datagouv / csv-detective

CSV inspection
45 stars 10 forks source link

requests==2.32.0 dependency is yanked (csv-detective 0.7.2.dev800) #90

Closed bolinocroustibat closed 2 months ago

bolinocroustibat commented 2 months ago

Since requests 2.32.0 is yanked (https://pypi.org/project/requests/#history), we cannot install csv-detective 0.7.2.dev800 with some packages managers.

For example with rye package manager when installing latest hydra using csv-detective 0.7.2.dev800, we get this error:

No solution found when resolving dependencies:
  ╰─▶ Because requests==2.32.0 was yanked (reason: Yanked due to conflicts with CVE-2024-35195
      mitigation) and csv-detective==0.7.2.dev800 depends on requests==2.32.0, we can conclude that
      csv-detective==0.7.2.dev800 cannot be used.
      And because you require csv-detective==0.7.2.dev800, we can conclude that the requirements are
      unsatisfiable.

Solution: use latest 2.32.3, or use (>=2.32.0 AND <=2.33.0)

Screenshot 2024-08-20 at 11 13 29