From ddac5284fe8f5519c567035d95582e5cccd436a3 Mon Sep 17 00:00:00 2001
From: Jun Siang Cheah <git@jscheah.me>
Date: Tue, 30 Apr 2024 21:21:00 +0100
Subject: [PATCH 1/2] feat: specify versions for python packages

---
 backend/requirements.txt | 88 ++++++++++++++++++++--------------------
 1 file changed, 44 insertions(+), 44 deletions(-)

diff --git a/backend/requirements.txt b/backend/requirements.txt
index 60e4f89c..79eddeae 100644
--- a/backend/requirements.txt
+++ b/backend/requirements.txt
@@ -1,61 +1,61 @@
-fastapi
-uvicorn[standard]
-pydantic
-python-multipart
+fastapi==0.109.2
+uvicorn[standard]==0.22.0
+pydantic==2.7.1
+python-multipart==0.0.9
 
-flask
-flask_cors
+Flask==3.0.3
+Flask-Cors==4.0.0
 
-python-socketio
-python-jose
-passlib[bcrypt]
-uuid
+python-socketio==5.11.2
+python-jose==3.3.0
+passlib[bcrypt]==1.7.4
+uuid==1.30
 
-requests
-aiohttp
-peewee
-peewee-migrate
-psycopg2-binary
-pymysql
-bcrypt
+requests==2.31.0
+aiohttp==3.9.5
+peewee==3.17.3
+peewee-migrate==1.12.2
+psycopg2-binary==2.9.9
+PyMySQL==1.1.0
+bcrypt==4.1.2
 
 litellm==1.35.28
 litellm[proxy]==1.35.28
 
-boto3
+boto3==1.34.95
 
-argon2-cffi
-apscheduler
-google-generativeai
+argon2-cffi==23.1.0
+APScheduler==3.10.4
+google-generativeai==0.5.2
 
 langchain==0.1.16
 langchain-community==0.0.34
-langchain-chroma
+langchain-chroma==0.1.0
 
-fake_useragent
-chromadb
-sentence_transformers
-pypdf
-docx2txt
-unstructured
-markdown
-pypandoc
-pandas
-openpyxl
-pyxlsb
-xlrd
-validators
+fake-useragent==1.5.1
+chromadb==0.4.24
+sentence-transformers==2.7.0
+pypdf==4.2.0
+docx2txt==0.8
+unstructured==0.11.8
+Markdown==3.6
+pypandoc==1.13
+pandas==2.2.2
+openpyxl==3.1.2
+pyxlsb==1.0.10
+xlrd==2.0.1
+validators==0.28.1
 
-opencv-python-headless
-rapidocr-onnxruntime
+opencv-python-headless==4.9.0.80
+rapidocr-onnxruntime==1.2.3
 
-fpdf2
-rank_bm25
+fpdf2==2.7.8
+rank-bm25==0.2.2
 
-faster-whisper
+faster-whisper==1.0.1
 
-PyJWT
-pyjwt[crypto]
+PyJWT==2.8.0
+PyJWT[crypto]==2.8.0
 
-black
-langfuse
+black==24.4.2
+langfuse==2.27.3

From fe56c0a7ac08353d0dabff6e9f790c03efd0d531 Mon Sep 17 00:00:00 2001
From: Jun Siang Cheah <git@jscheah.me>
Date: Tue, 30 Apr 2024 21:23:52 +0100
Subject: [PATCH 2/2] feat: add dependabot config for keeping python packages
 updated

---
 .github/dependabot.yml | 11 +++++++++++
 1 file changed, 11 insertions(+)
 create mode 100644 .github/dependabot.yml

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 00000000..3dd5eaf6
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,11 @@
+version: 2
+updates:
+- package-ecosystem: pip
+  directory: "/backend"
+  schedule:
+    interval: daily
+    time: "13:00"
+  groups:
+    python-packages:
+      patterns:
+        - "*"