[ISSUE #25953] freeze Python dependencies (#6405)

airbyte-connector-atelier-server/Dockerfile

@@ -17,7 +17,8 @@ ENV CDK_PYTHON=${PYENV_ROOT}/versions/${PYTHON_VERSION}/bin/python
 ENV CDK_ENTRYPOINT ${PYENV_ROOT}/versions/${PYTHON_VERSION}/lib/python3.9/site-packages/airbyte_cdk/connector_builder/main.py
 # Set up CDK
 ENV PIP=${PYENV_ROOT}/versions/${PYTHON_VERSION}/bin/pip
-RUN ${PIP} install airbyte-cdk==${CDK_VERSION}
+COPY requirements.txt requirements.txt
+RUN ${PIP} install -r requirements.txt
 
 ARG VERSION=0.44.4
 

airbyte-connector-atelier-server/build.gradle

@@ -107,6 +107,11 @@ sourceSets {
     }
 }
 
+task copyPythonDependencies(type: Copy) {
+    from "${project.projectDir}/requirements.txt"
+    into "build/docker/"
+}
+
 def readValueFromFile(String filePath) {
     return new File(filePath).text.trim()
 }
@@ -121,6 +126,7 @@ tasks.named("buildDockerImage") {
     // Current Python version used by the CDK image
     buildArgs['PYTHON_VERSION'] = System.getenv('PYTHON_VERSION') ?: '3.9.11'
 
+    dependsOn copyPythonDependencies
     dependsOn generateOpenApiServer
     dependsOn copyGeneratedTar
 }

airbyte-connector-atelier-server/requirements.in

@@ -0,0 +1,2 @@
+requests==2.29.0 # version 2.30.0 imports a new version of urllib3 which requires OpenSSL 1.1.1+
+airbyte-cdk==0.36.3

airbyte-connector-atelier-server/requirements.txt

@@ -0,0 +1,89 @@
+#
+# This file is autogenerated by pip-compile with Python 3.9
+# by the following command:
+#
+#    pip-compile
+#
+airbyte-cdk==0.36.3
+    # via -r requirements.in
+airbyte-protocol-models==0.3.6
+    # via airbyte-cdk
+attrs==23.1.0
+    # via
+    #   cattrs
+    #   jsonschema
+    #   requests-cache
+backoff==2.2.1
+    # via airbyte-cdk
+cachetools==5.3.0
+    # via airbyte-cdk
+cattrs==22.2.0
+    # via requests-cache
+certifi==2022.12.7
+    # via requests
+charset-normalizer==3.1.0
+    # via requests
+deprecated==1.2.13
+    # via airbyte-cdk
+dpath==2.0.8
+    # via airbyte-cdk
+exceptiongroup==1.1.1
+    # via cattrs
+genson==1.2.2
+    # via airbyte-cdk
+idna==3.4
+    # via requests
+isodate==0.6.1
+    # via airbyte-cdk
+jinja2==3.1.2
+    # via airbyte-cdk
+jsonref==0.3.0
+    # via airbyte-cdk
+jsonschema==3.2.0
+    # via airbyte-cdk
+markupsafe==2.1.2
+    # via jinja2
+pendulum==2.1.2
+    # via airbyte-cdk
+platformdirs==3.5.0
+    # via requests-cache
+pydantic==1.9.2
+    # via
+    #   airbyte-cdk
+    #   airbyte-protocol-models
+pyrsistent==0.19.3
+    # via jsonschema
+python-dateutil==2.8.2
+    # via
+    #   airbyte-cdk
+    #   pendulum
+pytzdata==2020.1
+    # via pendulum
+pyyaml==5.4.1
+    # via airbyte-cdk
+requests==2.29.0
+    # via
+    #   -r requirements.in
+    #   airbyte-cdk
+    #   requests-cache
+requests-cache==1.0.1
+    # via airbyte-cdk
+six==1.16.0
+    # via
+    #   isodate
+    #   jsonschema
+    #   python-dateutil
+    #   url-normalize
+typing-extensions==4.5.0
+    # via pydantic
+url-normalize==1.4.3
+    # via requests-cache
+urllib3==1.26.15
+    # via
+    #   requests
+    #   requests-cache
+wrapt==1.15.0
+    # via deprecated
+
+# The following packages are considered to be unsafe in a requirements file:
+# setuptools