update lockfile to bump pillow

[m-vdb]

Proposed changes:

• Update lockfile to bump Pillow
• Update wheel in docker containers

Status (please check what you already did):

• added some tests for the functionality
• updated the documentation
• updated the changelog (please check changelog for instructions)
• reformat files using black (please check Readme for instructions)

[m-vdb]

Pillow version bump

[m-vdb]

@rasa-jmac when bumping the dependencies, I noticed that wheel isn't a dependency or rasa, and he's not in the lock file. Now, wheel is a packaging dependency, so IMO it's only relevant at the build step; I'm wondering if it's not installed with the Python version that is installed in the docker containers. Any ideas? cc @ancalita

[m-vdb]

FYI @sanchariGr

[m-vdb]

builds are currently failing because of this issue. Trying to pin pydantic to 1.10.2, generating the lockfile and pushing to this branch when it's done. The last time I ran it it took me ~1h to generate the lockfile....

[ancalita]

wheel seems to be a dependency of other direct dependencies of rasa (such as setuptools). Perhaps if setuptools gets upgraded to latest version 66.0.0, wheel gets resolved to the version we need for the update?
Strangely, when I checked the poetry.lock in this PR, it had setuptools removed, although it is specified in pyproject.toml.

[m-vdb]

but @ancalita if this was the case, wheel would be in the lock file. It isn't 🤔

[m-vdb]

Strangely, when I checked the poetry.lock in this PR, it had setuptools removed, although it is specified in pyproject.toml.

interestingly @ancalita , this was an issue with poetry < 1.2 (see this comment). It's probably the same thing with wheel...

[m-vdb]

wheel doesn't seem to be a dependency of setuptools

[m-vdb]

@ancalita I'm not sure where to pin wheel exactly, as it's not a dependency of rasa. I think in the Dockerfile could be a good place:

rasa/docker/Dockerfile.full

Line 23 in 5cdd299

pip install --no-cache-dir -U "pip==22.*"

thoughts?

Edit: I went ahead and implemented it in 0bd52e6 to save some time in case it's the valid approach; let me know if it's not the right place

[ancalita]

@ancalita I'm not sure where to pin wheel exactly, as it's not a dependency of rasa. I think in the Dockerfile could be a good place:

rasa/docker/Dockerfile.full

Line 23 in 5cdd299

pip install --no-cache-dir -U "pip==22.*"

thoughts?

Edit: I went ahead and implemented it in 0bd52e6 to save some time in case it's the valid approach; let me know if it's not the right place

I can't think of a different way to update wheel either, unless we add it to pyproject.toml which I don't think it's a good idea. This Dockerfile needs updating too; if the other ones use this as a base, might not be necessary to amend the Dockerfiles you've amended?

[m-vdb]

@ancalita I've updated it for consistency, but after a quick look at our CI pipeline, I am not sure that this Dockerfile at the root of the repo is used for building the images that we released.