Skip to content

chore(deps): Found 5 areas of concern. Most critical: setuptools lower bound is 17.1 #1587

Open
isagoakira wants to merge 2 commits into
nvbn:masterfrom
isagoakira:fix/deps-update-1779415663
Open

chore(deps): Found 5 areas of concern. Most critical: setuptools lower bound is 17.1 #1587
isagoakira wants to merge 2 commits into
nvbn:masterfrom
isagoakira:fix/deps-update-1779415663

Conversation

@isagoakira

Copy link
Copy Markdown

🔧 依赖维护更新 — nvbn/thefuck

此 PR 由 Code Legacy Reviver 自动生成🤖

📋 更新摘要

Found 5 areas of concern. Most critical: setuptools lower bound is 17.1 from 2013 — bump to >=69.0 for modern tooling. decorator and pyte have unnecessary version caps that are overly restrictive; remove '<5' and '<0.8.1' bounds respectively. pypandoc and pytest-docker-pexpect are unpinned and likely pulling very old versions — pin to recent stable. Python 2.7 / 3.3–3.4 support is EOL; consider dropping those extras_require entries.

📦 变更清单

🔴 setuptools: >=17.1>=69.0
setuptools 17.1 is from 2013; current is ~70+. Modern setuptools required for PEP 517/518 builds and updated wheel format support

🟡 decorator: <5 (for py<3), no cap (for py>2.7)no upper bound needed
decorator 5.x is stable and works across all Python 2.7+ environments; the <5 cap and version-specific pinning are unnecessary constraints

🟡 pyte: <0.8.1 (for py<=2.7), no cap (for py>2.7)no upper bound needed
pyte 0.8.1 cap was set in 2018; pyte has had stable releases since then without breaking changes

🟢 pypandoc: unpinned (likely 1.x era)^1.7.0
pypandoc has seen major releases to 1.7.x with API and pandoc-compat improvements; unpinned constraint risks an unconstrained upgrade anyway

🟢 pytest-docker-pexpect: unpinned (likely 0.x era)^0.11.0
pytest-docker-pexpect has released up to 0.11.x with bug fixes

⚠️ 风险等级

🟡 Medium

📝 文件变更

  • requirements.txt
  • setup.py

Generated by Code Legacy Reviver

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant