requirements.txt

# Minimal version; actual urllib3 constraints are managed per Python version in separate constraint files
urllib3>=1.26.20
v3io-frames~=0.13.11
GitPython~=3.1, >=3.1.41
aiohttp~=3.11
aiohttp-retry~=2.9
click~=8.1
nest-asyncio~=1.0
ipython~=8.10
nuclio-jupyter~=0.11.2
numpy>=1.26.4, <1.27.0
# pandas 2.2 requires sqlalchemy 2
pandas>=1.2, <2.2
# used as a the engine for parquet files by pandas
# >=10 to resolve https://issues.apache.org/jira/browse/ARROW-16838 bug that is triggered by ingest (ML-3299)
# <18 to prevent bugs due to major upgrading
pyarrow>=10.0, <18
pyyaml>=6.0.2, <7
requests~=2.32
# >=0.8.6 from kfp 1.6.0 (and still up until 1.8.10)
tabulate~=0.8.6
v3io~=0.7.0
# kfp 1.8 blocks pydantic 2
# pydantic 1.10.15 introduces the v1 namespace, so we can later upgrade to pydantic 2 without breaking the code
pydantic>=1.10.15
mergedeep~=1.3
semver~=3.0
dependency-injector~=4.41
# should be identical to gcs and s3fs.
fsspec>=2025.5.1, <=2025.7.0
v3iofs~=0.1.17
storey~=1.11.0
inflection~=0.5.0
python-dotenv~=1.0
setuptools>=75.2
deprecated~=1.2
jinja2~=3.1, >=3.1.6
orjson>=3.9.15, <4
# mlrun pipeline adapters
mlrun-pipelines-kfp-common~=0.5.9
mlrun-pipelines-kfp-v1-8~=0.5.8
docstring_parser~=0.16
# TODO: Remove it after moving notificaions to the server side(ML-8069)
aiosmtplib~=3.0
# # deepdiff 8.6.0 has a vulnerability (Class Pollution in Delta class leading to DoS)
deepdiff>=8.6.1,<9.0.0
pyjwt~=2.10