# book-to-skill — locked optional dependency versions.
#
# Security remediation: the runtime installer previously ran an unpinned
# `pip install <pkg>`, resolving to whatever release is newest at install
# time. This file (mirrored by PYTHON_DEPENDENCY_PINS in
# book_to_skill/config.py) pins every optional dependency to an exact,
# reviewed release. tests/test_dependency_lock.py fails CI if the two
# copies, or the pyproject.toml extras, ever drift apart.
#
# All pins verified to exist on PyPI and to satisfy requires-python >= 3.9.
# docling 2.70+ and pdfminer.six 2025-12+ require Python >= 3.10, hence the
# older pins below. Bump pins deliberately, via a reviewed change to this
# file, config.py, and pyproject.toml together.

# PDF (text-heavy) — any one of pdftotext / pypdf / pdfminer.six suffices
pypdf==6.18.0
pdfminer.six==20251107

# EPUB (+HTML)
ebooklib==0.20
beautifulsoup4==4.15.0

# DOCX
python-docx==1.2.0

# RTF
striprtf==0.0.33

# PDF (technical: tables, code, formulas)
docling==2.69.1
