constraints.txt

# Constraints file to ensure consistent dependency versions across environments
# This file is used with pip install -c constraints.txt
# Update these versions when updating requirements.txt
# Python 3.12+ required as per pyproject.toml

# Core dependencies
aiohttp>=3.8.0,<4.0.0

# Security-critical indirect dependencies
# filelock: GHSA-qmgc-5h2g-mvrw (TOCTOU) - fixed in 3.20.3
filelock>=3.20.3,<4.0.0
# virtualenv: GHSA-597g-3phw-6986 (TOCTOU) - fix pending release (>20.36.1)
# Using latest available until patch is released
virtualenv>=20.36.1,<22.0.0
requests>=2.32.4,<3.0.0
urllib3>=2.5.0,<3.0.0
anyio>=4.0.0,<5.0.0
termcolor>=2.0.1,<4.0.0
pyyaml>=6.0,<7.0
tabulate>=0.9.0,<1.0.0
tqdm>=4.64.0,<5.0.0
psutil>=6.1.0,<8.0.0
packaging>=21.0,<27.0

# Fuzzy matching dependencies
rapidfuzz>=3.0.0,<4.0.0
python-Levenshtein>=0.20.0,<1.0.0

# Development dependencies
pytest>=8.0.0,<10.0.0
pytest-cov>=4.0.0,<8.0.0
pytest-mock>=3.10.0,<4.0.0
pytest-timeout>=2.1.0,<3.0.0
pytest-asyncio>=0.21.0,<2.0.0
pytest-xdist>=3.3.0,<4.0.0
coverage>=7.0.0,<8.0.0
black>=24.0.0,<27.0.0
ruff>=0.11.12,<1.0.0
mypy>=1.16.0,<2.0.0
bandit>=1.7.5,<2.0.0
safety>=3.0.0,<4.0.0
pip-audit>=2.6.0,<3.0.0
pre-commit>=3.5.0,<5.0.0
pydocstyle>=6.3.0,<7.0.0
radon>=6.0.0,<7.0.0
vulture>=2.9.0,<3.0.0

# Type stubs
types-PyYAML>=6.0.0,<7.0.0
types-tabulate>=0.9.0,<1.0.0
types-tqdm>=4.64.0,<5.0.0
types-psutil>=6.1.0,<8.0.0
types-setuptools>=68.0.0,<83.0.0
types-requests>=2.32.0,<3.0.0

# Build and distribution
build>=0.10.0,<2.0.0
twine>=4.0.2,<7.0.0
wheel>=0.40.0,<1.0.0

# Documentation
sphinx>=7.0.0,<10.0.0
sphinx-rtd-theme>=1.3.0,<4.0.0

# Development utilities
tox>=4.0.0,<5.0.0