+gunicorn
+uvicorn[standard]
+openai
+azure-identity
+python-dotenv==0.21.1 # Pinned due to docker-in-docker issue: https://github.com/devcontainers/features/issues/616
+pyyaml==5.3.1 # Pinned due to docker-in-docker issue: https://github.com/devcontainers/features/issues/616

src/requirements.txt

@@ -1,6 +1,139 @@
-quart==0.18.4
+#
+# This file is autogenerated by pip-compile with Python 3.11
+# by the following command:
+#
+#    pip-compile src/requirements.in
+#
+aiofiles==23.2.1
+    # via quart
+aiohttp==3.8.5
+    # via openai
+aiosignal==1.3.1
+    # via aiohttp
+anyio==4.0.0
+    # via watchfiles
+async-timeout==4.0.3
+    # via aiohttp
+attrs==23.1.0
+    # via aiohttp
+azure-core==1.29.4
+    # via azure-identity
+azure-identity==1.14.0
+    # via -r src/requirements.in
+blinker==1.5
+    # via quart
+certifi==2023.7.22
+    # via requests
+cffi==1.16.0
+    # via cryptography
+charset-normalizer==3.3.0
+    # via
+    #   aiohttp
+    #   requests
+click==8.1.7
+    # via
+    #   quart
+    #   uvicorn
+cryptography==41.0.4
+    # via
+    #   azure-identity
+    #   msal
+    #   pyjwt
+frozenlist==1.4.0
+    # via
+    #   aiohttp
+    #   aiosignal
 gunicorn==21.2.0
+    # via -r src/requirements.in
+h11==0.14.0
+    # via
+    #   hypercorn
+    #   uvicorn
+    #   wsproto
+h2==4.1.0
+    # via hypercorn
+hpack==4.0.0
+    # via h2
+httptools==0.6.0
+    # via uvicorn
+hypercorn==0.14.4
+    # via quart
+hyperframe==6.0.1
+    # via h2
+idna==3.4
+    # via
+    #   anyio
+    #   requests
+    #   yarl
+itsdangerous==2.1.2
+    # via quart
+jinja2==3.1.2
+    # via quart
+markupsafe==2.1.3
+    # via
+    #   jinja2
+    #   quart
+    #   werkzeug
+msal==1.24.1
+    # via
+    #   azure-identity
+    #   msal-extensions
+msal-extensions==1.0.0
+    # via azure-identity
+multidict==6.0.4
+    # via
+    #   aiohttp
+    #   yarl
+openai==0.28.1
+    # via -r src/requirements.in
+packaging==23.2
+    # via gunicorn
+portalocker==2.8.2
+    # via msal-extensions
+priority==2.0.0
+    # via hypercorn
+pycparser==2.21
+    # via cffi
+pyjwt[crypto]==2.8.0
+    # via msal
+python-dotenv==0.21.1
+    # via
+    #   -r src/requirements.in
+    #   uvicorn
+pyyaml==5.3.1
+    # via
+    #   -r src/requirements.in
+    #   uvicorn
+quart==0.18.4
+    # via -r src/requirements.in
+requests==2.31.0
+    # via
+    #   azure-core
+    #   msal
+    #   openai
+six==1.16.0
+    # via azure-core
+sniffio==1.3.0
+    # via anyio
+tqdm==4.66.1
+    # via openai
+typing-extensions==4.8.0
+    # via azure-core
+urllib3==2.0.6
+    # via requests
 uvicorn[standard]==0.23.2
-openai==0.28.0
-azure-identity==1.14.0
-python-dotenv==1.0.0 # Pinned due to docker-in-docker issue: https://github.com/devcontainers/features/issues/616
+    # via -r src/requirements.in
+uvloop==0.17.0
+    # via uvicorn
+watchfiles==0.20.0
+    # via uvicorn
+websockets==11.0.3
+    # via uvicorn
+werkzeug==2.3.7
+    # via
+    #   -r src/requirements.in
+    #   quart
+wsproto==1.2.0
+    # via hypercorn
+yarl==1.9.2
+    # via aiohttp