[buildout] # This file is part of buildout.coredev repository: https://github.com/plone/buildout.coredev # The Plone Release Team is responsible for it, with help from lots of core Plone developers. # If you have suggestions, please open an issue at: https://github.com/plone/buildout.coredev/issues # Note: version pins in this file should only be removed in a new minor version of Plone. # Based on latest development Zope: # extends = https://raw.githubusercontent.com/zopefoundation/Zope/master/versions.cfg # Based on released Zope: extends = https://zopefoundation.github.io/Zope/releases/6.2/versions.cfg [versions] # Basics # !! keep in sync with requirements.txt !! horse-with-no-namespace = 20260202.0 pip = 26.3 setuptools = 84.2.1 wheel = 0.48.0 zc.buildout = 6.0.2 # windows specific nt-svcutils = 2.13.0 # OVERRIDES # You MUST manually keep this in sync with the version-overrides in mx.ini. # Also check for Python-version specific overrides later in this file. certifi = 2026.10.23 mr.developer = 3.0.0 msgpack = 1.2.4 Products.ZCatalog = 7.4 pytz = 2026.6 urllib3 = 2.8.0 zc.recipe.testrunner = 4.2.post1 # CORE PLONE. # These packages are what you get when installing Plone plus test dependencies, # and are managed by the Plone community, not by Zope or others. borg.localrole = 5.0.1 diazo = 2.0.6 five.intid = 3.1.0 Plone = 6.2.3 plone.alterego = 3.0.0 plone.api = 3.0.4 plone.app.caching = 5.0.0 plone.app.content = 5.0.1 plone.app.contentlisting = 4.0.0 plone.app.contentmenu = 4.0.0 plone.app.contentrules = 6.0.0 plone.app.contenttypes = 5.0.1 plone.app.customerize = 3.0.1 plone.app.dexterity = 5.0.2 plone.app.discussion = 6.0.1 plone.app.event = 6.0.1 plone.app.i18n = 5.0.0 plone.app.intid = 3.0.0 plone.app.iterate = 7.0.0 plone.app.layout = 6.0.2 plone.app.linkintegrity = 5.0.0 plone.app.locales = 7.0.5 plone.app.lockingbehavior = 3.0.0 plone.app.multilingual = 9.0.2 plone.app.portlets = 7.0.2 plone.app.querystring = 3.1.1 plone.app.redirector = 4.0.0 plone.app.registry = 3.0.1 plone.app.relationfield = 5.0.0 plone.app.robotframework = 3.0.0 plone.app.testing = 8.0.2 plone.app.textfield = 4.0.2 plone.app.theming = 7.0.1 plone.app.upgrade = 4.1.2 plone.app.users = 4.0.0 plone.app.uuid = 3.0.0 plone.app.versioningbehavior = 3.0.0 plone.app.viewletmanager = 5.0.0 plone.app.vocabularies = 7.0.0 plone.app.widgets = 6.0.0 plone.app.workflow = 6.0.0 plone.app.z3cform = 5.0.2 plone.autoform = 3.0.1 plone.autoinclude = 3.0.0 plone.base = 4.0.2 plone.batching = 3.0.3 plone.behavior = 3.0.1 plone.browserlayer = 4.0.0 plone.cachepurging = 4.0.0 plone.caching = 3.0.0 plone.classicui = 2.0.0 plone.contentrules = 4.0.0 plone.dexterity = 4.0.0 plone.distribution = 4.0.0 plone.event = 3.0.1 plone.exportimport = 2.3.0 plone.folder = 5.0.0 plone.formwidget.namedfile = 4.0.0 plone.formwidget.recurrence = 4.0.0 plone.i18n = 6.0.1 plone.indexer = 3.0.0 plone.intelligenttext = 5.0.0 plone.keyring = 5.0.1 plone.locking = 4.0.0 plone.memoize = 4.0.1 plone.namedfile = 8.1.2 plone.outputfilters = 6.0.1 plone.portlet.collection = 5.0.2 plone.portlet.static = 5.0.1 plone.portlets = 4.0.0 plone.protect = 6.0.0 plone.recipe.zope2instance = 9.1.0 plone.registry = 3.0.1 plone.resource = 4.0.0 plone.resourceeditor = 5.0.0 plone.rest = 6.0.0 plone.restapi = 10.2.1 plone.rfc822 = 4.0.0 plone.scale = 5.1.1 plone.schema = 3.0.0 plone.schemaeditor = 5.0.1 plone.session = 5.1.0 