-
Notifications
You must be signed in to change notification settings - Fork 130
Update django-import-export deps #6372
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
c514c3d
to
3ca3031
Compare
These have gotten very out of date and it seems like dependabot hasn't worked on them.
3ca3031
to
ce339e4
Compare
"PyYAML>=5.1.1,<=6.0.2", | ||
"redis>=4.3,<5.2.2", | ||
"tablib<3.6.0", | ||
"tablib>=3.7.0,<3.9.0", |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Should tablib be a direct dependency at all?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
We import it directly here:
pulpcore/pulpcore/app/tasks/importer.py
Line 16 in d563dec
from tablib import Dataset |
However as long as django-import-export exists we can probably assume its presence? This requirement was primarily here to avoid new incompatible versions, and presumably that's less of an issue with these newer versions?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Well turning it into a proper dependency with a proper range also sounds good then.
Update: we can't update these packages until a breaking change release. I can verify that there are some changed APIs that are exposed to plugins. |
This pull request has been marked 'stale' due to lack of recent activity. If there is no further activity, the PR will be closed in another 30 days. Thank you for your contribution! |
This pull request has been marked 'stale' due to lack of recent activity. If there is no further activity, the PR will be closed in another 30 days. Thank you for your contribution! |
Closing in preference for #6973 |
These have gotten very out of date and it seems like dependabot hasn't worked on them.