ha-core/homeassistant/package_constraints.txt

PyJWT==1.7.1
PyNaCl==1.3.0
aiohttp==3.7.3
aiohttp_cors==0.7.0
astral==1.10.1
async-upnp-client==0.14.13
async_timeout==3.0.1
attrs==19.3.0
awesomeversion==21.2.2
bcrypt==3.1.7
certifi>=2020.12.5
ciso8601==2.1.3
cryptography==3.3.1
defusedxml==0.6.0
distro==1.5.0
emoji==1.2.0
hass-nabucasa==0.41.0
home-assistant-frontend==20210208.0
httpx==0.16.1
jinja2>=2.11.3
netdisco==2.8.2
paho-mqtt==1.5.1
pillow==8.1.0
pip>=8.0.3,<20.3
python-slugify==4.0.1
pytz>=2021.1
pyyaml==5.4.1
requests==2.25.1
ruamel.yaml==0.15.100
scapy==2.4.4
sqlalchemy==1.3.23
voluptuous-serialize==2.4.0
voluptuous==0.12.1
yarl==1.6.3
zeroconf==0.28.8

pycryptodome>=3.6.6

# Constrain urllib3 to ensure we deal with CVE-2019-11236 & CVE-2019-11324
urllib3>=1.24.3

# Constrain H11 to ensure we get a new enough version to support non-rfc line endings
h11>=0.12.0

# Constrain httpcore to fix exception when connection dropped
# https://github.com/encode/httpcore/issues/239
httpcore>=0.12.3

# Constrain httplib2 to protect against CVE-2020-11078
httplib2>=0.18.0

# gRPC 1.32+ currently causes issues on ARMv7, see:
# https://github.com/home-assistant/core/issues/40148
grpcio==1.31.0

# This is a old unmaintained library and is replaced with pycryptodome
pycrypto==1000000000.0.0

# To remove reliance on typing
btlewrap>=0.0.10

# This overrides a built-in Python package
enum34==1000000000.0.0
typing==1000000000.0.0
uuid==1000000000.0.0
Add default config to constaint file (#24423) 2019-06-10 23:38:14 +02:00			`PyJWT==1.7.1`
			`PyNaCl==1.3.0`
Bump aioHTTP 3.7.3 - YARL 1.6.3 (#45180) 2021-01-15 13:19:22 +01:00			`aiohttp==3.7.3`
Add default config to constaint file (#24423) 2019-06-10 23:38:14 +02:00			`aiohttp_cors==0.7.0`
Upgrade astral to 1.10.1 (#21474) 2019-02-27 14:07:51 +01:00			`astral==1.10.1`
Switch ssdp to be async by using async_upnp_client for scanning (#46554) SSDP scans no longer runs in the executor This is an interim step that converts the async_upnp_client response to netdisco's object to ensure fully backwards compatibility 2021-02-18 11:00:11 +01:00			`async-upnp-client==0.14.13`
Upgrade async_timeout to 3.0.1 (#17655) 2018-10-21 14:13:30 +02:00			`async_timeout==3.0.1`
Upgrade attrs to 19.3.0 (#28421) 2019-11-01 13:10:53 +01:00			`attrs==19.3.0`
Bump awesomeversion from 21.2.0 to 21.2.2 (#45993) 2021-02-04 16:45:59 +01:00			`awesomeversion==21.2.2`
Upgrade bcrypt to 3.1.7 (#24850) 2019-07-01 02:23:47 +02:00			`bcrypt==3.1.7`
Updated certifi to >=2020.12.5 (#44701) 2021-01-01 13:07:07 +01:00			`certifi>=2020.12.5`
Use ciso8601 library to parse datetime faster (#32128) 2020-02-24 17:33:10 +01:00			`ciso8601==2.1.3`
Bump crpytography to 3.3.1 (#45691) 2021-01-29 10:33:44 +01:00			`cryptography==3.3.1`
Add bandit, use to catch known vulnerable XML parsing (#28341) * Add bandit to pre-commit and CI, use to catch known vulnerable XML parsing * Use defusedxml instead of direct xml.etree to parse XML * Move config to tests/bandit.yaml 2019-11-18 09:10:15 +01:00			`defusedxml==0.6.0`
Upgrade distro to 1.5.0 (#34009) 2020-04-11 12:55:02 +02:00			`distro==1.5.0`
Upgrade emoji to 1.2.0 (#45847) 2021-02-02 15:56:56 +01:00			`emoji==1.2.0`
Bump hass-nabucasa 0.41.0 (#45422) 2021-01-22 13:30:49 +01:00			`hass-nabucasa==0.41.0`
Update frontend to 20210208.0 (#46225) 2021-02-08 16:42:33 +01:00			`home-assistant-frontend==20210208.0`
Add httpx as a core dep (#42071) 2020-10-19 10:18:47 +02:00			`httpx==0.16.1`
Upgrade jinja2 to >=2.11.3 (#45843) 2021-02-02 15:10:54 +01:00			`jinja2>=2.11.3`
Bump netdisco to 2.8.2 to accomodate new zeroconf exception (#38949) 2020-08-17 09:46:30 +02:00			`netdisco==2.8.2`
Bump PAHO MQTT to 1.5.1 (#42099) 2020-10-22 10:08:19 +02:00			`paho-mqtt==1.5.1`
Upgrade pillow to 8.1.0 (#45574) 2021-01-26 18:12:02 +01:00			`pillow==8.1.0`
Pin pip < 20.3 (#43771) 2020-11-30 19:38:39 +01:00			`pip>=8.0.3,<20.3`
Bump python-slugify to 4.0.1 (#38140) * Bump python-slugify to 4.0.1 * Dummy commit to re-trigger tests 2020-07-24 16:55:54 +02:00			`python-slugify==4.0.1`
Upgrade pytz to >=2021.1 (#45839) 2021-02-02 15:18:58 +01:00			`pytz>=2021.1`
Upgrade pyyaml to 5.4.1 (CVE-2020-14343) (#45624) 2021-01-28 12:05:09 +01:00			`pyyaml==5.4.1`
Upgrade requests to 2.25.1 (#44989) 2021-01-09 20:02:50 +01:00			`requests==2.25.1`
Upgrade ruamel_yaml to 0.15.100 (#26095) 2019-08-21 18:13:40 +02:00			`ruamel.yaml==0.15.100`
Add support for discovery via DHCP (#45087) * Add support for discovery via DHCP * additional tesla ouis * merge tests * dhcp test * merge requirements test * dhcp test * dhcp discovery * dhcp discovery * pylint * pylint * pylint * fix * Add matching tests * 100% cover * cleanup * fix codespell * Update exception handling * remove unneeded comment * fix options handling exception * fix options handling exception 2021-01-14 09:09:08 +01:00			`scapy==2.4.4`
Upgrade sqlalchemy to 1.3.23 (#45845) 2021-02-02 03:03:51 +01:00			`sqlalchemy==1.3.23`
Bump voluptuous-serialize 2.4.0 (#37241) * Bump voluptuous-serialize 2.4.0 * Add constant to demo * gen reqs 2020-07-07 05:04:35 +02:00			`voluptuous-serialize==2.4.0`
Bump voluptuous to 0.12.1 (#44002) * Bump voluptuous to 0.12.1 * Adjust MQTT climate test to new error msg 2020-12-07 02:49:36 +01:00			`voluptuous==0.12.1`
Bump aioHTTP 3.7.3 - YARL 1.6.3 (#45180) 2021-01-15 13:19:22 +01:00			`yarl==1.6.3`
Fix zeroconf outgoing dns compression corruption for large packets (#44828) 2021-01-04 21:18:54 +01:00			`zeroconf==0.28.8`
Block dependencies that depend on enum34 (#8698) * Block dependencies that depend on enum34 * Remove uninstalling enum34 * Update validation script * Add constraints to tox.ini * Upgrade yeelight to version that uses enum-compat * Disable sensor.skybeacon * Lint 2017-08-05 08:06:10 +02:00
Avoid insecure pycryptodome (#16238) 2018-08-28 12:49:50 +02:00			`pycryptodome>=3.6.6`

