search

opendatateam / udata

Customizable and skinnable social platform dedicated to open data.
http://udata.readthedocs.org
GNU Affero General Public License v3.0
238 stars 87 forks source link

Update pinned dependencies #3089

Closed bolinocroustibat closed 1 month ago

bolinocroustibat commented 1 month ago

Update pinned dependencies according to project dependencies, without updating any project dependencies.

Compatibility between dependencies versions in this PR have been checked by a package manager, and updated to the latest ones when possible.

Note: It would be also useful to update cryptography package in project dependencies, since 1) old versions are often causes of system incompatibilities issues and 2) since it's a security dependency and 3) since the project version is very old (2.8, we're now at 42.0.8). This can be done in another PR, or in this PR, or later. Let me know what you think!

bolinocroustibat commented 1 month ago

This looks good to me! Don't forget to add a changelog entry before merging.

Indeed! Done

Have you updated pinned dependencies for other .pip files also?

Nope, I would say to do it in another PR, let me know

I would say updating cryptography is a bigger jump and require testing more thoroughly. We can update it in another PR I would say

Sure, it makes sense.

ThibaudDauce commented 1 month ago

I think this PR breaks udata-front with dependencies conflicts (or maybe it's a problem with my cache venv…)

maudetes commented 1 month ago

I think this PR breaks udata-front with dependencies conflicts (or maybe it's a problem with my cache venv…)

@nicolaskempf57 has updated udata-front indeed following this PR : https://github.com/datagouv/udata-front/pull/448