@jmcarp I agree it's easy for these to get out of sync but in general it's not good practice to pin specific versions in `setup.py` but merely provide limits (if necessary), i.e., ``` flask-appbuilder>=1.12.0 ``` to help ensure one doesn't overly restrict the viable package space.
The `requirements.txt` file is supposed to provide a complete list of frozen dependencies (including sub-dependencies) to help ensure the build is completely deterministic. It wasn't viable to do this when we supported both Python 2 and Python 3 as sub-dependencies were different and thus we only included the top level dependencies. [ Full content available at: https://github.com/apache/incubator-superset/pull/6044 ] This message was relayed via gitbox.apache.org for devnull@infra.apache.org
