Use requirements.txt for automated version bumps. (#566)

* Use requirements.txt for automated version bumps.

Move the Mailman requirements into requirements.txt file so that
we can use dependabot for automated version bumping.

* Remove constraint on mistune

* Add requirements file to dockerfile

* Add dependency on tzdata

core/Dockerfile

@@ -4,6 +4,9 @@ FROM alpine:3.16.2
 #Add startup script to container
 COPY docker-entrypoint.sh /usr/local/bin/
 
+# Add requirements file.
+COPY requirements.txt /tmp/
+
 #Install all required packages, add user for executing mailman and set execution rights for startup script
 RUN --mount=type=cache,target=/root/.cache \
     apk update \
@@ -15,10 +18,9 @@ RUN --mount=type=cache,target=/root/.cache \
     && python3 -m pip install -U pip setuptools wheel \
         && python3 -m pip install psycopg2 \
                    gunicorn==19.9.0 \
-                   mailman==3.3.6 \
-                   mailman-hyperkitty==1.2.0 \
                    pymysql \
                    'sqlalchemy<1.4.0' \
+                   -r /tmp/requirements.txt \
     && apk del build-deps \
     && adduser -S mailman
 

core/requirements.txt

@@ -0,0 +1,5 @@
+# This is a separate file from Dockerfile so that we can use dependabot
+# for version updates that isn't supported for contents inside the
+# Dockerfile.
+mailman==3.3.4
+mailman-hyperkitty==1.1.0