plone.staticresources = 3.0.10 plone.stringinterp = 3.0.0 plone.subrequest = 3.0.0 plone.supermodel = 3.0.0 plone.testing = 10.1.0 plone.theme = 5.0.0 plone.tiles = 4.0.0 plone.transformchain = 4.0.0 plone.uuid = 3.0.0 plone.volto = 6.1.0 plone.z3cform = 3.0.0 plonetheme.barceloneta = 4.1.2 Products.CMFDiffTool = 5.0.1 Products.CMFDynamicViewFTI = 8.0.0 Products.CMFEditions = 5.0.2 Products.CMFPlacefulWorkflow = 4.0.0 Products.CMFPlone = 6.2.3 Products.ExtendedPathIndex = 6.0.0 Products.isurlinportal = 4.0.0 Products.MimetypesRegistry = 4.0.2 Products.PlonePAS = 9.0.0 Products.PortalTransforms = 5.0.1 Products.statusmessages = 6.0.0 pytest-plone = 1.1.1 # CORE DEPENDENCIES: COLLECTIVE. # These packages are what you get when installing Plone plus test dependencies, # and are managed by the Collective (https://github.com/collective). collective.MockMailHost = 4.0.0 collective.monkeypatcher = 3.0.0 collective.recipe.omelette = 3.0.0 collective.recipe.vscode = 0.1.9 icalendar = 7.3.0 Products.DateRecurringIndex = 4.0.0 # CORE DEPENDENCIES: Zope and friends # These packages are what you get when installing Plone, # and are managed by the Zope/ZODB/z3c/repoze communities, # which are close to Plone. five.customerize = 4.1 Products.CMFCore = 3.8 Products.CMFUid = 5.0 Products.DCWorkflow = 4.0 Products.ExternalMethod = 6.1 Products.GenericSetup = 5.2 Products.MailHost = 6.1 Products.PluggableAuthService = 4.2.2 Products.PluginRegistry = 3.1 Products.PythonScripts = 5.3.1 Products.Sessions = 6.2 Products.SiteErrorLog = 7.0 Products.StandardCacheManagers = 6.1 Products.ZopeVersionControl = 5.1 repoze.xmliter = 2.0 z3c.caching = 4.0 z3c.form = 6.1 z3c.formwidget.query = 3.0 z3c.objpath = 3.0 z3c.relationfield = 3.1 z3c.unconfigure = 3.0 z3c.zcmlhook = 3.1 zc.relation = 3.0 zdaemon = 5.2.1 ZEO = 6.2 zest.releaser = 9.9.1 zestreleaser.towncrier = 2.0.1 ZODB3 = 3.11.0 zodbupdate = 3.0 zope.app.locales = 6.0 zope.componentvocabulary = 4.0 zope.copy = 6.0 zope.intid = 6.0 zope.keyreference = 7.0 zope.pytestlayer = 9.2 zope.ramcache = 4.0 zope.sendmail = 7.3 # CORE DEPENDENCIES: other # These packages are what you get when installing Plone and its tests, # but are NOT managed by closely related communities. async-generator = 1.10 attrs = 26.1.0 backports.cached-property = 1.0.2 backports.tarfile = 1.2.0 build = 1.6.1 check-manifest = 0.51 click = 8.5.0 cmarkgfm = 2025.10.22 coverage = 7.16.2 cryptography = 50.0.2 cssselect = 1.5.0 decorator = 5.3.1 feedparser = 6.0.14 feedparser-sgmllib = 2.1.0 furl = 2.1.4 future = 1.0.0 gunicorn = 26.2.0 h11 = 0.16.0 id = 1.6.1 importlib-metadata = 9.0.1 importlib-resources = 7.1.0 iniconfig = 2.3.1 jaraco.classes = 3.4.0 jaraco.context = 6.1.2 jaraco.functools = 4.6.0 jeepney = 0.9.0 jsonschema = 4.26.0 jsonschema-specifications = 2025.9.1 keyring = 25.7.0 lxml = 6.1.3 lxml-html-clean = 0.4.6 manuel = 1.13.0 Markdown = 3.10.3 markdown-it-py = 4.2.0 mdurl = 0.1.2 mock = 5.2.0 more-itertools = 11.1.0 natsort = 8.4.0 nh3 = 0.3.7 orderedmultidict = 1.0.2 outcome = 1.3.0post0 overrides = 7.7.0 pep440 = 0.1.2 piexif = 1.1.3 pluggy = 1.7.0 prompt-toolkit = 3.0.53 psutil = 7.2.2 py = 1.11.0 PyJWT = 2.15.1 pyOpenSSL = 26.4.0 pyproject-hooks = 1.3.3 pyroma = 5.0.1 pyrsistent = 0.20.0 PySocks = 1.7.1 pytest = 9.2.0 pytest-cov = 7.1.0 python-dateutil = 2.9.0.post0 python-dotenv = 1.2.4 PyYAML = 6.0.3 readme-renderer = 44.0 referencing = 0.37.0 