MIME-Version: 1.0
References: 
 <CA+renyW-Fc0m3+dp0kGwhHPuhuNbk4x2YZSSx5b8KTfbBbc45w@mail.gmail.com>
In-Reply-To: 
 <CA+renyW-Fc0m3+dp0kGwhHPuhuNbk4x2YZSSx5b8KTfbBbc45w@mail.gmail.com>
From: Magnus Hagander <magnus@hagander.net>
Date: Thu, 12 Feb 2026 13:02:46 +0100
Message-ID: 
 <CABUevEyYnW63ai80m+X5884LADi6K4=VDeEpuVRC1N4cfe94Lg@mail.gmail.com>
Subject: Re: Upgrade some pgweb python dependencies
To: Paul A Jungwirth <pj@illuminatedcomputing.com>
Cc: pgsql-www@lists.postgresql.org
Content-Type: multipart/alternative; boundary="0000000000000a9405064a9f45cb"
Archived-At: 
 <https://www.postgresql.org/message-id/CABUevEyYnW63ai80m%2BX5884LADi6K4%3DVDeEpuVRC1N4cfe94Lg%40mail.gmail.com>
Precedence: bulk

--0000000000000a9405064a9f45cb
Content-Type: text/plain; charset="UTF-8"

On Wed, 11 Feb 2026 at 23:40, Paul A Jungwirth <pj@illuminatedcomputing.com>
wrote:

> I submitted a patch to pgarchive recently, which led me to setting up
> pgweb, based on the instructions in docs/dev_install.rst.[0]
>
> Using debian 13 and python 3.9, I ran into several errors running `pip
> install -r requirements.txt`. The versions pinned there look quite
> old. The latest allowed version of pycryptodomex even seems to use
> python2 syntax, so I don't understand how it works for anyone else.
>

These requirements files are, ahem, badly maintained. I assume nobody
really uses them :/

FWIW, since you're on debian, the easiest is to just use the debian
packaged versions of basically everything. Our production is on debian
bookworm and testing is on debian trixie, so either of those should work.
The only thing you need to install from pip at this point is Django itself
and cvss (if you want the security pages).

Doesn't mean the requirements.txt shouldn't be better maintained, so we
should look at that, but as a quick-fix for your current situation and to
make sure you're running something that matches what's actually used in
production.

//Magnus

--0000000000000a9405064a9f45cb
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div dir=3D"ltr">On Wed, 11 Feb 2026 at 23:40, Paul A Jung=
wirth &lt;<a href=3D"mailto:pj@illuminatedcomputing.com">pj@illuminatedcomp=
uting.com</a>&gt; wrote:</div><div class=3D"gmail_quote gmail_quote_contain=
er"><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;bor=
der-left:1px solid rgb(204,204,204);padding-left:1ex">I submitted a patch t=
o pgarchive recently, which led me to setting up<br>
pgweb, based on the instructions in docs/dev_install.rst.[0]<br>
<br>
Using debian 13 and python 3.9, I ran into several errors running `pip<br>
install -r requirements.txt`. The versions pinned there look quite<br>
old. The latest allowed version of pycryptodomex even seems to use<br>
python2 syntax, so I don&#39;t understand how it works for anyone else.<br>=
</blockquote><div><br></div><div>These requirements files are, ahem, badly =
maintained. I assume nobody really uses them :/</div><div><br></div><div>FW=
IW, since you&#39;re on debian, the easiest is to just use the debian packa=
ged versions of basically everything. Our production is on debian bookworm =
and testing is on debian trixie, so either of those should work. The only t=
hing you need to install from pip at this point is Django itself and cvss (=
if you want the security pages).=C2=A0</div><div><br></div><div>Doesn&#39;t=
 mean the requirements.txt shouldn&#39;t be better maintained, so we should=
 look at that, but as a quick-fix for your current situation and to make su=
re you&#39;re running something that matches what&#39;s actually used in pr=
oduction.</div><div><br></div><div>//Magnus</div><div><br></div></div><div =
dir=3D"ltr" class=3D"gmail_signature"><div dir=3D"ltr"></div></div></div>

--0000000000000a9405064a9f45cb--