Upgrade requirements (#262)

* upgrade requirements

* one less hash

* add notes in readme

Author: peterbe

.github/workflows/ci.yml

@@ -37,19 +37,18 @@ jobs:
         uses: actions/[email protected]
         with:
           path: ~/.cache/pip
-          key: ${{ runner.os }}-pip-${{ hashFiles('requirements.txt') }}-${{ hashFiles('requirements-constraints.txt') }}-${{ hashFiles('dev-requirements.txt') }}
+          key: ${{ runner.os }}-pip-${{ hashFiles('requirements.txt') }}-${{ hashFiles('dev-requirements.txt') }}
           restore-keys: |
             ${{ runner.os }}-pip-
 
       - name: Install Dependencies
         run: |
           pip install -U pip wheel --progress-bar off
-          # pip install -r requirements.txt
-          # Have to do this because of a bug in the new pip resolver (grr!!)
-          pip install -r dev-requirements.txt -r requirements-constraints.txt -r requirements.txt --progress-bar off
+          pip install -r requirements.txt --progress-bar off
 
       - name: Run lints
         run: |
+          pip install -r dev-requirements.txt --progress-bar off
           black --check app.py
           flake8 app.py
           yarn prettier:check

README.md

@@ -32,6 +32,7 @@ front end.
 To install dependencies:
 
 ```
+pip install -r requirements.txt
 pip install -r dev-requirements.txt
 yarn install
 ```
@@ -76,3 +77,14 @@ This file will automatically be read when running the Python backend.
 
 For the front-end, we check the output of `yarn run build`
 as a `build.zip` file. This is generated by running `./bin/build.sh`.
+
+## Upgrade dependencies
+
+To upgrade a dependency, edit `requirements.in` and then run:
+
+```
+pip-compile --generate-hashes requirements.in
+```
+
+Now you should have a change in `requirements.in` _and_ in `requirements.txt`.
+Check in both.

dev-requirements.txt

@@ -1,9 +1,3 @@
--r requirements.txt
--c requirements-constraints.txt
-
-black==21.5b0 \
-    --hash=sha256:0e80435b8a88f383c9149ae89d671eb2095b72344b0fe8a1d61d2ff5110ed173 \
-    --hash=sha256:9dc2042018ca10735366d944c2c12d9cad6dec74a3d5f679d09384ea185d9943
-flake8==3.9.2 \
-    --hash=sha256:07528381786f2a6237b061f6e96610a4167b226cb926e2aa2b6b1d78057c576b \
-    --hash=sha256:bf8fd333346d844f616e8d47905ef3a3384edae6b4e9beb0c5101e25e3110907
+black==21.5b0
+flake8==3.9.2
+pip-tools==6.1.0