nccgroup / sobelow

Security-focused static analysis for the Phoenix Framework
Apache License 2.0
1.66k stars 92 forks source link

castore vsn requirement #129

Closed houllette closed 1 year ago

houllette commented 1 year ago

May want to consider relaxing the castore version requirement, seeing some issues upgrading Sobelow on projects where castore is in the lock file at a pre-1.0 version and it's causing upgrade path issues.

realcorvus commented 1 year ago

I agree with this, castore >= 0.0.0 would be much better, considering 1.0.0 was released Jan 13, 2023

murilobauerc commented 1 year ago

did anyone find a workaround for this? facing a similar issue

houllette commented 1 year ago

@murilobauerc I'll be pushing out a hotfix for this ASAP in the next couple hours 🙂