Re: Upgrade some pgweb python dependencies

On Wed, 11 Feb 2026 at 23:40, Paul A Jungwirth <pj(at)illuminatedcomputing(dot)com>
wrote:

> I submitted a patch to pgarchive recently, which led me to setting up
> pgweb, based on the instructions in docs/dev_install.rst.[0]
>
> Using debian 13 and python 3.9, I ran into several errors running `pip
> install -r requirements.txt`. The versions pinned there look quite
> old. The latest allowed version of pycryptodomex even seems to use
> python2 syntax, so I don't understand how it works for anyone else.
>

These requirements files are, ahem, badly maintained. I assume nobody
really uses them :/

FWIW, since you're on debian, the easiest is to just use the debian
packaged versions of basically everything. Our production is on debian
bookworm and testing is on debian trixie, so either of those should work.
The only thing you need to install from pip at this point is Django itself
and cvss (if you want the security pages).

Doesn't mean the requirements.txt shouldn't be better maintained, so we
should look at that, but as a quick-fix for your current situation and to
make sure you're running something that matches what's actually used in
production.

//Magnus