# Exact pins (security decision, Review_Guide Appendix A #5): no open ranges —
# deploys must not silently pick up new versions. To bump a pin: upgrade in the
# dev venv, run the full test suite, then record the version here and commit.
Django==5.0.14
psycopg2-binary==2.9.12
gunicorn==21.2.0
python-dotenv==1.2.2
cryptography==49.0.0
requests==2.34.2
boto3==1.43.56
pyyaml==6.0.3
fhirclient==4.4.0
# Staging structured logging (settings/staging.py JSON_LOGGING=1); v4+ layout only
python-json-logger==4.2.0