Pinning dependencies in requirements.txt (#4885)

* requirements

* pins

* clogs

* python multipart

* python multipart

* clogs

* clog

CHANGELOG.md

@@ -11,10 +11,12 @@
 ## Other Changes:
 
 - Warning on mobile that if a user leaves the tab, websocket connection may break. On broken connection, tries to rejoin queue and displays error conveying connection broke. By [@aliabid94](https://github.com/aliabid94) in [PR 4742](https://github.com/gradio-app/gradio/pull/4742)
+* Pinned dependencies to major versions to reduce the likelihood of a broken `gradio` due to changes in downstream dependencies by [@abidlabs](https://github.com/abidlabs) in [PR 4885](https://github.com/gradio-app/gradio/pull/4885)
+
 
 ## Breaking Changes:
 
-No changes to highlight.
+Motivated by the release of `pydantic==2.0`, which included breaking changes that broke a large number of Gradio apps, we've pinned many gradio dependencies. Note that pinned dependencies can cause downstream conflicts, so this may be a breaking change. That being said, we've kept the pins pretty loose, and we're expecting change to be better for the long-term stability of Gradio apps.
 
 # Version 3.36.1
 

client/python/CHANGELOG.md

@@ -32,7 +32,7 @@ No changes to highlight.
 
 ## Full Changelog:
 
-No changes to highlight.
+* Pinned dependencies to major versions to reduce the likelihood of a broken `gradio_client` due to changes in downstream dependencies by [@abidlabs](https://github.com/abidlabs) in [PR 4885](https://github.com/gradio-app/gradio/pull/4885)
 
 # Version 0.2.8
 

client/python/requirements.txt

@@ -1,7 +1,7 @@
-requests
-websockets
-packaging
 fsspec
+httpx
 huggingface_hub>=0.13.0
-typing_extensions
-httpx
+packaging
+requests~=2.0
+typing_extensions~=4.0
+websockets>=10.0,<12.0

requirements.txt

@@ -1,26 +1,27 @@
-aiofiles
-aiohttp
-altair>=4.2.0
+aiofiles>=22.0,<24.0
+aiohttp~=3.0
+altair>=4.2.0,<6.0
 fastapi
 ffmpy
 gradio_client>=0.2.7
 httpx
 huggingface_hub>=0.14.0
-Jinja2
+Jinja2<4.0
 markdown-it-py[linkify]>=2.0.0
-pygments>=2.12.0
 mdit-py-plugins<=0.3.3
-markupsafe
-matplotlib
-numpy
-orjson
-pandas
-pillow
-pydantic
-python-multipart
+markupsafe~=2.0
+matplotlib~=3.0
+numpy~=1.0
+orjson~=3.0
+packaging
+pandas>=1.0,<3.0
+pillow>=8.0,<11.0
+pydantic>=1.7.4,!=1.8,!=1.8.1,!=2.0.0,!=2.0.1,<3.0.0
+python-multipart  # required for fastapi forms
 pydub
-pyyaml
-requests
-semantic_version
+pyyaml>=5.0,<7.0
+requests~=2.0
+semantic_version~=2.0
+typing_extensions~=4.0
 uvicorn>=0.14.0
-websockets>=10.0
+websockets>=10.0,<12.0

test/requirements.txt

@@ -149,8 +149,6 @@ pydantic==1.9.1
     # via
     #   -r requirements.in
     #   fastapi
-pygments==2.12.0
-    # via ipython
 pyparsing==3.0.9
     # via packaging
 pyrsistent==0.18.1