setup.py should not pin specific versions

[m000]

install_requires in setyp.py pins specific versions of several packages. This causes problems when managing package versions in the python environment where FaceSDK is used.

E.g. certifi==2020.12.5 forces all packages in the environment to use old root certificates. And e.g. Sentry SDK already requires urllib3>1.26.5, creating a conflict.

FaceSDK-web-python-client/setup.py

Lines 20 to 26 in 1c1529c

	install_requires=[
	"certifi==2020.12.5",
	"future==0.18.2",
	"python-dateutil==2.8.1",
	"six==1.15.0",
	"urllib3==1.26.5",
	],

install_requires should be more flexible in allowing FaceSDK to work with more recent versions of the package.

[m000]

See also: regulaforensics/DocumentReader-web-python-client#68
Proposed fix: #39

[jurrian]

This is really affecting us because other packages cannot be updated as a result. The Regula documentreader and facesdk are now conflicting when either one dictates a higher certifi requirement.

[m000]

Hey @dangost. Any updates on switching to more flexible requirements specification?

We have 68 top-level dependncies for our production environment. The Regula packages are the only ones we have to handle specially because of the hardcoded versions.

[m000]

future==0.18.2 is now also considered vulnerable. See: https://pyup.io/v/52510/f17/

Please do the sane thing and use the caret or the tilde to properly constraint versions, instead of pinning specific versions.

[GubinAlexander]

Hello @m000 @jurrian
This issue has been fixed in current 6.9.3 release version. Please feel free to update and use it