requests-toolbelt = 1.0.0 responses = 0.26.3 rfc3986 = 2.0.0 rich = 15.0.0 robotframework = 7.5.1 robotframework-assertion-engine = 5.0.1 robotframework-browser = 20.6.0 robotframework-debuglibrary = 2.5.0 robotframework-lsp = 1.13.0 robotframework-pythonlibcore = 4.6.0 # core tests do not use selenium anymore -> remove? robotframework-selenium2library = 3.0.0 robotframework-selenium2screenshots = 0.8.1 robotframework-seleniumlibrary = 6.9.0 robotframework-seleniumtestability = 2.1.0 robotsuite = 3.0.1 SecretStorage = 3.5.0 seedir = 0.5.1 selenium = 4.52.0 sgmllib3k = 1.0.0 simplejson = 4.2.0 sniffio = 1.3.1 sortedcontainers = 2.4.0 toml = 0.10.2 towncrier = 26.9.0 trio = 0.35.0 trio-websocket = 0.12.2 trove-classifiers = 2026.9.21.13 twine = 7.0.0 types-PyYAML = 6.0.12.20261103 types-toml = 0.10.8.20260518 tzdata = 2026.6 Unidecode = 1.4.0 urllib3-secure-extra = 0.1.0 watchdog = 6.0.0 wcwidth = 0.9.4 webresource = 2.0.1 websocket-client = 1.9.2 wrapt = 2.5.2 wsproto = 1.3.2 zipp = 4.1.2 [versions:python_version > "3.10"] exceptiongroup = 1.3.1 pillow = 13.0.0 platformdirs = 4.14.4 rpds-py = 2026.9.1 # Override of Zope pin for security fixes. Needs Python 3.11+. # You MUST manually keep this in sync with the version-overrides in mx.ini. filelock = 4.2.8 # Override of Zope pin for security fixes. 7.6 and higher need Python 3.11+. # You MUST manually keep this in sync with the version-overrides in mx.ini. AccessControl = 7.7 # 9.0 removes bytes, sorted, tuple and zip from safe_builtins: # AccessControl 7.7 adds guarded versions. Needs Python 3.11+. # You MUST manually keep this in sync with the version-overrides in mx.ini. RestrictedPython = 9.0 [versions:python_version == "3.10"] # Same as the Zope pin. exceptiongroup = 1.3.0 pillow = 12.3.0 # platformdirs 4.13.0+ requires Python 3.11. platformdirs = 4.12.4 rpds-py = 0.30.0 # Same as the Zope pin. Newer filelock versions with security fixes need Python 3.11+. # You MUST manually keep this in sync with the version-overrides in mx.ini. filelock = 3.32.2 # Same as the Zope pin. Newer versions with security fixes need Python 3.11+. # You MUST manually keep this in sync with the version-overrides in mx.ini. AccessControl = 7.4 # Override of Zope pin for security fixes. Newer versions need Python 3.11+. # You MUST manually keep this in sync with the version-overrides in mx.ini. RestrictedPython = 8.5 [versions:windows] pywin32-ctypes = 0.2.3 [versionannotations] # keep this alphabetical please cryptography = Since version 49 there are no wheels for x86_64 (Intel) macOS, only arm64. On Intel Macs pip builds it from source, which needs Rust and OpenSSL. In Plone core it is not installed on macOS, only via optional tooling. grpcio = This has an exact version pin in the robotframework-browser package. grpcio-tools = This has an exact version pin in the robotframework-browser package. Products.CMFCore = Products.CMFCore 3.9 gives test failures in Products.CMFPlone/CMFEditions and plone.app.portlets. prompt-toolkit = Requirement of robotframework-debuglibrary: prompt-toolkit<3,>=2 protobuf = This has an exact version pin in the robotframework-browser package. readme-renderer = readme-renderer 45 switches from cmarkgfm to comrak, which is missing some wheels for Mac selenium = robotframework-seleniumlibrary 6.1.0 is incompatible with 4.10.0. See https://github.com/robotframework/SeleniumLibrary/issues/1835