NASA-PDS / doi-service

Service and tools for generating DOIs for PDS bundles, collections, and data sets
https://nasa-pds.github.io/doi-service
Other
2 stars 3 forks source link

Make this pip-installable with the dev extra again (bonus: no more Dependency Confusion Vulnerabilities) #443

Closed nutjob4life closed 2 weeks ago

nutjob4life commented 2 weeks ago

🗒️ Summary

While looking at some Dependabot issues, I noticed that this package could not be installed with pip install --editable '.[dev]'. I also noticed a large number of Dependency Confusion Vulnerabilities.

Merge this to make it installable again with the [dev] extra and to close those vulnerabilities.

⚙️ Test Data and/or Report

BEFORE:

INFO: pip is looking at multiple versions of pds-doi-service[dev] to determine which version is compatible with other requirements. This could take a while.
ERROR: Ignored the following yanked versions: 0.1.0, 0.1.1, 0.1.2, 0.1.3
ERROR: Ignored the following versions that require a different python version: 0.5.0 Requires-Python >=3.10; 0.5.1 Requires-Python >=3.10; 0.5.2 Requires-Python >=3.10; 2.1.0 Requires-Python >=3.10; 2.1.0rc1 Requires-Python >=3.10; 2.1.1 Requires-Python >=3.10; 2.2.2.240909 Requires-Python >=3.10; 8.0.0 Requires-Python >=3.10; 8.0.0rc1 Requires-Python >=3.10; 8.0.1 Requires-Python >=3.10; 8.0.2 Requires-Python >=3.10
ERROR: Could not find a version that satisfies the requirement types-pkg-resources; extra == "dev" (from pds-doi-service[dev]) (from versions: none)
ERROR: No matching distribution found for types-pkg-resources; extra == "dev"

AFTER:

Successfully installed pds-doi-service-2.5.0

NOTE: The tests still fail. But at least it installs now.

♻️ Related Issues

N/A.

nutjob4life commented 2 weeks ago

@alexdunnjpl 🤣🤣🤣🤣🤣🤣🤣🤣🤣