The CI scripts install some python dependencies primarily for testing this patch moves these over to a single requirements file that also hash pins everything using pip-compile to conform to best security and reproducibility practices.
e4feb2d5ca