Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Protect against unordered extras in pip dependencies #450

Merged
merged 2 commits into from
Jul 8, 2023

Conversation

AlbertDeFusco
Copy link
Contributor

@AlbertDeFusco AlbertDeFusco commented Jul 7, 2023

Description

By sorting the extras in VersionedDependency this should help addresses hash instability as mentioned in #449.

pkg_resources.Requirement.parse does not enforce that pip extras specifiers are
ordered on output

This addresses conda#449
@AlbertDeFusco AlbertDeFusco requested a review from a team as a code owner July 7, 2023 20:09
@netlify
Copy link

netlify bot commented Jul 7, 2023

Deploy Preview for conda-lock ready!

Name Link
🔨 Latest commit 682bce3
🔍 Latest deploy log https://app.netlify.com/sites/conda-lock/deploys/64a89268da277e0008317128
😎 Deploy Preview https://deploy-preview-450--conda-lock.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify site configuration.

@maresb
Copy link
Contributor

maresb commented Jul 7, 2023

Very nice!!! Thanks for this.

One very minor suggestion: I think this test would fit better under the newly created test_regression.py file.

@AlbertDeFusco
Copy link
Contributor Author

Ok, I'll make the change

@maresb
Copy link
Contributor

maresb commented Jul 7, 2023

Sorry about the failing Windows test. Attempted fix in #451, and feel free to ignore those failures.

@AlbertDeFusco
Copy link
Contributor Author

Done. I think this is ready

@maresb maresb merged commit e3c7a19 into conda:main Jul 8, 2023
8 of 9 checks passed
@maresb
Copy link
Contributor

maresb commented Jul 8, 2023

Thanks @AlbertDeFusco!!!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants