Review requirements

Conan has been including dependencies from time to time in new releases. Version 0.22.2 has the following list of requirements:

PyJWT>=1.4.0, <1.5.0
requests>=2.7.0, <2.14.0
colorama>=0.3.3, <0.4.0
PyYAML>=3.11, <3.13.0
patch==1.16
fasteners>=0.14.1
six>=1.10.0
node-semver==0.1.1
distro>=1.0.2, <1.1.0
pylint==1.6.5
future==0.16.0

PyJWT has a new release, 1.5.0. Is 1.5.0 supported? Why PyJWT requirement was specific about major version, and why fastners not? Why patch, node-semver, pylint and future are so specific about the supported version?

Distros like Slackware and Arch Linux are creating packages of conan requirements.

https://slackbuilds.org/repository/14.2/development/conan/?search=conan
https://aur.archlinux.org/packages/conan/

These requirements can also be a dependence of other distro packages. So, It is very important to maintain the requirements updated and track compatibility. For example, currently pylint version in Slackware database is 1.5.2 https://slackbuilds.org/repository/14.2/development/pylint/. Is this version supported? About a newer pylint, version 1.7.1?

[lasote]

Thanks @tivek, feel free to open a PR with the changes that you consider reasonable, you can comment on it the reasons for each case. I’m sure we can relax/update/downgrade some requirements without any problem.

[lasote]

Hi all,

I’ve been reviewing why node-semver, six, patch and others are fixed versions, and they are actually the latest published version (no more versions have been published).

For the PyJWT and the requests, we have relaxed the constrictions, if ANY upgrade is needed please report in a new issue and we will be glad of review/update them.

It feels arbitrary to relax the dependencies that are pretty stalled on pypi.