Open requirements to new versions and test new versions regularly on different environments
Currently the requirements.txt is using fixed versions. Wouldn't it be better to use >= expressions?
This way version updates that only provide bug and security fixes can be automatically used by pip. If we regularly run tests (automated?) we should be able to find conflicting new versions and exclude them with a <= statement.
The ~= expression can prevent major updates: ~=0.6.1 would allow 0.6.1.2, 0.6.3 but not 0.7
Edited by Hock, Martin