Upgrade virtualenv in uv.lock without downgrading tox on Python <3.9
还没有人认领这个 Issue。
评估
- 难度
- 2/5
- 预计耗时
- 1-3 小时
- 新手友好度
- 1/100
- Issue 类型
- 缺陷
- 描述清晰度
- 描述清楚
- 活跃度
- 活跃
- 技术栈
- python
- 领域
- build-system, devops
调研方向
Start with pyproject.toml and uv.lock, then review the Python version markers and dependency resolution described in the issue. Run uv lock --upgrade-package virtualenv on release-v0.9.x and check the lock with uv lock --check; verify tox remains 3.x on Python 3.6–3.8 and virtualenv is at least 21.7.13 on Python 3.9+. Confirm tox runs tox.ini on Python 3.8.
由索引模型根据 Issue 内容生成。
描述
❌ This issue is not open for contribution. Visit Contributing guidelines to learn about the contributing process and how to find suitable issues.
Overview
Dependabot PR #389 bumped virtualenv from 20.16.2 (py3.6–3.7) and 21.2.0 (py3.8+) to 21.7.13, which fixes path command injection in the bash and fish activation scripts (pypa/virtualenv#3252). It was closed unmerged because it collapsed virtualenv to one version for every Python. On Python <3.9 that left tox<4 resolving to tox 1.1 (2011) instead of 3.14.6, and tox 1.1 cannot run this repo's tox.ini.
Complexity: Low
Target branch: release-v0.9.x
Context
pyproject.tomlpinstox<4on Python <3.9 andtox>=4plustox-uvon 3.9+.- tox 3.x depends on
virtualenv, so the lock needs a separatevirtualenvversion on each Python range tox 3.x runs on. tox 1.1 has novirtualenvdependency, which is how the resolver picked it. - The py3.6–3.8 CI jobs
pip install toxwithout the lockfile, so CI passed on #389 despite the broken lock. uv lock --upgrade-package virtualenvonrelease-v0.9.xkeeps tox 3.14.6 and resolvesvirtualenvto 20.16.2 (py3.6–3.7), 21.4.3 (py3.8) and 21.14.5 (py3.9+).
The Change
virtualenvshould be upgraded inuv.lockto a release that includespypa/virtualenv#3252on every Python range that has one.python-discoverymoves with it:virtualenv21.x depends on it.toxand thevirtualenvversions locked for py3.6–3.8 have to stay compatible with each other, since the newervirtualenvreleases have dropped those Pythons.
Acceptance Criteria
-
uv.lockresolvestoxto 3.x on Python 3.6, 3.7 and 3.8. -
uv.lockresolvesvirtualenvto ≥ 21.7.13 on Python 3.9+. -
uv lock --checkpasses. -
toxruns this repo'stox.inion Python 3.8 with the locked dependencies.
References
- Closed Dependabot PR: #389
AI usage
Claude Code drafted this from its review of #389 and checked the resolution by relocking the base branch.
Filed from #389's review.
- 主要语言
- Python
- 星标
- 15
- 派生
- 23
- 平均合并
- 2 天 22 小时
- 30 天内合并 PR
- 4
环境准备
- 提供 Dockerfile 或 Docker Compose 文件
- 有 Pull Request 模板
- 阅读贡献指南
从这里开始
- 先读完整个 Issue，再读项目的贡献指南。
- 在 Issue 下留言说明你要接手 —— 这能避免两个人做同样的事。
- Fork 仓库，在一个分支上完成修改。
- 提交 Pull Request，并在描述里引用这个 Issue 编号。
learningequality/morango 的其他 Issue
-
DEV: dev-ops DEV: distributions DOCS: developer
难度 1/5 1-3 小时 新手友好度 78/100
learningequality/morango#387 ·
-
DEV: backend DEV: dev-ops TAG: unit tests
难度 2/5 1-3 小时 新手友好度 70/100
learningequality/morango#385 ·
-
DEV: backend P0 - critical TAG: tech update / debt TAG: unit tests
难度 2/5 1-3 小时 新手友好度 72/100
learningequality/morango#364 ·
-
DEV: dev-ops TAG: dev experience TAG: tech update / debt
难度 4/5 3-5 天 新手友好度 18/100
learningequality/morango#394 ·
-
Streaming operator modules need similar `begin` hook可能已有人在做 @bjester 于 5 天前认领。 未关闭DEV: backend TAG: tech update / debt
learningequality/morango#393 · 已指派 1 人 ·
查看 learningequality/morango 的全部 Issue
相似的 Issue
-
Edit tool converts CRLF files to LF可能已有人在做 @RaphaelFakhri 今天认领。 未关闭
难度 2/5 1-3 小时 新手友好度 68/100
huggingface/tau#774 ·
维护者通常 1 天内回复
-
show ignores the row limit when a column or table name contains "limit"可能已有人在做 @RaphaelFakhri 今天认领。 未关闭
难度 2/5 1-3 小时 新手友好度 88/100
维护者通常 1 天内回复
-
难度 2/5 1-3 小时 新手友好度 84/100
维护者通常 2 天内回复
-
documentation good first issue
难度 2/5 1-3 小时 新手友好度 82/100
维护者通常 1 天内回复
-
难度 2/5 1-3 小时 新手友好度 74/100
eclipse-score/inc_someip_gateway#356 ·
维护者通常 2 天内回复