search

taverntesting / tavern

A command-line tool and Python library and Pytest plugin for automated testing of RESTful APIs, with a simple, concise and flexible YAML-based syntax
https://taverntesting.github.io/
MIT License
1.02k stars 193 forks source link

Add py as dependency to remeditate AttributeError: module 'py' has no attribute 'io' #818

Closed ahebrank closed 1 year ago

ahebrank commented 1 year ago

See #816 .

pytest has removed py as a dependency as of 7.2.0 (https://github.com/pytest-dev/pytest/pull/10396), but tavern still requires it. Test failures produce an internal error AttributeError: module 'py' has no attribute 'io' without this dependency.

michaelboulton commented 1 year ago

I think there is some issue with the way tox caching is working in the github action. I don't know why it keeps failing (due to it not actually installing py) when it's explicitly listed as a dependency

i540608 commented 1 year ago

@michaelboulton Hi, is it possible to remove the Py from the release dependencies and use different file for test dependencies, because the Py has quite high-level security vulnerability and it will trigger security scanners for my projects;

As the Py is itself deprecated, then it's highly likely that maintainers of the Py will not push the fix

michaelboulton commented 1 year ago

It may be deprecated but pytest have also vendored part of the library https://github.com/pytest-dev/pytest/pull/10396 , not the 'io' part which is also used by tavern. It means reaching into more internal pytest code.