unpin regex dependency

[gruebel]

Which issue(s) does this change fix?

the regex package was pinned to version 2021.9.30 for over a year, even the issue was already fixed and the package dateparser, which is actually using it, is not pinning it.

Why is this change necessary?

I'm not judging, but I highly recommend to rethink your practice of pinning all these packages, which makes it almost impossible to install anything else in the same environment. You should rather start to embrace wildcard dependencies or at least upper/lower bounds for all of them. If you find an incompatible one, then you can easily exclude it, like I did in my PR.
The SAM CLI is pre-installed on CodeBuild via pip so your strict dependencies block any other packages version dependencies or dictate typically very old versions.
ex.

docker~=4.2.0 (from 06/2020, current latest 6.0.1)
jmespath~=0.10.0 (from 05/2020, current latest 1.0.1)
PyYAML>=5.4.1,==5.* (from 01/2021, current latest 6.0)
tzlocal==3.0 from 08/2021, current latest 4.3) <- dateparser doesn't pin this dependency, so probably worth to test an upgrade again
watchdog==2.1.2 (from 05/2021, current latest 3.0.0)

How does it address the issue?

What side effects does this change have?

Mandatory Checklist

PRs will only be reviewed after checklist is complete

• Add input/output type hints to new functions/methods
• Write design document if needed (Do I need to write a design document?)
• Write/update unit tests
• Write/update integration tests
• Write/update functional tests if needed
• make pr passes
• make update-reproducible-reqs if dependencies were changed
• Write documentation

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

[moelasmar]

in my opinion it is better to pin to a specific version, so the SAM CLI behaviour will be the same for everyone. Can you change this to pin to the latest stable version.

[gruebel]

are you sure about that? the dependency comes from dateparser and currently only regex and tzlocal are pinned, but not pytz and python-dateutil. Also you don't pin most of the other indirect dependency coming from the other packages.

[moelasmar]

good point