Skip to content

chore(deps): 5 outdated entries found. setuptools floor bumped to modern 75.x (high c#1591

Open
isagoakira wants to merge 2 commits into
nvbn:masterfrom
isagoakira:fix/deps-update-1779847763
Open

chore(deps): 5 outdated entries found. setuptools floor bumped to modern 75.x (high c#1591
isagoakira wants to merge 2 commits into
nvbn:masterfrom
isagoakira:fix/deps-update-1779847763

Conversation

@isagoakira

Copy link
Copy Markdown

🔧 依赖维护更新 — nvbn/thefuck

此 PR 由 Code Legacy Reviver 自动生成🤖

📋 更新摘要

5 outdated entries found. setuptools floor bumped to modern 75.x (high confidence); decorator & pyte upper bounds are stale (3+ minor versions behind), bumped one minor to preserve Python 2.7 compatibility ceiling while allowing patches; flake8 & pytest unpinned in requirements.txt — added safe 7.x/8.x pins. No version specs changed for: mock (deprecated but functional), pypandoc, wheel, twine, pexpect, pytest-benchmark, pytest-docker-pexpect — these are not clearly outdated.

📦 变更清单

🔴 setuptools: >=17.1>=75.0.0
setuptools>=17.1 is a 9+ year old floor. Modern setuptools is 75.x with many security/feature improvements; no upper bound in extras makes this safe

🔴 decorator (2.7 extras): decorator<5decorator<5.1
decorator<5 upper bound is overly restrictive; current decorator is 5.1.x; bump to <5.1 to stay under major-5 ceiling while allowing patch updates

🔴 pyte (2.7 extras): pyte<0.8.1pyte<0.9.0
pyte<0.8.1 is 6+ years old; latest is 0.9.x; bump to <0.9.0 to allow patch releases while keeping below major-1 ceiling

🟡 flake8: (unpinned)>=7.0.0,<8.0.0
flake8 is unpinned in requirements.txt; pin to latest 7.x to ensure consistent CI and pick up bug/security fixes

🟡 pytest: (unpinned)>=8.0.0,<9.0.0
pytest is unpinned in requirements.txt; this project uses pytest-mock, pytest-benchmark; pin to 8.x for stability

⚠️ 风险等级

🟢 Low

📝 文件变更

  • requirements.txt
  • setup.py

Generated by Code Legacy Reviver

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant