aliyun-python-sdk-core==2.13.36
aliyun-python-sdk-ecs==4.24.25
arcaflow-plugin-sdk==0.14.0
boto3>=1.34.0  # Updated to support urllib3 2.x
azure-identity==1.16.1
azure-keyvault==4.2.0
azure-mgmt-compute==30.5.0
azure-mgmt-network==27.0.0
coverage==7.6.12
datetime==5.4
docker>=6.0,<7.0  # docker 7.0+ has breaking changes; upgrade to 7.x to allow requests>=2.33.0
gitpython==3.1.50
google-auth==2.37.0
google-cloud-compute==1.22.0
ibm_cloud_sdk_core>=3.20.0  # Requires urllib3>=2.1.0 (compatible with updated boto3)
ibm_vpc==0.26.3  # Requires ibm_cloud_sdk_core
jinja2==3.1.6
lxml==6.1.0
kubernetes>=35.0.0
krkn-lib==6.0.9
numpy==1.26.4
pandas==2.2.0
openshift-client==1.0.21
paramiko==3.4.0
pyVmomi==8.0.2.0.1
pyfiglet==1.0.2
pytest==9.0.3
python-ipmi==0.5.4
python-openstackclient==6.5.0
requests<2.32  # requests 2.32+ breaks docker Unix socket support; blocked until docker>=7.0
requests-unixsocket>=0.4.0  # Required for Docker Unix socket support
urllib3>=2.6.3  # CVE fixes; kubernetes>=35.0.0 allows urllib3>=2.x
service_identity==24.1.0
PyYAML==6.0.1
setuptools==78.1.1
wheel>=0.44.0
zope.interface==6.1
colorlog==6.10.1

git+https://github.com/vmware/vsphere-automation-sdk-python.git@v8.0.0.0
cryptography>=46.0.7 # pinned to avoid multiple CVEs (subgroup attack, buffer overflow, DNS constraints)
protobuf>=4.25.8 # not directly required, pinned by Snyk to avoid a vulnerability