requirements.txt

requests~=2.32.5; python_version < "3.10"
requests~=2.34.0; python_version >= "3.10"
# Core dependencies
django>=4.2.0,<5.0.0
python-dotenv>=1.0.0
cryptography>=46.0.6,<47.0
pyjwt>=2.10.0
fastapi>=0.110.0
flask>=3.0.0
flask-session>=0.5.0
uvicorn>=0.25.0
python-dotenv>=1.0.0
itsdangerous>=2.2.0
nest-asyncio>=1.5.8
frozendict>=2.4.3,<3.0
python-dateutil>=2.9.0,<3.0
urllib3>=2.6.3
Authlib>=1.3.0,<2.0
typing-extensions>=4.11.0,<5.0
certifi>=2026.1.4
pydantic>=2.0.0,<3.0.0

# Development dependencies
# pytest 9 requires Python >=3.10; keep <9 for Python 3.9 (pytest 9 dropped 3.9 support)
# CVE-2025-71176 is fixed in 9.0.3 (only available for Python >=3.10)
pytest>=9.0.3; python_version >= "3.10"
pytest>=7.4.0,<9; python_version < "3.10"
pytest-django>=4.5.2
pytest-asyncio>=0.21.1
pytest-cov>=7.0.0
coverage>=7.10.6
pytest-timeout>=2.2.0
black>=23.7.0
flake8>=6.1.0
isort>=5.12.0
mypy>=1.5.0
PyYAML>=6.0.1
twine>=4.0.2

# Other dependencies
httpx>=0.25.0,<0.29.0
pygments>=2.20.0 # not directly required, pinned by Snyk to avoid a vulnerability