Pin fingerprints and normality to avoid pyicu (#4531)

Pins normality to v1.2.3 and normality to 2.6.1 to avoid a hard
dependency on pyicu which is a required dependency from normality
v3.

Reference: #4493

Signed-off-by: Ayan Sinha Mahapatra <[email protected]>

Author: AyanSinhaMahapatra

setup-mini.cfg

@@ -77,7 +77,7 @@ install_requires =
     debian-inspector >= 31.1.0
     dparse2 >= 0.7.0
     fasteners
-    fingerprints >= 0.6.0
+    fingerprints >= 0.6.0, <=1.2.3
     ftfy >=  6.0.0
     gemfileparser2 >= 0.9.0
     html5lib
@@ -90,6 +90,7 @@ install_requires =
     license_expression >= 30.4.4
     lxml >= 5.4.0
     MarkupSafe >= 2.1.2
+    normality <= 2.6.1
     packageurl_python >= 0.9.0
     packvers >= 21.0.0
     # use temp advanced patched release

setup.cfg

@@ -78,7 +78,7 @@ install_requires =
     debian-inspector >= 31.1.0
     dparse2 >= 0.7.0
     fasteners
-    fingerprints >= 0.6.0
+    fingerprints >= 0.6.0, <=1.2.3
     ftfy >=  6.0.0
     gemfileparser2 >= 0.9.0
     html5lib
@@ -91,6 +91,7 @@ install_requires =
     license_expression >= 30.4.4
     lxml >= 5.4.0
     MarkupSafe >= 2.1.2
+    normality <= 2.6.1
     packageurl_python >= 0.9.0
     packvers >= 21.0.0
     # use temp advanced patched release