revert: fix: pin xmlsec to fixed version (#22477)

requirements.in

@@ -41,16 +41,12 @@ drf-spectacular==0.27.1
 geoip2==4.6.0
 google-cloud-bigquery==3.11.4
 gunicorn==20.1.0
-hogql-parser==1.0.8
-nh3==0.2.14
 infi-clickhouse-orm@ git+https://github.com/PostHog/infi.clickhouse_orm@9578c79f29635ee2c1d01b7979e89adab8383de2
 kafka-python==2.0.2
 kombu==5.3.2
-lxml==5.2.1 # only needed until python3-saml supports xmlsec==1.3.14
 lzstring==1.0.4
 natsort==8.4.0
 nanoid==2.0.0
-nh3==0.2.14
 numpy==1.23.3
 openpyxl==3.1.2
 orjson==3.9.10
@@ -93,5 +89,6 @@ django-two-factor-auth==1.14.0
 phonenumberslite==8.13.6
 openai==1.10.0
 tiktoken==0.6.0
-xmlsec==1.3.14 # only needed until python3-saml supports xmlsec==1.3.14
+nh3==0.2.14
+hogql-parser==1.0.8
 zxcvbn==4.4.28

requirements.txt

@@ -1,8 +1,12 @@
-# This file was autogenerated by uv via the following command:
-#    uv pip compile requirements.in -o requirements.txt
+#
+# This file is autogenerated by pip-compile with Python 3.10
+# by the following command:
+#
+#    pip-compile --output-file=requirements.txt requirements.in
+#
 aioboto3==12.0.0
     # via -r requirements.in
-aiobotocore==2.7.0
+aiobotocore[boto3]==2.7.0
     # via
     #   aioboto3
     #   s3fs
@@ -240,7 +244,7 @@ gitpython==3.1.40
     # via dlt
 giturlparse==0.12.0
     # via dlt
-google-api-core==2.11.1
+google-api-core[grpc]==2.11.1
     # via
     #   google-cloud-bigquery
     #   google-cloud-core
@@ -260,6 +264,8 @@ googleapis-common-protos==1.60.0
     # via
     #   google-api-core
     #   grpcio-status
+greenlet==3.0.3
+    # via sqlalchemy
 grpcio==1.57.0
     # via
     #   google-api-core
@@ -320,9 +326,8 @@ kombu==5.3.2
     # via
     #   -r requirements.in
     #   celery
-lxml==5.2.1
+lxml==4.9.4
     # via
-    #   -r requirements.in
     #   python3-saml
     #   toronado
     #   xmlsec
@@ -415,7 +420,7 @@ protobuf==4.22.1
     #   grpcio-status
     #   proto-plus
     #   temporalio
-psycopg==3.1.18
+psycopg[binary]==3.1.18
     # via -r requirements.in
 psycopg-binary==3.1.18
     # via psycopg
@@ -541,13 +546,8 @@ semantic-version==2.8.5
     # via -r requirements.in
 semver==3.0.2
     # via dlt
-sentry-sdk==1.44.1
+sentry-sdk[celery,clickhouse-driver,django,openai]==1.44.1
     # via -r requirements.in
-setuptools==70.0.0
-    # via
-    #   dlt
-    #   gunicorn
-    #   infi-clickhouse-orm
 simplejson==3.19.2
     # via dlt
 six==1.16.0
@@ -654,7 +654,7 @@ unicodecsv==0.14.1
     # via djangorestframework-csv
 uritemplate==4.1.1
     # via drf-spectacular
-urllib3==1.26.18
+urllib3[secure,socks]==1.26.18
     # via
     #   botocore
     #   django-revproxy
@@ -682,11 +682,12 @@ wrapt==1.15.0
     # via aiobotocore
 wsproto==1.1.0
     # via trio-websocket
-xmlsec==1.3.14
-    # via
-    #   -r requirements.in
-    #   python3-saml
+xmlsec==1.3.13
+    # via python3-saml
 yarl==1.7.2
     # via aiohttp
 zxcvbn==4.4.28
     # via -r requirements.in
+
+# The following packages are considered to be unsafe in a requirements file:
+# setuptools