Relax/Update dependency of jsonpickle. Its restricting the version to 1.5 at the latest which is almost 4 years old

[pallav0894]

Version

4.16.1

Describe the bug

The botbuilder-core has a dependency on jsonpickle but the version requirements are >=1.2 and <1.5. This version was released almost 4 years ago. We are heavily using jsonpickle==3.2.2 in our application and its becoming very difficult to build a teams bot for our application given the jsonpickle strict version requirements

To Reproduce

Steps to reproduce the behavior:

1. pip install --upgrade pip (in a virtualenv) to use the new resolver that refuses to install conflicting dependencies
2. pip install botbuilder-core==4.16.1
3. pip install jsonpickle==3.2.2

Expected behavior

The dependencies should resolve

Additional context

If you look at the setup.py for botbuilder-core, the dependency for json pickle is kind of pinned. https://github.com/microsoft/botbuilder-python/blob/a7fd4399fd1a527269ede473c0fb1c4b4a4c6c73/libraries/botbuilder-core/setup.py#L12

[johngag]

Can we get this fixed?

[phenobarbital]

It's funny because botbuilder-core works with newer versions of jsonpickle (if jsonpickle is upgraded after installation, I can't find any issue), but any existing library in my ecosystem depends on newer versions of jsonpickle. I don't know why botbuilder-core is pinned to a too-old jsonpickle version.

[mishaxmishra]

Can you folks please fix this at the earliest and release a new version of botbuilder-python