Merge pull request #813 from HEPData/dependabot/pip/invenio-accounts-…

…5.1.0

build(deps): pin invenio-accounts to 5.0.1

.github/dependabot.yml

@@ -19,4 +19,6 @@ updates:
     schedule:
       interval: "monthly"
     ignore:
+      - dependency-name: "invenio-accounts"  # see https://github.com/HEPData/hepdata/issues/816
+      - dependency-name: "pytest"  # see https://github.com/HEPData/hepdata/issues/815
       - dependency-name: "pytest-cov"  # see https://github.com/HEPData/hepdata/issues/580

requirements.txt

@@ -5,9 +5,8 @@ gunicorn==22.0.0
 hepdata-converter-ws-client==0.2.2
 hepdata-validator==0.3.5
 invenio-access==2.0.0     # Indirect (needed by invenio-admin)
-invenio-accounts==5.0.1
+invenio-accounts==5.0.1  # https://github.com/HEPData/hepdata/issues/816
 invenio-admin==1.5.0
-invenio-app==1.5.0
 invenio-assets==3.0.3
 invenio-config==1.0.4
 invenio-db[postgresql]==1.1.5

setup.py

@@ -32,8 +32,8 @@
 history = open('CHANGES.rst').read()
 
 tests_require = [
-    'pytest>=6.0.2',
-    'pytest-cov>=2.9.0,<4.0.0',
+    'pytest>=6.0.2,<8.0.0',  # see https://github.com/HEPData/hepdata/issues/815
+    'pytest-cov>=2.9.0,<4.0.0',  # see https://github.com/HEPData/hepdata/issues/580
     'pytest-flask>=1.0.0',
     'pytest-mock>=3.1.0',
     'pytest-timeout>=1.4.2',