Pin requirements, and use requirements during publish.

.github/workflows/publish.yml

@@ -18,7 +18,7 @@ jobs:
       run: |
         pip install --upgrade pip
         pip install --upgrade setuptools
-        pip install lektor pygments
+        pip install -r requirements.txt
     - name: Build site
       run: |
         lektor plugins reinstall

requirements.txt

@@ -1,4 +1,21 @@
-Lektor==3.1.3
-Werkzeug==1.0.1
-Markupsafe<2
-mistune==0.8.4
+Lektor==3.3.1
+# Dependencies that need to be locked for safety
+Babel==2.9.1
+charset-normalizer==2.0.12
+click==8.1.2
+ExifRead==2.3.2
+filetype==1.0.10
+Flask==2.1.1
+idna==3.3
+inifile==0.4.1
+itsdangerous==2.1.2
+Jinja2==3.1.1
+Lektor==3.3.1
+MarkupSafe==2.1.1
+mistune==0.8.4
+python-slugify==6.1.1
+requests==2.27.1
+text-unidecode==1.3
+urllib3==1.26.9
+watchdog==2.1.7
+Werkzeug==2.0.3