Conflicts between money-to-prisoners-common and urllib3

[NeolithEra]

Hi, users are unable to run money-to-prisoners-common due to dependency conflict with urllib3 package. As shown in the following full dependency graph of money-to-prisoners-common, requests requires urllib3 <1.26,>=1.21.1，while transifex-client requires urllib3 <1.24.

According to pip’s “first found wins” installation strategy, urllib3 1.25.7 is the actually installed version. However, urllib3 1.25.7 does not satisfy <1.24.

Dependency tree-----------

money-to-prisoners-common - 9.16.0
| +- boto3(install version:1.10.35 version range:<2,>=1.5)
| +- cryptography(install version:2.8 version range:>=2.3,<3)
| +- django(install version:1.11.26 version range:<2,>=1.11)
| | +- pytz(install version:2019.3 version range:*)
| +- django-form-error-reporting(install version:0.7 version range:>=0.7)
| | +- requests(install version:2.22.0 version range:*)
| | | +- certifi(install version:2019.11.28 version range:>=2017.4.17)
| | | +- chardet(install version:3.0.4 version range:<3.1.0,>=3.0.2)
| | | +- idna(install version:2.8 version range:>=2.5,<2.9)
| | | +- urllib3(install version:1.25.7 version range:<1.26,>=1.21.1)
| | +- six(install version:1.13.0 version range:*)
| +- django-widget-tweaks(install version:1.4.5 version range:<1.5,>=1.4)
| | +- django(install version:1.11.26 version range:>=1.8)
| | | +- pytz(install version:2019.3 version range:*)
| +- django-zendesk-tickets(install version:0.12 version range:>=0.12)
| | +- requests(install version:2.22.0 version range:*)
| | | +- certifi(install version:2019.11.28 version range:>=2017.4.17)
| | | +- chardet(install version:3.0.4 version range:<3.1.0,>=3.0.2)
| | | +- idna(install version:2.8 version range:>=2.5,<2.9)
| | | +- urllib3(install version:1.25.7 version range:<1.26,>=1.21.1)
| | +- six(install version:1.13.0 version range:*)
| +- govuk-bank-holidays(install version:0.5 version range:>=0.3)
| | +- requests(install version:2.22.0 version range:*)
| | | +- certifi(install version:2019.11.28 version range:>=2017.4.17)
| | | +- chardet(install version:3.0.4 version range:<3.1.0,>=3.0.2)
| | | +- idna(install version:2.8 version range:>=2.5,<2.9)
| | | +- urllib3(install version:1.25.7 version range:<1.26,>=1.21.1)
| | +- six(install version:1.13.0 version range:*)
| +- kubernetes(install version:9.0.1 version range:>=9,<10)
| | +- certifi(install version:2019.11.28 version range:>=14.05.14)
| | +- google-auth(install version:1.8.1 version range:>=1.0.1)
| | +- python-dateutil(install version:2.8.1 version range:>=2.5.3)
| | +- pyyaml(install version:5.2 version range:>=3.12)
| | +- requests(install version:2.22.0 version range:*)
| | | +- certifi(install version:2019.11.28 version range:>=2017.4.17)
| | | +- chardet(install version:3.0.4 version range:<3.1.0,>=3.0.2)
| | | +- idna(install version:2.8 version range:>=2.5,<2.9)
| | | +- urllib3(install version:1.25.7 version range:<1.26,>=1.21.1)
| | +- requests-oauthlib(install version:1.3.0 version range:*)
| | +- setuptools(install version:42.0.2 version range:>=21.0.0)
| | +- six(install version:1.13.0 version range:>=1.9.0)
| | +- urllib3(install version:1.25.7 version range:>=1.24.2)
| | +- websocket-client(install version:0.56.0 version range:>=0.32.0)
| | | +- six(install version:1.13.0 version range:*)
| +- prometheus-client(install version:0.7.1 version range:<1,>=0.6)
| +- pyjwt(install version:1.7.1 version range:>=1.7,<2)
| +- pytz(install version:2019.3 version range:>=2018.9)
| +- requests(install version:2.22.0 version range:>=2.18,<3)
| | +- certifi(install version:2019.11.28 version range:>=2017.4.17)
| | +- chardet(install version:3.0.4 version range:<3.1.0,>=3.0.2)
| | +- idna(install version:2.8 version range:>=2.5,<2.9)
| | +- urllib3(install version:1.25.7 version range:<1.26,>=1.21.1)
| +- requests-oauthlib(install version:1.3.0 version range:>=1,<2)
| +- selenium(install version:3.141.0 version range:>=3.11,<4)
| +- slumber(install version:0.7.1 version range:<0.8,>=0.7)
| | +- requests(install version:2.22.0 version range:*)
| | | +- certifi(install version:2019.11.28 version range:>=2017.4.17)
| | | +- chardet(install version:3.0.4 version range:<3.1.0,>=3.0.2)
| | | +- idna(install version:2.8 version range:>=2.5,<2.9)
| | | +- urllib3(install version:1.25.7 version range:<1.26,>=1.21.1)
| +- transifex-client(install version:0.13.6 version range:>=0.13,<0.14)
| | +- python-slugify(install version:1.2.6 version range:==1.2.6)
| | +- requests(install version:2.22.0 version range:<3.0.0,>=2.19.1)
| | | +- certifi(install version:2019.11.28 version range:>=2017.4.17)
| | | +- chardet(install version:3.0.4 version range:<3.1.0,>=3.0.2)
| | | +- idna(install version:2.8 version range:>=2.5,<2.9)
| | | +- urllib3(install version:1.25.7 version range:<1.26,>=1.21.1)
| | +- six(install version:1.11.0 version range:==1.11.0)
| | +- urllib3(install version:1.23 version range:<1.24)

Thanks for your help.
Best,
Neolith

[NeolithEra]

Suggested Solution

1. Ask your upstream project transifex-client to loose the version range of urllib3.

@ushkarev Could I submit a PR to solve this issue?

[ushkarev]

@NeolithEra sure you can! as it happens, transifex-client is only used during rarely-run development tasks so this dependency issue is unlikely to cause problems.