move-coop / parsons

A python library of connectors for the progressive community.
Other
255 stars 125 forks source link

[Bug] Parsons 3.1.0 targets yanked 4.0.0 version of braintree with critical bugs #1007

Closed bmos closed 1 month ago

bmos commented 4 months ago

Parsons 3.1.0 depends on braintree 4.0.0 which has been yanked due to critical bugs.

Detailed Description

When I install parsons 3.1.0 via pip, I get this message:

WARNING: The candidate selected for download or install is a yanked version: 'braintree' candidate (version 4.0.0 at https://files.pythonhosted.org/packages/a5/1e/641306eec960161028e0a30d2f635abdfbdb89029330df1701bc106e5d8c/braintree-4.0.0-py2.py3-none-any.whl (from https://pypi.org/simple/braintree/)) Reason for being yanked: critical bugs

When I install it via uv it doesn't even install for the same reason.

To Reproduce

Create a new virtual environment and run pip install parsons==3.1.0

Your Environment

Additional Context

In a fork I'm playing around with, braintree==4.26.0 and google-cloud-bigquery==3.18.0 were needed to get pytests passing. I'm not sure why that isn't the case on this repo but it seems like these versions might be safe to update.

Priority

For me it's low because I don't use braintree but "critical bugs" makes it sound rather serious for people who use that integration.

shaunagm commented 1 month ago

Fixed in #1054