Skip to content

ci: Pin transitive dependencies for tests on Python>=3.8#6437

Merged
alexander-alderman-webb merged 30 commits into
masterfrom
webb/populate-tox/transitive-dependencies
Jun 2, 2026
Merged

ci: Pin transitive dependencies for tests on Python>=3.8#6437
alexander-alderman-webb merged 30 commits into
masterfrom
webb/populate-tox/transitive-dependencies

Merge branch 'master' into webb/populate-tox/transitive-dependencies

f005b38
Select commit
Loading
Failed to load commit list.
@sentry/warden / warden: find-bugs completed Jun 2, 2026 in 24m 40s

1 issue

find-bugs: Found 1 issue (1 medium)

Medium

`_render_latest_dependencies` output rendered twice for `-latest` tox environments - `scripts/populate_tox/populate_tox.py:892-894`

Version-specific deps from _render_latest_dependencies are added to both latest_transitive_dependencies[0] and the separately computed latest_dependencies, causing duplicate entries in tox.ini for any integration with version-specific dep constraints.

Also found at:

  • scripts/populate_tox/tox.jinja:155-163

⏱ 23m 36s · 1.8M in / 86.9k out · $3.21

Annotations

Check warning on line 894 in scripts/populate_tox/populate_tox.py

See this annotation in the file changed.

@sentry-warden sentry-warden / warden: find-bugs

`_render_latest_dependencies` output rendered twice for `-latest` tox environments

Version-specific deps from `_render_latest_dependencies` are added to both `latest_transitive_dependencies[0]` and the separately computed `latest_dependencies`, causing duplicate entries in `tox.ini` for any integration with version-specific dep constraints.

Check warning on line 163 in scripts/populate_tox/tox.jinja

See this annotation in the file changed.

@sentry-warden sentry-warden / warden: find-bugs

[QXV-Q8N] `_render_latest_dependencies` output rendered twice for `-latest` tox environments (additional location)

Version-specific deps from `_render_latest_dependencies` are added to both `latest_transitive_dependencies[0]` and the separately computed `latest_dependencies`, causing duplicate entries in `tox.ini` for any integration with version-specific dep constraints.