Overly restrictive freezegun and random2 dependencies

[timokau]

Currently freezegun and random2 are pinned to exact versions:

faker/setup.py

Line 77 in c412d56

"random2==1.0.1",

faker/setup.py

Line 78 in c412d56

"freezegun==0.3.11",

Is there any reason for that? Would there really be problems with freezegun 0.3.12? This kind of version pinning is hard to match for distribution packagers.

[fcurella]

The reason we pin the dependencies is that we don't want to break the build in case one of them drops support for python 2.7. I think we can relax them and just pin to the minor version, so something like random2<1.1 and freezegun<0.4

[timokau]

That would be helpful, as long as they adhere to something semver-like they shouldn't drop python2 support in a minor update.

[fcurella]

@timokau I'm currently on vacation, so I don't have much time to work on this.

But if you could write a PR that passes the build, I should have enough time to merge and release

[timokau]

Sure, #972.

No big hurry though, after you vacation is also perfectly fine.