Add minimal version contrain to urllib3 (#32031) 2020-02-20 19:19:09 +01:00			`# Constrain urllib3 to ensure we deal with CVE-2019-11236 & CVE-2019-11324`
			`urllib3>=1.24.3`

Bump H11 library to support non RFC line endings (#44735) 2021-01-01 18:39:59 +01:00			`# Constrain H11 to ensure we get a new enough version to support non-rfc line endings`
			`h11>=0.12.0`

Update httpcore to prevent unhandled exception on dropped connection (#45667) Co-authored-by: Paulus Schoutsen <balloob@gmail.com> 2021-01-29 09:11:24 +01:00			`# Constrain httpcore to fix exception when connection dropped`
			`# https://github.com/encode/httpcore/issues/239`
			`httpcore>=0.12.3`

Mark min version of httplib2 (#36330) 2020-06-01 09:44:18 +02:00			`# Constrain httplib2 to protect against CVE-2020-11078`
			`httplib2>=0.18.0`

Pin gRPC to 1.31.0 to workaround amrv7 issues (#40678) 2020-09-27 21:51:37 +02:00			`# gRPC 1.32+ currently causes issues on ARMv7, see:`
			`# https://github.com/home-assistant/core/issues/40148`
			`grpcio==1.31.0`

Don't allow to use a old unsecure library (#12715) * Don't allow to use a old unsecury library * Update gen_requirements_all.py * Cryptodome fix for python-broadlink * Coinbase cryptodome fix 2018-02-27 10:58:45 +01:00			`# This is a old unmaintained library and is replaced with pycryptodome`
			`pycrypto==1000000000.0.0`
Allow disabling integrations in manifest, block uuid package being installed and disable ezviz (#38444) 2020-08-26 10:20:14 +02:00
Bump CI cache (#39283) 2020-08-26 16:53:22 +02:00			`# To remove reliance on typing`
			`btlewrap>=0.0.10`

Block typing from being installed (#37707) 2020-08-26 14:51:41 +02:00			`# This overrides a built-in Python package`
			`enum34==1000000000.0.0`
			`typing==1000000000.0.0`
Allow disabling integrations in manifest, block uuid package being installed and disable ezviz (#38444) 2020-08-26 10:20:14 +02:00			`uuid==1000000000.0.0`
Block typing from being installed (#37707) 2020-08-26 14:51:41 +02:00