Pin python dependencies

.github/workflows/ci.yml

@@ -373,6 +373,21 @@ jobs:
         run: |
           python3 -m pip install --user --upgrade -r requirements.txt
 
+      - name: Install Cython for building PyOpenGL_accelerate
+        run: |
+          python3 -m pip install --user Cython
+
+      - name: Install Rust toolchain
+        run: |
+          curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y
+          echo "$HOME/.cargo/bin" >> $GITHUB_PATH
+
+      - name: Verify Rust installation
+        run: |
+          source $HOME/.cargo/env
+          rustc --version
+          cargo --version
+
       # For Rocky Linux, we can't cache the dependencies of Open RV 
       # because there is not enough room in the cache (10GB limit) for all platforms.
 

src/build/requirements.txt.in

@@ -3,26 +3,26 @@
 #       To update OpenTimelineIO version, edit _opentimelineio_version in cmake/dependencies/python3.cmake
 # NOTE: Using --no-binary :all: in pip install ensures all packages are built from source against our custom Python.
 
-pip                     # License: MIT License (MIT)
-setuptools              # License: MIT License
+pip==24.0               # License: MIT License (MIT)
+setuptools==69.5.1      # License: MIT License
 opentimelineio==@_opentimelineio_version@ # License: Other/Proprietary License (Modified Apache 2.0 License)
-PyOpenGL                # License: BSD License (BSD)
+PyOpenGL==3.1.7         # License: BSD License (BSD)
 
 # MacOS only - PyOpenGL_accelerate is built from source in python3.cmake as a workaround until the fix
 # is merged in the main branch.
 # See https://github.com/mcfletch/pyopengl/issues/147 and https://github.com/mcfletch/pyopengl/pull/146
 
-# PyOpenGL_accelerate as issue with native arm64 build on MacOS.
+# PyOpenGL_accelerate has issue with native arm64 build on MacOS.
 # Use PyOpenGL_accelerate only on x86_64 platform.
-PyOpenGL_accelerate ; (platform_system=='Windows' or platform_system=='Linux') and platform_machine=='x86_64' # License: BSD License (BSD)
+PyOpenGL_accelerate==3.1.7 ; (platform_system=='Windows' or platform_system=='Linux') and platform_machine=='x86_64' # License: BSD License (BSD)
 
 # Those are installed by the src/build/make_python.py script, adding them here to list their licenses.
 
-certifi                 # License: Mozilla Public License 2.0 (MPL 2.0) (MPL-2.0)
-six                     # License: MIT License (MIT)
-wheel                   # License: MIT License (MIT)
-packaging               # License: Apache Software License, BSD License
-requests                # License: Apache Software License (Apache 2.0)
-cryptography            # License: Apache Software License, BSD License ((Apache-2.0 OR BSD-3-Clause) AND PSF-2.0)
-pydantic                # License: MIT License (MIT)
+certifi==2024.2.2       # License: Mozilla Public License 2.0 (MPL 2.0) (MPL-2.0)
+six==1.16.0             # License: MIT License (MIT)
+wheel==0.43.0           # License: MIT License (MIT)
+packaging==24.0         # License: Apache Software License, BSD License
+requests==2.31.0        # License: Apache Software License (Apache 2.0)
+cryptography==42.0.5    # License: Apache Software License, BSD License ((Apache-2.0 OR BSD-3-Clause) AND PSF-2.0)
+pydantic==2.7.1         # License: MIT License (MIT)