From 1c3828c5079a51a5964dbbcce95f0924690f3a72 Mon Sep 17 00:00:00 2001
From: stvn <stvn@mit.edu>
Date: Fri, 11 Jun 2021 16:58:30 -0700
Subject: [PATCH] build(deps): add common_constraints file

---
 Makefile                            |  7 ++++++-
 requirements/common_constraints.txt | 26 ++++++++++++++++++++++++++
 requirements/constraints.txt        |  2 ++
 3 files changed, 34 insertions(+), 1 deletion(-)
 create mode 100644 requirements/common_constraints.txt

diff --git a/Makefile b/Makefile
index dd44350..424b109 100644
--- a/Makefile
+++ b/Makefile
@@ -1,5 +1,10 @@
+COMMON_CONSTRAINTS_TXT=requirements/common_constraints.txt
+.PHONY: $(COMMON_CONSTRAINTS_TXT)
+$(COMMON_CONSTRAINTS_TXT):
+	wget -O "$(@)" https://raw.githubusercontent.com/edx/edx-lint/master/edx_lint/files/common_constraints.txt || touch "$(@)"
+
 upgrade: export CUSTOM_COMPILE_COMMAND=make upgrade
-upgrade: ## update the requirements/*.txt files with the latest packages satisfying requirements/*.in
+upgrade: $(COMMON_CONSTRAINTS_TXT)  ## update the requirements/*.txt files with the latest packages satisfying requirements/*.in
 	pip install -r requirements/pip.txt
 	pip install -q -r requirements/pip_tools.txt
 	pip-compile --allow-unsafe --rebuild -o requirements/pip.txt requirements/pip.in
diff --git a/requirements/common_constraints.txt b/requirements/common_constraints.txt
new file mode 100644
index 0000000..7665aac
--- /dev/null
+++ b/requirements/common_constraints.txt
@@ -0,0 +1,26 @@
+# A central location for most common version constraints
+# (across edx repos) for pip-installation.
+#
+# Similar to other constraint files this file doesn't install any packages.
+# It specifies version constraints that will be applied if a package is needed.
+# When pinning something here, please provide an explanation of why it is a good
+# idea to pin this package across all edx repos, Ideally, link to other information
+# that will help people in the future to remove the pin when possible.
+# Writing an issue against the offending project and linking to it here is good.
+#
+# Note: Changes to this file will automatically be used by other repos, referencing
+#  this file from Github directly. It does not require packaging in edx-lint.
+
+
+# using LTS django version
+Django<2.3
+
+# docutils version 0.17 is causing docs rendering to fail
+# See https://sourceforge.net/p/docutils/bugs/417/
+docutils==0.16
+
+# latest version is causing e2e failures in edx-platform.
+drf-jwt<1.19.1
+
+# Newer versions causing tests failures in multiple repos.
+pyjwt[crypto]==1.7.1
diff --git a/requirements/constraints.txt b/requirements/constraints.txt
index ed072c2..a51cb08 100644
--- a/requirements/constraints.txt
+++ b/requirements/constraints.txt
@@ -8,3 +8,5 @@
 # pin when possible.  Writing an issue against the offending project and
 # linking to it here is good.
 
+# Common constraints for edx repos
+-c common_constraints.txt