-
-
Notifications
You must be signed in to change notification settings - Fork 1.1k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Update setuptools to >=71.0.4 #9812
Conversation
Codecov ReportAll modified and coverable lines are covered by tests ✅
Additional details and impacted files@@ Coverage Diff @@
## main #9812 +/- ##
=======================================
Coverage 95.79% 95.79%
=======================================
Files 174 174
Lines 18902 18912 +10
=======================================
+ Hits 18107 18117 +10
Misses 795 795 |
This comment has been minimized.
This comment has been minimized.
@@ -9,4 +9,4 @@ pytest-timeout~=2.3 | |||
towncrier~=23.11 | |||
requests | |||
# Voluntary for test purpose, not actually used in prod, see #8904 | |||
setuptools==41.6.0 | |||
setuptools;python_version>='3.12' |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I'm in favor of removing the version pin, but can I ask why limit the python version?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Until 3.12
, setuptools
was bundled with Python itself.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This is the test dependencie set to this specific version as a regression test (see comment above) I think the threat reported is not applicable in this case.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Got it, I must manually uninstalled it to reproduce that issue 😅
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This is the test dependencie set to this specific version as a regression test (see comment above) I think the threat reported is not applicable in this case.
I think so too. It nevertheless is a good idea to install a more modern version of setuptools and not keep the old one around. Especially as everyone has moved on since.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thank you Marc I did not realize that the pyproject.toml needed an upgrade (I only saw the test dependencie where it's not applicable imo).
🤖 Effect of this PR on checked open source code: 🤖 Effect on pytest:
This comment was generated for commit 135f165 |
(cherry picked from commit 60bd230)
(cherry picked from commit 60bd230)
(cherry picked from commit 60bd230) Co-authored-by: Marc Mueller <[email protected]>
Description
Update setuptools version used for tests and build.
Fixes https://github.com/pylint-dev/pylint/security/dependabot/2
https://setuptools.pypa.io/en/latest/history.html#v71-0-4