4f58211e7a
- Move from lxml lib direct usage to defusedxml lib [1] to fix B320 [2] [1] https://pypi.org/project/defusedxml/0.7.1/ [2] https://bandit.readthedocs.io/en/1.7.5/blacklists/blacklist_calls.html#b313-b320-xml Change-Id: Id1faa9227415884d15c737ace5a0e0e5de3afa81
24 lines
646 B
Plaintext
24 lines
646 B
Plaintext
# The order of packages is significant, because pip processes them in the order
|
|
# of appearance. Changing the order has an impact on the overall integration
|
|
# process, which may cause wedges in the gate later.
|
|
|
|
pbr!=2.1.0,>=2.0.0 # Apache-2.0
|
|
|
|
stevedore>=1.20.0 # Apache-2.0
|
|
netaddr>=0.7.18 # BSD
|
|
|
|
oslo.i18n>=3.15.3 # Apache-2.0
|
|
oslo.utils>=3.33.0 # Apache-2.0
|
|
|
|
# for the routing notifier
|
|
PyYAML>=3.13 # MIT
|
|
|
|
lxml>=4.5.0 # BSD
|
|
defusedxml>=0.7.1 # BSD
|
|
suds-community>=0.6 # LGPLv3+
|
|
eventlet!=0.18.3,!=0.20.1,>=0.18.2 # MIT
|
|
requests>=2.14.2 # Apache-2.0
|
|
urllib3>=1.21.1 # MIT
|
|
oslo.concurrency>=3.26.0 # Apache-2.0
|
|
oslo.context>=2.19.2 # Apache-2.0
|