Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Pyup recommends updates to incompatible packages

See original GitHub issue

I have flake8 and pycodestyle in my requirements.txt (generated from a requirements.in containing flake8 but not pycodestyle using pip-compile)

I got a PR this morning for pycodestyle==2.4.0 but flake8 depends on pycodestyle >= 2.3.0, < 2.4.0, so flake8 doesn’t work after installing the new requirements.

Is there anyway for pyup to guarantee the consistency of packages that depend on each other? And what is the recommended work around for this?

Issue Analytics

State:
Created 5 years ago
Reactions:1
Comments:6 (2 by maintainers)

Top GitHub Comments

2reactions

tardypcommented, May 23, 2018

I use weekly PR, and Pyup has been of great use, but requiring to revert pycodestyle and pyflakes upgrade every week is going to be painful.

Adding a pyup filter means that I won’t be updated when the flake8 finally resolve the original compatibility issue.

1reaction

jayfkcommented, Apr 11, 2018

@dschep have you looked at filters? https://pyup.io/docs/bot/filter/

Top Results From Across the Web

GitHub - pyupio/safety

Display packages licenses information (requires a premium PyUp subscription). Options. --key (REQUIRED). API Key for pyup.io's licenses database.

ndspy Changelog - pyup.io

* This is a very backwards-incompatible change, and any code using the module definitely needs to be updated. * Medium-sized changes to `ndspy.bmg`'s...

w3lib Changelog - PyUp.io

PyUp actively tracks 474,594 Python packages for vulnerabilities to keep your Python environments secure. ... Backwards incompatible changes:

requests Changelog - pyup.io

PyUp actively tracks 472,795 Python packages for vulnerabilities to keep your Python ... PyOpenSSL is no longer the recommended secure option for Requests....

pip Changelog - pyup.io

When a package is requested by the user for upgrade, correctly identify that the ... Add a section in the documentation to suggest...