Merge pull request #1884 from cheahjs/feat/freeze-py-and-dependabot

feat: pin all python packages and setup dependabot

.github/dependabot.yml

@@ -0,0 +1,11 @@
+version: 2
+updates:
+- package-ecosystem: pip
+  directory: "/backend"
+  schedule:
+    interval: daily
+    time: "13:00"
+  groups:
+    python-packages:
+      patterns:
+        - "*"

backend/requirements.txt

@@ -1,61 +1,61 @@
-fastapi
+fastapi==0.109.2
-uvicorn[standard]
+uvicorn[standard]==0.22.0
-pydantic
+pydantic==2.7.1
-python-multipart
+python-multipart==0.0.9
 
-flask
+Flask==3.0.3
-flask_cors
+Flask-Cors==4.0.0
 
-python-socketio
+python-socketio==5.11.2
-python-jose
+python-jose==3.3.0
-passlib[bcrypt]
+passlib[bcrypt]==1.7.4
-uuid
+uuid==1.30
 
-requests
+requests==2.31.0
-aiohttp
+aiohttp==3.9.5
-peewee
+peewee==3.17.3
-peewee-migrate
+peewee-migrate==1.12.2
-psycopg2-binary
+psycopg2-binary==2.9.9
-pymysql
+PyMySQL==1.1.0
-bcrypt
+bcrypt==4.1.2
 
 litellm==1.35.28
 litellm[proxy]==1.35.28
 
-boto3
+boto3==1.34.95
 
-argon2-cffi
+argon2-cffi==23.1.0
-apscheduler
+APScheduler==3.10.4
-google-generativeai
+google-generativeai==0.5.2
 
 langchain==0.1.16
 langchain-community==0.0.34
-langchain-chroma
+langchain-chroma==0.1.0
 
-fake_useragent
+fake-useragent==1.5.1
-chromadb
+chromadb==0.4.24
-sentence_transformers
+sentence-transformers==2.7.0
-pypdf
+pypdf==4.2.0
-docx2txt
+docx2txt==0.8
-unstructured
+unstructured==0.11.8
-markdown
+Markdown==3.6
-pypandoc
+pypandoc==1.13
-pandas
+pandas==2.2.2
-openpyxl
+openpyxl==3.1.2
-pyxlsb
+pyxlsb==1.0.10
-xlrd
+xlrd==2.0.1
-validators
+validators==0.28.1
 
-opencv-python-headless
+opencv-python-headless==4.9.0.80
-rapidocr-onnxruntime
+rapidocr-onnxruntime==1.2.3
 
-fpdf2
+fpdf2==2.7.8
-rank_bm25
+rank-bm25==0.2.2
 
-faster-whisper
+faster-whisper==1.0.1
 
-PyJWT
+PyJWT==2.8.0
-pyjwt[crypto]
+PyJWT[crypto]==2.8.0
 
-black
+black==24.4.2
-langfuse
+langfuse==2.27.3