Closed NeolithEra closed 5 years ago
Fix your direct dependencies to be urllib3>=1.21.1,<1.26. I have checked this revision will not affect your downstream projects now.
Remove your direct dependency urllib3, and use the library chardet transitively introduced by requests.
Personally, I prefer solution 2. What's your opinion? @ThoughtfulDev May I pull a request to solve this issue?
Hey @NeolithEra Thank you for the issue.
It would be really nice if you could create a pull request which solves this issue.
Thanks in advance
Hi, as shown in the following full dependency graph of EagleEye, EagleEye requires urllib3 (the latest version), while the installed version of requests(2.22.0) requires urllib3>=1.21.1,<1.26.
According to Pip's “first found wins” installation strategy, urllib3 1.25.3 is the actually installed version.
Although the first found package version urllib3 1.25.3 just satisfies the later dependency constraint (urllib3>=1.21.1,<1.26), it will lead to a build failure once developers release a newer version of urllib3.
Dependency tree--------
Thanks for your attention. Best, Neolith