From c69a86b535578559196348767193b180d34e8808 Mon Sep 17 00:00:00 2001
From: Jay Lee <jay0lee@gmail.com>
Date: Tue, 28 Mar 2023 08:49:03 -0400
Subject: [PATCH] use constraints.txt to prevent any downgrades during pip
 install

---
 .github/workflows/build.yml | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 29ccc9f9..e4cb5e4a 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -420,7 +420,10 @@ jobs:
                                              cryptography
                "${PYTHON}" -m pip install --force-reinstall --no-deps cryptography*.whl
              fi
-             "${PYTHON}" -m pip install --upgrade -r requirements.txt ${PIP_ARGS}
+             # build constraints file to prevent downgrades of existing
+             # packages
+             "${PYTHON}" -m pip freeze | grep == | sed 's/==/>=/' > constraints.txt
+             "${PYTHON}" -m pip install --upgrade -c constraints.txt -r requirements.txt ${PIP_ARGS}
              "${PYTHON}" -m pip list
 
       - name: Install PyInstaller