Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

actions: Update pinned requirements #544

Closed
wants to merge 1 commit into from

Conversation

github-actions[bot]
Copy link
Contributor

Note: close and reopen the PR to trigger CI.

@jku jku closed this Feb 10, 2025
@jku jku reopened this Feb 10, 2025
@@ -55,7 +55,7 @@ google-auth==2.38.0
# google-cloud-kms
google-cloud-kms==3.2.2
# via securesystemslib
googleapis-common-protos==1.66.0
googleapis-common-protos==1.67.0rc1
Copy link
Member

@jku jku Feb 10, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

always a good sign to get rc dependencies...

This might be a mistake in our update-pinned-deps: nothing else really changes so I did not expect this

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

weirdly I don't get this same result locally

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Interesting. How do you want to proceed here?

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Not sure:

  • I can see this happens only when the dependency (in two of our dependencies) is googleapis-common-protos<2.0.0dev -- this seems weird but I'm not sure why this is related
  • I still have no idea why this only happens in GitHub Actions: locally I have the same Python version, same pip-tools version... I still can't reproduce

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Oh I got it now:

  • pip 23.3 does not reproduce
  • pip 25.0.1 does reproduce

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

as pip devs pointed out, pip was just fixing the previous incorrect resolution.

Real issue is google libraries using "googleapis-common-protos<2.0.0dev" style requirements: I've filed this internally. For now we might have to do some manual fixes -- but we can let these collect for a week or two

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Great find.

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

googleapis-common-protos made an actual release so this specific issue has gone away: it will appear again though

@jku jku closed this Feb 16, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants