# Development and testing dependencies
pytest>=8.0.0
pytest-asyncio>=0.23.0
pytest-cov>=4.1.0
pytest-xdist>=3.5.0
pytest-timeout>=2.4.0
# Test-suite sharding for CI matrix. Splits the test set evenly across N
# shards via --splits/--group; falls back to test-name hashing on the first
# run, and uses recorded durations on subsequent runs (.test_durations).
pytest-split>=0.9.0
httpx>=0.27.0
ruff>=0.8.0
pre-commit>=4.0

# Required by pyftpdlib TLS_FTPHandler for mock FTP server tests
pyOpenSSL>=26.0.0

# Security scanning
bandit[sarif]>=1.7.0
pip-audit>=2.7.0
# Transitive of pip-audit→CacheControl. 1.2.1 patches GHSA-6v7p-g79w-8964
# (Unpacker SEGV/DoS on reuse after caught error). Not a runtime dep of
# Bambuddy — pinned here so the audit stays clean.
msgpack>=1.2.1
# Secrets scan: gitleaks (Go binary, not a Python package).
# Install: go install github.com/zricethezav/gitleaks/v8@latest