Summary

Update dependencies for Djblets 5.2.

Review Request #14271 — Created Dec. 13, 2024 and submitted Dec. 16, 2024, 2:29 p.m.

Information

Owner

chipx86

Repository

Djblets

Branch

release-5.x

Bugs

Depends On

Reviewers

Groups

djblets

People

Description

This updates our version of Django to the latest 4.2.17 security
release, cryptography to the latest 41.0.7 security release for the
41.0 series, and the latest typing-extensions 4.12.2.

Testing Done

Successfully installed the new versions.

Commits

Summary	ID
Update dependencies for Djblets 5.2. This updates our version of `Django` to the latest 4.2.17 security release, `cryptography` to the latest 41.0.7 security release for the 41.0 series, and the latest `typing-extensions` 4.12.2.	e071ce0103c35a1c630c69188c9fa7947ed76ca1

flake8 passed.

JSHint passed.

Change Summary:

Removed the importlib-metadata and importlib-resources dependency bumps. While I initially thought it would be good to increase the baseline, upon further reflection I think our own usage is minimal enough to not have any reason to need that at this time, and we shouldn't impact consumers. In the future, we'll want to move more solidly onto the Python stdlib versions and decide what our Python version cutoff is, only depend on and import these on those older versions.

Description:

		This updates our version of `Django` to the latest 4.2.17 security
		release, `cryptography` to the latest 41.0.7 security release for the
~		41.0 series, and the compatibility packages for `typing-extensions`,
	~	41.0 series, and the latest `typing-extensions` 4.12.2.
-		`importlib-metadata`, and `importlib-resources` to the latest versions.
-
-		Notably, these compatibility packages have introduced some deprecations
-		and removed functionality, but nothing that should impact us or our
-		consumers. These dependencies used `>=` form for the version ranges
-		before, meaning that any newer installations were already receiving the
-		latest versions compatible with their version of Python. Rather than
-		bringing those down to older releases, we're now locking into the newer
-		series with `~=`. This hopefully won't conflict with any more
-		restrictive version ranges for consumers.
-
-		We will want to reevaluate the importlib-related dependencies in future
-		releases, using them only for older versions of Python and prioritizing
-		the newer versions built into modern releases of Python.

Commits:

	Summary	ID
	Update dependencies for Djblets 5.2. This updates our version of `Django` to the latest 4.2.17 security release, `cryptography` to the latest 41.0.7 security release for the 41.0 series, and the compatibility packages for `typing-extensions`, `importlib-metadata`, and `importlib-resources` to the latest versions. Notably, these compatibility packages have introduced some deprecations and removed functionality, but nothing that should impact us or our consumers. These dependencies used `>=` form for the version ranges before, meaning that any newer installations were already receiving the latest versions compatible with their version of Python. Rather than bringing those down to older releases, we're now locking into the newer series with `~=`. This hopefully won't conflict with any more restrictive version ranges for consumers. We will want to reevaluate the importlib-related dependencies in future releases, using them only for older versions of Python and prioritizing the newer versions built into modern releases of Python.	80d2ef216fe5770118f61d0a1c8dbfc3ba7586ea
	Update dependencies for Djblets 5.2. This updates our version of `Django` to the latest 4.2.17 security release, `cryptography` to the latest 41.0.7 security release for the 41.0 series, and the latest `typing-extensions` 4.12.2.	e071ce0103c35a1c630c69188c9fa7947ed76ca1

Diff:

Revision 2 (+6 -6)

Show changes

djblets/dependencies.py

Checks run (2 succeeded)

flake8 passed.

JSHint passed.

Ship it!

```
Ship It!
```

Ship it!

```
Ship It!
```

Status:: Completed
Change Summary:: Pushed to release-5.x (5e432fa)