fix: pin lxml to 5.2

openedx · Apr 3, 2024 · 4de5a6d · 4de5a6d
1 parent 43cb58f
commit 4de5a6d
Show file tree

Hide file tree

Showing 7 changed files with 25 additions and 12 deletions.
diff --git a/requirements/all.txt b/requirements/all.txt
@@ -44,11 +44,11 @@ bleach==6.1.0
     # via
     #   -r requirements/dev.txt
     #   -r requirements/production.txt
-boto3==1.34.75
+boto3==1.34.76
     # via
     #   -r requirements/production.txt
     #   django-ses
-botocore==1.34.75
+botocore==1.34.76
     # via
     #   -r requirements/production.txt
     #   boto3
@@ -401,8 +401,9 @@ jsonschema==3.2.0
     # via
     #   -r requirements/dev.txt
     #   docker-compose
-lxml==5.2.0
+lxml==5.1.1
     # via
+    #   -c requirements/constraints.txt
     #   -r requirements/dev.txt
     #   -r requirements/production.txt
     #   edx-i18n-tools

diff --git a/requirements/base.txt b/requirements/base.txt
@@ -174,8 +174,10 @@ jinja2==3.1.3
     # via
     #   code-annotations
     #   coreschema
-lxml==5.2.0
-    # via edx-i18n-tools
+lxml==5.1.1
+    # via
+    #   -c requirements/constraints.txt
+    #   edx-i18n-tools
 markdown==3.6
     # via -r requirements/base.in
 markupsafe==2.1.5

diff --git a/requirements/constraints.txt b/requirements/constraints.txt
@@ -18,3 +18,8 @@ pyyaml<6.0
 # Pinning urllib3 to versions < 2.x as this conflicts with boto. This constraint will be re-evaluated as part of
 # APER-2422
 urllib3<2
+
+# Pinning lxml to < 5.2 as edx-i18n-tools package needs to be updated.
+# Release notes: https://pypi.org/project/lxml/5.2.0/
+# Github issue: https://github.com/openedx/i18n-tools/issues/144
+lxml<5.2
diff --git a/requirements/dev.txt b/requirements/dev.txt
@@ -294,8 +294,9 @@ jinja2==3.1.3
     #   coreschema
 jsonschema==3.2.0
     # via docker-compose
-lxml==5.2.0
+lxml==5.1.1
     # via
+    #   -c requirements/constraints.txt
     #   -r requirements/test.txt
     #   edx-i18n-tools
 markdown==3.6

diff --git a/requirements/production.txt b/requirements/production.txt
@@ -26,9 +26,9 @@ backports-zoneinfo==0.2.1
     #   djangorestframework
 bleach==6.1.0
     # via -r requirements/base.txt
-boto3==1.34.75
+boto3==1.34.76
     # via django-ses
-botocore==1.34.75
+botocore==1.34.76
     # via
     #   boto3
     #   s3transfer
@@ -227,8 +227,9 @@ jmespath==1.0.1
     # via
     #   boto3
     #   botocore
-lxml==5.2.0
+lxml==5.1.1
     # via
+    #   -c requirements/constraints.txt
     #   -r requirements/base.txt
     #   edx-i18n-tools
 markdown==3.6

diff --git a/requirements/test.txt b/requirements/test.txt
@@ -254,8 +254,9 @@ jinja2==3.1.3
     #   -r requirements/base.txt
     #   code-annotations
     #   coreschema
-lxml==5.2.0
+lxml==5.1.1
     # via
+    #   -c requirements/constraints.txt
     #   -r requirements/base.txt
     #   edx-i18n-tools
 markdown==3.6

diff --git a/requirements/translations.txt b/requirements/translations.txt
@@ -14,8 +14,10 @@ django==4.2.11
     #   edx-i18n-tools
 edx-i18n-tools==1.3.0
     # via -r requirements/translations.in
-lxml==5.2.0
-    # via edx-i18n-tools
+lxml==5.1.1
+    # via
+    #   -c requirements/constraints.txt
+    #   edx-i18n-tools
 path==16.10.0
     # via edx-i18n-tools
 polib==1.2.0