search

uc-cdis / peregrine

GraphQL search API service
Apache License 2.0
11 stars 9 forks source link

Chore/bump werkzeug 3.0.3 #217

Closed george42-ctds closed 3 months ago

george42-ctds commented 3 months ago

JIRA ticket: PPS-1184

New Features

Breaking Changes

Bug Fixes

Improvements

Dependency updates

Deployment changes

github-actions[bot] commented 3 months ago

The style in this PR agrees with black. :heavy_check_mark:

This formatting comment was generated automatically by a script in uc-cdis/wool.

george42-ctds commented 3 months ago

Yes, correct, only bumping a few dependencies in the lock file.

MaribelleHGomez commented 3 months ago

Yes, correct, only bumping a few dependencies in the lock file.

so we're choosing not to change the toml file, and changing the lock file instead?

george42-ctds commented 3 months ago

Yes, the minimal update is to just have changes in the lock file, or do a "re-lock". The relevant packages (werkzeug, etc.) are not direct dependencies and are not listed in the pyproject.toml. The "re-locking" was sufficient to bump up these packages by a patch version or minor version. Sometimes you have to start bumping versions in the pyproject.toml to bump up sub-dependencies but that is not required in this case.

george42-ctds commented 3 months ago

Poetry will still utilize the pyproject.toml to determine which versions to install. Everything will still adhere to the rules in the proproject.toml.