[tor-bugs] #29484 [Circumvention/BridgeDB]: Update the requirements.txt and freeze them on release

[Tor Bug Tracker & Wiki]

#29484: Update the requirements.txt and freeze them on release
-------------------------------------------------+-------------------------
 Reporter:  dgoulet                              |          Owner:  phw
     Type:  task                                 |         Status:
                                                 |  needs_review
 Priority:  Medium                               |      Milestone:
Component:  Circumvention/BridgeDB               |        Version:
 Severity:  Normal                               |     Resolution:
 Keywords:  bridgedb, anti-censorship-roadmap-   |  Actual Points:
  september                                      |
Parent ID:  #31280                               |         Points:  2
 Reviewer:  cohosh                               |        Sponsor:
                                                 |  Sponsor30-can
-------------------------------------------------+-------------------------
Changes (by phw):

 * status:  assigned => needs_review
 * reviewer:  sysrqb => cohosh


Comment:

 Phew, that was more work than I anticipated. I just pushed a patch set
 that updates all of BridgeDB's requirements to their latest respective
 versions:
 https://github.com/NullHypothesis/bridgedb/compare/develop...fix/29484

 [https://travis-ci.org/NullHypothesis/bridgedb/builds/592164619 All unit
 tests pass] and the code works in production.

 I also added a script, `check-for-new-dependencies`, which goes over our
 dependencies and checks for new versions. We should run it before each
 release. Is this reasonable? Or are we better off doing a `pip freeze`?

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/29484#comment:7>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online