-
Notifications
You must be signed in to change notification settings - Fork 0
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
"Unresolvable JSON pointer" when jsonschema>=4.18.1 #19
Comments
This neither fixes nor exacerbates #19. Because I am still giving the 3.7.1 as the earliest version to support, poetry installs an early enough version of jsonschema to avoid #19, even though that bug is conceptually unrelated to what version of Python is used. Unfortunately, this only applies to the "poetry install" usage, which is not a significant use case other than for development. The problem in #19 will usually (perhaps almost always) happen in actual use.
This neither fixes nor exacerbates #19. Because I am still giving the 3.7.1 as the earliest version to support, poetry installs an early enough version of jsonschema to avoid #19, even though that bug is conceptually unrelated to what version of Python is used. Unfortunately, this only applies to the "poetry install" usage, which is not a significant use case other than for development. The problem in #19 will usually (perhaps almost always) happen in actual use.
This also updates the readme accordingly, to recommending installing via pipx instead of as a dev dependency of a project that might otherwise depend on jsonschema and benefit from using a later version. It also adds a link to PyPI. This will look a little weird as long as the main (repo root) readme and PyPI readme are the same file, but I think it's better than omitting it, and I don't want to add a badge for it instead until I've thought through what other badges (if any) ought to be shown.
This also updates the readme accordingly, to recommending installing via pipx instead of as a dev dependency of a project that might otherwise depend on jsonschema and benefit from using a later version. It also adds a link to PyPI. This will look a little weird as long as the main (repo root) readme and PyPI readme are the same file, but I think it's better than omitting it, and I don't want to add a badge for it instead until I've thought through what other badges (if any) ought to be shown.
This also updates the readme accordingly, to link #19 and recommend installing via pipx instead of as a dev dependency of a project that might otherwise depend on jsonschema and benefit from using a later version. It also adds a link to PyPI. This will look a little weird as long as the main (repo root) readme and PyPI readme are the same file, but I think it's better than omitting it, and I don't want to add a badge for it instead until I've thought through what other badges (if any) ought to be shown.
This also updates the readme accordingly, to link #19 and recommend installing via pipx instead of as a dev dependency of a project that might otherwise depend on jsonschema and benefit from using a later version. It also adds a link to PyPI. This will look a little weird as long as the main (repo root) readme and PyPI readme are the same file, but I think it's better than omitting it, and I don't want to add a badge for it instead until I've thought through what other badges (if any) ought to be shown.
And use the new version. This change--both installing it with pipx on CI instead of having it as a development dependency, and using the new version--is to work around EliahKagan/pylint-sarif#19. This also upgrades (other) direct and indirect dependencies.
And use the new version. This change--both installing it with pipx on CI instead of having it as a development dependency, and using the new version--is to work around EliahKagan/pylint-sarif#19. This also upgrades (other) direct and indirect dependencies.
Without this change, pylint-sarif-unofficial should still start working again, because version 0.2.0 holds back the version of jsonschema. However, we have other dependencies that pull in jsonschema as an indirect dependency, and I'd rather not keep those from benefiting from improvements. * Install pylint-sarif-unofficial via pipx And use the new version. This change--both installing it with pipx on CI instead of having it as a development dependency, and using the new version--is to work around EliahKagan/pylint-sarif#19. This also upgrades (other) direct and indirect dependencies. * Use stable 0.2.0 (This version is actually the same code as the alpha.) * Don't specify version 0.2.0 is available when given explicitly, as the previous commit verifies. It should be selected automatically when no version is given, as long as no later stable version is available.
This project uses Since the status of |
This has been resolved now if you want to test pylint-sarif with newer versions of both. |
When
pylint-sarif-unofficial
(this software) is used withjsonschema
at version 4.18.1 or higher--but not at 4.17.* and not at 4.18.0--it gives the error:Here's an example of full error output, running
pylint2sarif
on itself:jsonschema
4.18 changes how$ref
is handled and that appears related to this, but 4.18.0 does work. The patch releases 4.18.1, 4.18.2, and 4.18.3 address regressions and shouldn't break anything, but I'm unsure if the bug is really injsonschema
or inpylint-sarif-unofficial
.Because I haven't yet dropped support for Python 3.7, but
jsonschema
4.18 has, this bug is not observed when cloning this repository, installing it withpoetry install
, and testing it, and is further not observed even afterpoetry update
,poetry up
, orpoetry up --latest
. I first noticed this problem on another project's CI (for dmvassallo/EmbeddingScratchwork#208). I reproduced it as shown above by runningpoetry shell
and, in the poetry-managed virtual environment,pip install -U jsonschema
. I verified which versions are affected by running commands likepip install -U jsonschema==4.18.0
and testing again.Because 4.18.1, 4.18.2, and 4.18.3 address regressions present in 4.18.0, it is somewhat undesirable to pin
jsonschema
at 4.18.0, even as a temporary stopgap. The best thing to do would be for me to find the cause of the incompatibility inpylint-sarif-unofficial
and fix it, and/or open a bug report forjsonschema
. However, in the short term (which would become long term if I never get around to doing that), it might be better to pinjsonschema
at 4.17.* and modify this repository and PyPI package's readme to advocate installingpylint-sarif-unofficial
withpipx
rather than in the project virtual environment. (That is itself because, if pinned, tools like Dependabot typically won't update it.)The text was updated successfully, but these errors were encountered: