Pin grpcio

Avoid cython 3 due to yaml/pyyaml#702
TheRealHaoLiu · Jun 3, 2024 · f7c548f · f7c548f
1 parent 942a272
commit f7c548f
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 7 deletions.
diff --git a/requirements/requirements.in b/requirements/requirements.in
@@ -2,15 +2,14 @@ aiohttp>=3.8.6  # CVE-2023-47627
 ansiconv==1.0.0  # UPGRADE BLOCKER: from 2013, consider replacing instead of upgrading
 asciichartpy
 asn1
-asyncpg
 azure-identity
 azure-keyvault
 boto3
 botocore
 channels
 channels-redis==3.4.1  # see UPGRADE BLOCKERs
 cryptography>=41.0.7  # CVE-2023-49083
-Cython<3 # this is needed as a build dependency, one day we may have separated build deps
+Cython<3 # due to https://github.com/yaml/pyyaml/pull/702
 daphne
 distro
 django==4.2.6  # CVE-2023-43665
@@ -29,6 +28,7 @@ djangorestframework>=3.15.0
 djangorestframework-yaml
 filelock
 GitPython>=3.1.37  # CVE-2023-41040
+grpcio<1.63.0 # 1.63.0+ requires cython>=3
 hiredis==2.0.0  # see UPGRADE BLOCKERs
 irc
 jinja2>=3.1.3  # CVE-2024-22195

diff --git a/requirements/requirements.txt b/requirements/requirements.txt
@@ -31,10 +31,7 @@ async-timeout==4.0.3
     # via
     #   aiohttp
     #   aioredis
-    #   asyncpg
     #   redis
-asyncpg==0.29.0
-    # via -r /awx_devel/requirements/requirements.in
 attrs==23.2.0
     # via
     #   aiohttp
@@ -200,8 +197,10 @@ googleapis-common-protos==1.63.0
     # via
     #   opentelemetry-exporter-otlp-proto-grpc
     #   opentelemetry-exporter-otlp-proto-http
-grpcio==1.63.0
-    # via opentelemetry-exporter-otlp-proto-grpc
+grpcio==1.62.2
+    # via
+    #   -r /awx_devel/requirements/requirements.in
+    #   opentelemetry-exporter-otlp-proto-grpc
 hiredis==2.0.0
     # via
     #   -r /awx_devel/requirements/requirements.in