requirements.txt

# -*- conf-mode -*-
setuptools>=80.9.0  # Require this first, to prevent later errors
#
aiosmtpd>=1.4.6
argon2-cffi>=25.1.0  # For the Argon2 password hasher option
beautifulsoup4>=4.13.4  # Only used in tests
bibtexparser>=1.4.4  # Only used in tests
bleach>=6.2.0  # project is deprecated but supported
types-bleach>=6.2.0
boto3>=1.39.15
boto3-stubs[s3]>=1.39.15
botocore>=1.39.15
celery>=5.5.3
coverage>=7.9.2
defusedxml>=0.7.1    # for TastyPie when using xml; not a declared dependency
Django>4.2,<5
django-admin-rangefilter>=0.13.3
django-analytical>=3.2.0
django-bootstrap5>=25.1
django-celery-beat>=2.7.0,<2.8.0  # pin until https://github.com/celery/django-celery-beat/issues/875 is resolved, then revisit
django-celery-results>=2.6.0
django-csp>=3.7
django-cors-headers>=4.7.0
django-debug-toolbar>=6.0.0
django-filter>=24.3
django-markup>=1.10    # Limited use - need to reconcile against direct use of markdown
django-oidc-provider==0.8.2    # 0.8.3 changes logout flow and claim return
django-simple-history>=3.10.1
django-storages>=1.14.6
django-stubs>=4.2.7,<5    # The django-stubs version used determines the the mypy version indicated below
django-tastypie>=0.15.1  # Version must be kept in sync with Django
django-vite>=3.1.0
django-widget-tweaks>=1.4.12
djangorestframework>=3.16.0
docutils>=0.22.0  # Used only by dbtemplates for RestructuredText
types-docutils>=0.21.0  # should match docutils (0.22.0 not out yet)
drf-spectacular>=0.27
drf-standardized-errors[openapi] >= 0.15.0
factory-boy>=3.3.3
gunicorn>=23.0.0
hashids>=1.3.1
html2text>=2025.4.15  # Used only to clean comment field of secr/sreq
html5lib>=1.1    # Only used in tests
icalendar>=5.0.0 
inflect>= 7.5.0
jsonfield>=3.2.0  # deprecated - need to replace with Django's JSONField
jsonschema[format]>=4.25.0
jwcrypto>=1.5.6  # for signed notifications - this is aspirational, and is not really used.
logging_tree>=1.10  # Used only by the showloggers management command
lxml>=6.0.0
markdown>=3.8.0
types-markdown>=3.8.0
mock>=5.2.0  # should replace with unittest.mock and remove dependency
types-mock>=5.2.0
mypy~=1.11.2  # Version requirements loosely determined by django-stubs.
oic>=1.7.0  # Used only by tests
opentelemetry-sdk>=1.38.0
opentelemetry-instrumentation-django>=0.59b0
opentelemetry-instrumentation-psycopg2>=0.59b0
opentelemetry-instrumentation-pymemcache>=0.59b0
opentelemetry-instrumentation-requests>=0.59b0
opentelemetry-exporter-otlp-proto-http>=1.38.0
pillow>=11.3.0
psycopg2>=2.9.10
pyang>=2.6.1
pydyf>=0.11.0
pyflakes>=3.4.0
pyopenssl>=25.1.0  # Used by urllib3.contrib, which is used by PyQuery but not marked as a dependency
pyquery>=2.0.1
python-dateutil>=2.9.0
types-python-dateutil>=2.9.0
python-json-logger>=3.3.0
python-magic==0.4.18    # Versions beyond the yanked .19 and .20 introduce form failures
pymemcache>=4.0.0  # for django.core.cache.backends.memcached.PyMemcacheCache
python-mimeparse>=2.0.0  # from TastyPie
pytz==2025.2  # Pinned as changes need to be vetted for their effect on Meeting fields
types-pytz==2025.2.0.20250809  # match pytz version
requests>=2.32.4
types-requests>=2.32.4
requests-mock>=1.12.1
rfc2html>=2.0.3
scout-apm>=3.4.0
selenium>=4.34.2
tblib>=3.1.0  # So that the django test runner provides tracebacks
tlds>=2022042700  # Used to teach bleach about which TLDs currently exist
tqdm>=4.67.1
unidecode>=1.4.0
urllib3>=2.5.0
weasyprint>=66.0
xml2rfc>=3.30.0
xym>=0.6,<1.0
zxcvbn>=4.5.0
types-zxcvbn~=4.5.0.20250223  # match zxcvbn version