-
-
Notifications
You must be signed in to change notification settings - Fork 93
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Support python 3.12 #1395
Support python 3.12 #1395
Conversation
ChristopherMacGown
commented
Sep 18, 2024
- typing: remove types-pkg-resources package
- fix: recursive_guard is a KW_ONLY arg in 3.12.4+
Codecov ReportAll modified and coverable lines are covered by tests ✅
Additional details and impacted files@@ Coverage Diff @@
## master #1395 +/- ##
=========================================
Coverage 100.00% 100.00%
=========================================
Files 207 207
Lines 14942 14942
=========================================
Hits 14942 14942
|
CodSpeed Performance ReportMerging #1395 will degrade performances by 23.78%Comparing Summary
Benchmarks breakdown
|
@@ -55,6 +55,7 @@ asyncpg = { version = ">=0.28,<0.30", optional = true } | |||
psycopg2-binary = { version = "^2.9.1", optional = true } | |||
mysqlclient = { version = "^2.1.0", optional = true } | |||
PyMySQL = { version = "^1.1.0", optional = true } | |||
setuptools = "^75.1.0" |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Why do we need this?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
CodeFactor failed the prior commit due to GHSA-cx63-2mw6-8hw5
Please also add 3.12 to the test matrix in ormar/.github/workflows/test-package.yml Line 20 in 1cd9204
|
Regarding the failed test, |
I guess we can bump it and unify the version, note that you will have to relock the file with new version probably. |
I added Python 3.13 to the test matrix to try and get coverage there but it looks like there aren't |
9ba9696
to
e1596d6
Compare
The package has been yanked on pypi as it has been superceded by types-setuptools. However, setuptools now provides type-hints for the pkg-resources package, so it is no longer needed. Additionally, it does not appear to be used in the project at all, so it appears vestigial.
Python 3.9 added recursive_guard to ForwardRef._evaluate to prevent infinite recursion of recursive types. This is a private method, and no API contract is provided. So, when the API changed in the 3.12.4 release they did not bother to document it, or highlight that it is a breaking release.
Versions of setuptools prior to 70.0.0 were vulnerable to a remote execution exploit documented in CVE-2024-6345-setuptools.
e1596d6
to
75b7f02
Compare
75b7f02
to
cf303fc
Compare
The CodeFactor report is about a vulnerability in multipart/form-data in starlette versions prior to 0.40.0. In order to clear that report and update starlette, the fastapi pin will need to be relaxed to allow 0.115.3 to be installed, currently it is pinned to versions below 0.112.0. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Awesome, thanks a lot! :)