# BlastContain Drill — pinned runtime dependency closure.
#
# Exact versions for every third-party package the Drill image installs: the
# runtime deps of blastcontain-drill (click, httpx, pyyaml) PLUS blastcontain-core's
# deps (cryptography, pyyaml) — core is bundled into the image from local source.
# The local blastcontain-* packages are deliberately NOT pinned here (built from
# source, not resolved from PyPI); dev tools (pytest/ruff/mypy) are excluded.
#
# Used by drill/Containerfile (`pip install --constraint constraints.txt`) for a
# reproducible image, and audited deterministically in CI
# (`pip-audit --no-deps -r drill/constraints.txt`).
#
# Regenerate after changing a runtime dep in core/ or drill/ pyproject.toml:
#   uv pip compile - --python-platform linux --python-version 3.12 \
#       --no-header --no-annotate -o drill/constraints.txt <<'EOF'
#   cryptography>=42.0
#   pyyaml>=6.0
#   click>=8.1
#   httpx>=0.27
#   EOF
anyio==4.13.0
certifi==2026.5.20
cffi==2.0.0
click==8.4.1
cryptography==49.0.0
h11==0.16.0
httpcore==1.0.9
httpx==0.28.1
idna==3.18
pycparser==3.0
pyyaml==6.0.3
typing-extensions==4.15.0
