sonatype-nexus-community / jake

Check your Python environments for vulnerable Open Source packages with OSS Index or Sonatype Nexus Lifecycle.
https://jake.readthedocs.io/
Apache License 2.0
111 stars 24 forks source link

fix: pin some upstream dependencies to prevent #112 #113

Closed madpah closed 2 years ago

madpah commented 2 years ago

Signed-off-by: Paul Horton phorton@sonatype.com

Some upstream dependencies have release candidates (RCs) for next major versions which break the current version of jake.

This PR looks to prevent these newer versions from being used with jake.

It relates to the following issue #s:

cc @bhamail / @DarthHater

madpah commented 2 years ago

This looks to be working as required based on the output in CircleCI