chore(api/Dockerfile): pin alpine dependencies and bump watchfiles

api/Dockerfile

@@ -21,9 +21,10 @@ RUN \
     postgresql-dev \
     python3-dev \
     py3-psycopg2=2.9.5-r0 \
-    py3-cryptography \
-    py3-lxml \
-    py3-pillow \
+    py3-cryptography=38.0.3-r0 \
+    py3-lxml=4.9.1-r0 \
+    py3-pillow=9.3.0-r0 \
+    py3-watchfiles=0.18.1-r0 \
     libldap \
     libffi-dev \
     make \
@@ -53,14 +54,14 @@ RUN \
     # is why we need to use the packages shipped by Alpine Linux.
     # Since poetry does not allow in-place dependency pinning, we need
     # to install the deps using pip.
-    grep -Ev 'cryptography|uvicorn|watchgod|watchfiles|lxml|pillow|psycopg2' /requirements.txt | pip3 install -r /dev/stdin cryptography==38.0.3 uvicorn==0.17.6 watchgod==0.8.2 lxml==4.9.1 pillow==9.3.0 psycopg2==2.9.5 && \
+    grep -Ev 'cryptography|watchfiles|lxml|pillow|psycopg2' /requirements.txt | pip3 install -r /dev/stdin cryptography==38.0.3 watchfiles==0.18.1 lxml==4.9.1 pillow==9.3.0 psycopg2==2.9.5 && \
     rm -rf "$PIP_DOWNLOAD_CACHE"
 
 ARG install_dev_deps=0
 RUN \
     if [ "$install_dev_deps" = "1" ] ; then \
       echo "Installing dev dependencies" && \
-      grep -Ev 'cryptography|uvicorn|watchgod|watchfiles|lxml|pillow|psycopg2' /dev-requirements.txt | pip3 install -r /dev/stdin cryptography==38.0.3 uvicorn==0.17.6 watchgod==0.8.2 lxml==4.9.1 pillow==9.3.0 psycopg2==2.9.5 && \
+      grep -Ev 'cryptography|watchfiles|lxml|pillow|psycopg2' /dev-requirements.txt | pip3 install -r /dev/stdin cryptography==38.0.3 watchfiles==0.18.1 lxml==4.9.1 pillow==9.3.0 psycopg2==2.9.5 && \
       rm -rf "$PIP_DOWNLOAD_CACHE" \
     ; else \
       echo "Skipping dev deps installation" \
@@ -84,9 +85,10 @@ RUN apk add --no-cache \
     libxml2 \
     libxslt \
     py3-psycopg2=2.9.5-r0 \
-    py3-cryptography \
-    py3-lxml \
-    py3-pillow \
+    py3-cryptography=38.0.3-r0 \
+    py3-lxml=4.9.1-r0 \
+    py3-pillow=9.3.0-r0 \
+    py3-watchfiles=0.18.1-r0 \
     libldap
 
 COPY . /app