Skip to content
This repository has been archived by the owner on Nov 11, 2019. It is now read-only.

Update dependencies (and a bit more) #1730

Merged
merged 35 commits into from
Dec 6, 2018
Merged

Conversation

garbas
Copy link
Contributor

@garbas garbas commented Dec 5, 2018

Along with updating dependencies I'm also addressing few other issues which will take full rebuild:

@garbas garbas requested a review from La0 as a code owner December 5, 2018 15:08
@rail
Copy link
Contributor

rail commented Dec 6, 2018

Wow, this is a huge update! 🥇

# See more at: https://github.com/garbas/pypi2nix
#
# COMMAND:
# pypi2nix -v -V 3.6 -r requirements.txt -r requirements-dev.txt
# pypi2nix -v -C /home/rok/dev/mozilla/services/lib/please_cli/../../tmp/pypi2nix -V 3.7 -O ../../nix/requirements_override.nix -e pytest-runner -e setuptools-scm -r requirements.txt -r requirements-dev.txt
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Now I know where you save your files! :)

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

😄 I need to fix this upstream to not leak this information

Copy link
Contributor

@La0 La0 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks ok on staging.
I tested static analysis (bot & frontend), pulse listener, uplift (bot & backend), and code coverage bot.

https://github.com/explosion/spacy-models/releases/download/en_core_web_sm-2.0.0/en_core_web_sm-2.0.0.tar.gz#egg=en-core-web-sm
idna<2.8,>=2.5 # Could not find a version that satisfies the requirement idna<2.8,>=2.5 (from requests==2.20.1)
msgpack<0.6.0,>=0.5.6 # Could not find a version that satisfies the requirement msgpack<0.6.0,>=0.5.6 (from thinc==6.12.1)
pyOpenSSL>=0.14 # Could not find a version that satisfies the requirement pyOpenSSL>=0.14; extra == "security" (from requests[security]>=2.7.0->libmozdata==0.1.43)
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It's a pity that we have to specify these requirements directly :(

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@marco-c yeah it is a pity.

but at least we catch this errors with nix. otherwise we would be blindly believe what pip gives us is correct and is far from the truth. the broken part of this process is pip and since it is silent about it nobody complains.

Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yeah we should try to fix them upstream, but it would take some time...

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

the problem is not how dependencies are defined upstream. the problem here is pip resolver and how it handles requirements.txt

@garbas garbas merged commit bdebc78 into mozilla:master Dec 6, 2018
@garbas garbas deleted the update-deps branch December 6, 2018 16:54
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants