squash 2184 - pinned authlib, cryptography, and ddtrace

department-of-veterans-affairs · Dec 24, 2024 · 60eaaa5 · 60eaaa5
1 parent eac6e55
commit 60eaaa5
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/pyproject.toml b/pyproject.toml
@@ -10,7 +10,8 @@ package-mode = false
 [tool.poetry.dependencies]
 python = "~3.10"
 alembic-utils = "*"
-Authlib = "*"
+# TODO - was *@1.3.2.  Upgrades to 1.4.0 breaks?  The newer version is undocumented.
+Authlib = "~1.3.2"
 boto3 = "*"
 botocore = "*"
 cachelib = "*"
@@ -22,7 +23,8 @@ click-datetime = "*"
 # https://cryptography.io/en/latest/changelog/#v44-0-0
 # https://pkgs.alpinelinux.org/package/v3.19/main/x86_64/openssl
 cryptography = "~43"
-ddtrace = "*"
+# TODO - was *@2.18.1.  Upgrade breaks?
+ddtrace = "~2.16.2"
 docopt = "*"
 fido2 = "*"
 Flask = "*"