-
Notifications
You must be signed in to change notification settings - Fork 25
fix(deps): update dependency pyjwt to >=2.11,<2.12 #534
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: main
Are you sure you want to change the base?
Conversation
|
Greptile OverviewGreptile SummaryThis PR updates the The update appears to be an automated Renovate PR, but the logic needs adjustment. The Python 3.9+ constraint should likely be updated to match, or the Python 3.8 constraint should maintain an upper bound at <2.12 while keeping the lower bound at >=2.10.0 for consistency. Major issues:
Confidence Score: 2/5
Important Files Changed
Sequence DiagramsequenceDiagram
participant Renovate as Renovate Bot
participant Deps as pyproject.toml
participant Py38 as Python 3.8 Environment
participant Py39 as Python 3.9+ Environment
participant PyJWT as PyJWT Library
Renovate->>Deps: Update pyjwt constraint for Python 3.8
Note over Deps: Before: pyjwt>=2.9.0,<2.10 (Python 3.8)
Note over Deps: After: pyjwt>=2.11,<2.12 (Python 3.8)
Note over Deps: Unchanged: pyjwt>=2.10.0 (Python 3.9+)
Py38->>Deps: Install dependencies
Deps->>PyJWT: Request pyjwt>=2.11,<2.12
PyJWT-->>Py38: Install 2.11.x
Py39->>Deps: Install dependencies
Deps->>PyJWT: Request pyjwt>=2.10.0
PyJWT-->>Py39: Install 2.10.x or 2.11.x (no upper bound)
Note over Py38,Py39: Inconsistency: Python 3.8 mandates 2.11+<br/>while Python 3.9+ allows 2.10+
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
1 file reviewed, 1 comment
| "pyjwt>=2.10.0 ; python_full_version >= '3.9'", | ||
| "pyjwt>=2.9.0,<2.10 ; python_full_version == '3.8.*'", | ||
| "pyjwt>=2.11,<2.12; python_full_version == '3.8.*'", |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Inconsistent pyjwt version constraints across Python versions. Python 3.9+ allows >=2.10.0 (including 2.11+), but Python 3.8 is now constrained to >=2.11,<2.12. This means Python 3.8 will use newer pyjwt versions than Python 3.9+, which is inverted from the original intent.
| "pyjwt>=2.10.0 ; python_full_version >= '3.9'", | |
| "pyjwt>=2.9.0,<2.10 ; python_full_version == '3.8.*'", | |
| "pyjwt>=2.11,<2.12; python_full_version == '3.8.*'", | |
| "pyjwt>=2.10.0 ; python_full_version >= '3.9'", | |
| "pyjwt>=2.10.0,<2.12; python_full_version == '3.8.*'", |
831e964 to
939aded
Compare
This PR contains the following updates:
>=2.9.0,<2.10→>=2.11,<2.12Release Notes
jpadilla/pyjwt (pyjwt)
v2.11.0Compare Source
Fixed
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.