Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Remove max limit on dependency versions #302

Merged
merged 2 commits into from
Oct 11, 2023
Merged

Conversation

lcjohnso
Copy link
Member

@lcjohnso lcjohnso commented Oct 4, 2023

Brief Slack discussion (link to thread) with @adammcmaster confirmed that there was no specific issue dictating max limits on dependency versions (added in #129). To limit dependency version conflicts, I propose we remove these limits until a point where a specific max limit is required for any of the dependencies. We have received multiple reports (e.g., from Spyfish Aotearoa and Gravity Spy teams) of max version on requests library causing issues and incompatibilities.

Closes #301 as that sort of bump would no longer be required.

Copy link
Collaborator

@yuenmichelle1 yuenmichelle1 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks fine to me.

'requests>=2.4.2,<2.29',
'future>=0.16,<0.19',
'python-magic>=0.4,<0.5',
'requests>=2.4.2',
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

There's a 3.0 branch on the requests repo but no indication how soon it's coming or if that'll be a significant interface change. Could be worth including <3.0, but up to you.

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It looks like the requests 3.0 branch hasn't been touched since 2018ish, and I'm not sure whether any breaking changes would necessarily affect the Client or not even if/when released. My proposal: until it is demonstrated that some aspect of our Client is breaking with a newer version (whether thats 2.x or 3.x), I don't think it is worth the incompatibility for users wanting to download bleeding edge versions.

@lcjohnso lcjohnso merged commit d9700c2 into master Oct 11, 2023
3 checks passed
@lcjohnso lcjohnso deleted the dependency-max-versions branch October 11, 2023 14:18
@adammcmaster adammcmaster mentioned this pull request May 22, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants