Merge pull request #233 from openzim/direct_deps

Add missing direct dependencies

pyproject.toml

@@ -20,15 +20,19 @@ dependencies = [
   "beautifulsoup4>=4.9.3,<5.0",
   "lxml>=4.6.3,<6.0",
   "optimize-images>=1.3.6,<2.0",
-  # regex has no upper-bound due to "date-based" release numbers, no semver, so their
+  # regex has no upper-bound due to "date-based" release numbers, no semver, so their
   # promise is that they will never (or always) break the API, and the API is very
   # limited and we use only a very small subset of it.
   "regex>=2020.7.14",
   "pymupdf>=1.24.0,<2.0",
   "CairoSVG>=2.2.0,<3.0",
   "beartype==0.19.0",
   # youtube-dl should be updated as frequently as possible
-  "yt-dlp"
+  "yt-dlp",
+  "pillow>=7.0.0,<12.0",
+  "urllib3>=1.26.5,<2.3.0",
+  "piexif==1.1.3", # this dep is a nightmare in terms of release management, better pinned just like in optimize-images anyway
+  "idna>=2.5,<4.0"
 ]
 dynamic = ["authors", "classifiers", "keywords", "license", "version", "urls"]