From cb746056e02d50b5ede339a947ede4f020d28afa Mon Sep 17 00:00:00 2001
From: Pavol Rusnak <pavol@rusnak.io>
Date: Sat, 7 Oct 2023 21:06:58 +0200
Subject: [PATCH] dependency cleanup (#2011)

- async-timeout is not used anywhere (nor core neither extensions)
- cerberus is not used anywhere (nor core neither extensions)
- move embit and secp256k1 to end of the list
  - these are not used by core
  - document which extensions use them
---
 poetry.lock    | 26 +-------------------------
 pyproject.toml |  8 ++++----
 2 files changed, 5 insertions(+), 29 deletions(-)

diff --git a/poetry.lock b/poetry.lock
index dd730f458..bf06680ca 100644
--- a/poetry.lock
+++ b/poetry.lock
@@ -32,17 +32,6 @@ files = [
     {file = "asn1crypto-1.5.1.tar.gz", hash = "sha256:13ae38502be632115abf8a24cbe5f4da52e3b5231990aff31123c805306ccb9c"},
 ]
 
-[[package]]
-name = "async-timeout"
-version = "4.0.3"
-description = "Timeout context manager for asyncio programs"
-optional = false
-python-versions = ">=3.7"
-files = [
-    {file = "async-timeout-4.0.3.tar.gz", hash = "sha256:4640d96be84d82d02ed59ea2b7105a0f7b33abe8703703cd0ab0bf87c427522f"},
-    {file = "async_timeout-4.0.3-py3-none-any.whl", hash = "sha256:7405140ff1230c310e51dc27b3145b9092d659ce68ff733fb0cefe3ee42be028"},
-]
-
 [[package]]
 name = "attrs"
 version = "23.1.0"
@@ -163,19 +152,6 @@ click = "*"
 ecdsa = "*"
 secp256k1 = "*"
 
-[[package]]
-name = "cerberus"
-version = "1.3.4"
-description = "Lightweight, extensible schema and data validation tool for Python dictionaries."
-optional = false
-python-versions = ">=2.7"
-files = [
-    {file = "Cerberus-1.3.4.tar.gz", hash = "sha256:d1b21b3954b2498d9a79edf16b3170a3ac1021df88d197dc2ce5928ba519237c"},
-]
-
-[package.dependencies]
-setuptools = "*"
-
 [[package]]
 name = "certifi"
 version = "2023.7.22"
@@ -2483,4 +2459,4 @@ testing = ["big-O", "jaraco.functools", "jaraco.itertools", "more-itertools", "p
 [metadata]
 lock-version = "2.0"
 python-versions = "^3.10 | ^3.9"
-content-hash = "896736b59219a6177d8a63f33c3941e29c32b3196082b60e178e0126939b2cb3"
+content-hash = "12447bbf06fee6abaacd7022989491cd177f6e93913f0ec00af66841d89b4444"
diff --git a/pyproject.toml b/pyproject.toml
index 45db7d4b9..514ca2a14 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -9,7 +9,6 @@ python = "^3.10 | ^3.9"
 bech32 = "1.2.0"
 click = "8.1.7"
 ecdsa = "0.18.0"
-embit = "0.7.0"
 fastapi = "0.103.1"
 httpx = "0.25.0"
 jinja2 = "3.0.1"
@@ -28,17 +27,18 @@ websockets = "11.0.3"
 loguru = "0.7.2"
 grpcio = "1.58.0"
 protobuf = "4.24.3"
-Cerberus = "1.3.4"
-async-timeout = "4.0.3"
 pyln-client = "23.8"
 pywebpush = "1.14.0"
 slowapi = "0.1.8"
 python-dotenv = "1.0.0"
 websocket-client = "1.6.3"
-secp256k1 = "0.14.0"
 pycryptodomex = "3.19.0"
 packaging = "23.1"
 bolt11 = "2.0.5"
+# needed for boltz, lnurldevice, watchonly extensions
+embit = "0.7.0"
+# needed for cashu, lnurlp, nostrclient, nostrmarket, nostrrelay extensions
+secp256k1 = "0.14.0"
 # keep for backwards compatibility with lnurlp and cashu
 environs = "9.5.0"