Skip to content

ci: Pin transitive dependencies for tests on Python>=3.8#6437

Merged
alexander-alderman-webb merged 30 commits into
masterfrom
webb/populate-tox/transitive-dependencies
Jun 2, 2026
Merged

ci: Pin transitive dependencies for tests on Python>=3.8#6437
alexander-alderman-webb merged 30 commits into
masterfrom
webb/populate-tox/transitive-dependencies

Merge branch 'master' into webb/populate-tox/transitive-dependencies

f005b38
Select commit
Loading
Failed to load commit list.
@sentry/warden / warden completed Jun 2, 2026 in 24m 45s

1 issue

Medium

`_render_latest_dependencies` output rendered twice for `-latest` tox environments - `scripts/populate_tox/populate_tox.py:892-894`

Version-specific deps from _render_latest_dependencies are added to both latest_transitive_dependencies[0] and the separately computed latest_dependencies, causing duplicate entries in tox.ini for any integration with version-specific dep constraints.

Also found at:

  • scripts/populate_tox/tox.jinja:155-163
4 skills analyzed
Skill Findings Duration Cost
security-review 0 2m 29s $0.32
code-review 0 11m 51s $1.27
find-bugs 1 23m 36s $3.26
skill-scanner 0 48.2s $0.08

⏱ 38m 44s · 2.9M in / 129.3k out · $4.94