Skip to content

[BUG] boto3 requirements is too strict and is incompatible with stix-shifter #14613

@jabesq

Description

@jabesq

Environment

OpenCTI 7.260224.0
Python version 3.12.12
client version 7.260224.0-dirty (top of master branch)

Reproducible Steps

  1. Install the requirements for an openCTI connector that uses stix-shifter ie: connectors/stream/sekoia-intel
  2. Install pycti from master@opencti pip install git+https://github.com/OpenCTI-Platform/opencti.git@master#subdirectory=client-python

Actual Outcome

Error message during pip install

ERROR: pip's dependency resolver does not currently take into account all the packages that are installed. This behaviour is the source of the following dependency conflicts.
aiobotocore 2.23.0 requires botocore<1.38.28,>=1.38.23, but you have botocore 1.42.56 which is incompatible.
pyopenssl 25.0.0 requires cryptography<45,>=41.0.5, but you have cryptography 46.0.5 which is incompatible.
stix-shifter 8.0.2 requires antlr4-python3-runtime==4.8, but you have antlr4-python3-runtime 4.13.2 which is incompatible.
stix-shifter 8.0.2 requires regex==2023.12.25, but you have regex 2026.2.19 which is incompatible.
stix-shifter 8.0.2 requires stix2-patterns==1.3.2, but you have stix2-patterns 2.1.2 which is incompatible.

Expected Outcome

pip install without errors. This can be done by loosening the requirements on boto3, which were changed with this commit: 69e88b4.
Something like boto3>=1.38.27,<=1.43 should be ok

Add any file, screenshots, video

No response

Metadata

Metadata

Labels

buguse for describing something not working as expectedclient-pythonsolveduse to identify issue that has been solved (must be linked to the solving PR)

Type

Projects

No projects

Relationships

None yet

Development

No branches or pull requests

Issue actions