fix: pin setuptools <73 as newer versions removed pkg_resources

dahagag · dahagag · commit 948f4ce204af · 2026-02-08T18:12:23.000+02:00
Setuptools 73+ removed pkg_resources module which is still required by
flask-security 3.0.0. Testing showed:
- setuptools 72.2.0: ✅ pkg_resources available (deprecated but works)
- setuptools 82.0.0: ❌ pkg_resources removed

Constraint: setuptools&gt;=65.5.0,&lt;73.0.0
diff --git a/requirements-webapp.txt b/requirements-webapp.txt
@@ -1,4 +1,4 @@
-setuptools>=65.5.0  # Required for pkg_resources in Python 3.12+ (no longer included by default)
+setuptools>=65.5.0,<73.0.0  # Required for pkg_resources in Python 3.12+ (no longer included by default). Upper bound because setuptools 73+ removed pkg_resources
 Babel==2.14.0  # 2.14.0+ required for Python 3.13 (removed cgi module dependency)
 Flask-BabelEx==0.9.4
 pytz  # Required by Flask-BabelEx (no longer a transitive dep of Babel 2.14+)

Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,4 @@`
`1`		`-setuptools>=65.5.0 # Required for pkg_resources in Python 3.12+ (no longer included by default)`
	`1`	`+setuptools>=65.5.0,<73.0.0 # Required for pkg_resources in Python 3.12+ (no longer included by default). Upper bound because setuptools 73+ removed pkg_resources`
`2`	`2`	`Babel==2.14.0 # 2.14.0+ required for Python 3.13 (removed cgi module dependency)`
`3`	`3`	`Flask-BabelEx==0.9.4`
`4`	`4`	`pytz # Required by Flask-BabelEx (no longer a transitive dep of Babel 2.14+)`