Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Dependency lockfile needs investigation #456

Open
gridhead opened this issue Nov 1, 2022 · 0 comments
Open

Dependency lockfile needs investigation #456

gridhead opened this issue Nov 1, 2022 · 0 comments
Labels
dependencies Pull requests that update a dependency file

Comments

@gridhead
Copy link
Member

gridhead commented Nov 1, 2022

Many automated dependency updates from @dependabot are failing and certain versions of certain dependencies are either not available or are not compatible with other dependencies.

Pull requests affected by this

  1. Bump black from 21.12b0 to 22.10.0 #437
  2. Bump pytest from 6.2.5 to 7.1.3 #439
  3. Bump gevent from 21.12.0 to 22.8.0 #440
  4. Bump pytest-isort from 2.0.0 to 3.0.0 #441
  5. Bump flake8 from 3.9.2 to 5.0.4 #442
  6. Bump pytest-cov from 3.0.0 to 4.0.0 #443

For now, the workaround employed is ignoring those PRs for now and coming back to them when new PRs for the same dependencies are created for the newer versions. If they pass the CI, the problem would automatically be solved but if not, the dependency lockfile needs to be investigated.

@gridhead gridhead added the dependencies Pull requests that update a dependency file label Nov 1, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

No branches or pull requests

1 participant