Skip to content

chore(deps): Most deps in requirements.txt lack version pins, making stale detection #1595

Open
isagoakira wants to merge 2 commits into
nvbn:masterfrom
isagoakira:fix/deps-update-1780193051
Open

chore(deps): Most deps in requirements.txt lack version pins, making stale detection #1595
isagoakira wants to merge 2 commits into
nvbn:masterfrom
isagoakira:fix/deps-update-1780193051

Conversation

@isagoakira
Copy link
Copy Markdown

🔧 依赖维护更新 — nvbn/thefuck

此 PR 由 Code Legacy Reviver 自动生成🤖

📋 更新摘要

Most deps in requirements.txt lack version pins, making stale detection difficult. setup.py has outdated version caps for decorator (<5) and pyte (<0.8.1) for Python 2.7. Since project targets Python 2.7+, these constraints may be intentional but are very outdated.

📦 变更清单

🟡 six: no pin (allows any)six>=1.17.0
six 1.16.0 was final release supporting Python 2. Project likely still works with modern six, but Python 2.7 EOL means older six may lack fixes

🟡 decorator (2.7 constraint): decorator<5decorator>=5.0.0
decorator is now at 5.1.x. The upper bound <5 is unnecessarily restrictive for Python 3 environments

🟡 pyte (2.7 constraint): pyte<0.8.1pyte>=0.9.0
pyte is now at 0.9.x+. The <0.8.1 cap is outdated. Note: pyte 0.9+ dropped Python 2 support

🟢 setuptools (requirements.txt): >=17.1>=70.0.0
setuptools is now 70.x. While >=17.1 allows upgrades, pinning modern minimum ensures compatibility with current tooling

⚠️ 风险等级

🔴 High

📝 文件变更

  • requirements.txt
  • setup.py

Generated by Code Legacy Reviver

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant