fix: pin cssselect and parsel versions

Newer Parsel releases need to know the lxml version
(https://github.com/scrapy/parsel/blob/master/parsel/selector.py#L35), which is
not exposed by Open edX-flavoured etree. The older version of Parsel uses
the cssselect version that does not expose `_unicode_safe_getattr`, so we had
to pin this one, too.

Author: farhaanbukhsh

image_explorer/__init__.py

@@ -22,4 +22,4 @@
 """
 from .image_explorer import ImageExplorerBlock
 
-__version__ = '3.0.1'
+__version__ = '3.0.2'

requirements/base.txt

@@ -14,8 +14,10 @@ botocore==1.38.8
     # via
     #   boto3
     #   s3transfer
-cssselect==1.3.0
-    # via parsel
+cssselect==1.2.0
+    # via
+    #   -c requirements/constraints.txt
+    #   parsel
 django==4.2.20
     # via
     #   -c https://raw.githubusercontent.com/edx/edx-lint/master/edx_lint/files/common_constraints.txt
@@ -31,7 +33,6 @@ jmespath==1.0.1
     # via
     #   boto3
     #   botocore
-    #   parsel
 lazy==1.6
     # via xblock
 lxml==5.4.0
@@ -46,10 +47,10 @@ markupsafe==3.0.2
     #   xblock
 openedx-django-pyfs==3.7.0
     # via xblock
-packaging==25.0
-    # via parsel
-parsel==1.10.0
-    # via -r requirements/base.in
+parsel==1.6.0
+    # via
+    #   -c requirements/constraints.txt
+    #   -r requirements/base.in
 python-dateutil==2.9.0.post0
     # via
     #   botocore
@@ -66,6 +67,7 @@ six==1.17.0
     # via
     #   fs
     #   fs-s3fs
+    #   parsel
     #   python-dateutil
 sqlparse==0.5.3
     # via django

requirements/constraints.txt

@@ -10,4 +10,19 @@
 
 # Common constraints for edx repos
 -c https://raw.githubusercontent.com/edx/edx-lint/master/edx_lint/files/common_constraints.txt
-
+#
+# Parsel needs to know the lxml version https://github.com/scrapy/parsel/blob/master/parsel/selector.py#L35.
+# Since this information was not being passed and etree flavor of openedx doesn't open version for outside
+# we had to pin parsel which doesn't have this code branch.
+#
+# And this version of parsel has cssselect which doesn't expose
+# '_unicode_safe_getattr' hence we had to pin cssselect to the required version.
+#
+# This issue has been explained in https://github.com/openedx/xblock-image-explorer/pull/195#issuecomment-2844971682
+#
+# This can be removed once we resolve
+# https://github.com/openedx/xblock-image-explorer/issues/197#issue-3048741312,
+# one of the ways to do is to remove the dependency on Parsel as explained in
+# https://github.com/openedx/xblock-image-explorer/pull/195#pullrequestreview-2808751843
+parsel==v1.6
+cssselect==v1.2

requirements/test.txt

@@ -49,8 +49,9 @@ cookiecutter==2.6.0
     # via xblock-sdk
 coverage[toml]==7.8.0
     # via pytest-cov
-cssselect==1.3.0
+cssselect==1.2.0
     # via
+    #   -c requirements/constraints.txt
     #   -r requirements/base.txt
     #   parsel
 dill==0.4.0
@@ -88,7 +89,6 @@ jmespath==1.0.1
     #   -r requirements/base.txt
     #   boto3
     #   botocore
-    #   parsel
 lazy==1.6
     # via
     #   -r requirements/base.txt
@@ -122,12 +122,11 @@ openedx-django-pyfs==3.7.0
     #   -r requirements/base.txt
     #   xblock
 packaging==25.0
+    # via pytest
+parsel==1.6.0
     # via
+    #   -c requirements/constraints.txt
     #   -r requirements/base.txt
-    #   parsel
-    #   pytest
-parsel==1.10.0
-    # via -r requirements/base.txt
 pbr==6.1.1
     # via stevedore
 platformdirs==4.3.7
@@ -203,6 +202,7 @@ six==1.17.0
     #   edx-lint
     #   fs
     #   fs-s3fs
+    #   parsel
     #   python-dateutil
 sqlparse==0.5.3
     # via