Pins required dependencies

[kenoir]

In order that clients consuming this library have reliable dependencies we need to pin the required dependencies of this project.

This change introduces fixed versions in setup.py.

[alexwlchan]

Close, but I don’t think this is enough. boto3 1.4.5 installs several other packages:

boto3==1.4.5
botocore==1.5.95
docutils==0.14
jmespath==0.9.3
python-dateutil==2.7.2
s3transfer==0.1.13
six==1.11.0

I think we need to pin all of them as well. There are ways to do this, I think, but I’ll need to have another look – pip 10 broke a bunch of APIs here.

Also, this means anybody using our libraries with any other version of boto3 can’t do it. Wouldn’t it be better to pin in the applications?

[kenoir]

Closing as out of date.