ci(server): pin workflow dependencies for safer installs

Author: anderslindho

.github/workflows/server.yml

@@ -41,8 +41,14 @@ jobs:
             python-version: ${{ matrix.python-version }}
         - name: Install
           run: |
-            python -m pip install --upgrade pip
-            pip install .
+            python - <<'PY'
+            import subprocess
+            import sys
+
+            pip_spec = "pip==21.3.1" if sys.version_info < (3, 7) else "pip==24.0"
+            subprocess.check_call([sys.executable, "-m", "pip", "install", "--upgrade", pip_spec, "--only-binary=:all:"])
+            PY
+            python -m pip install --no-deps .
   test-unit:
     runs-on: ubuntu-latest
     needs: build-server
@@ -57,9 +63,9 @@ jobs:
         python-version: 3.9
     - name: Install dependencies
       run: |
-        python -m pip install --upgrade pip
-        python -m pip install '.[test]'
-        python -m pip install .
+        python -m pip install --upgrade "pip==24.0" --only-binary=:all:
+        python -m pip install --only-binary=:all: -r requirements-ci-py39.txt
+        python -m pip install --no-deps .
     - name: Test unit tests
       run: |
         set -o pipefail

server/requirements-ci-py39.txt

@@ -0,0 +1,5 @@
+channelfinder @ https://github.com/ChannelFinder/pyCFClient/archive/refs/tags/v3.2.0.zip
+requests==2.32.3
+twisted==24.11.0
+pytest==8.3.5
+testcontainers==4.8.2