You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@tooling.apache.org by "netomi (via GitHub)" <gi...@apache.org> on 2026/09/17 21:04:15 UTC
[PR] chore(deps): bump asfpy and cryptography dependencies (tooling-llmao)
netomi opened a new pull request, #37:
URL: https://github.com/apache/tooling-llmao/pull/37
This changes the asfpy dependency to a source dependency on the latest main commit to be able to bump cryptography to a patched version.
The latest asfpy also contains some useful fixes that are not released yet, its unclear when this will be possible, so using a source dependency like in the board agenda tool.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@tooling.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@tooling.apache.org
For additional commands, e-mail: commits-help@tooling.apache.org
Re: [PR] chore(deps): bump asfpy and cryptography dependencies (tooling-llmao)
Posted by "dave2wave (via GitHub)" <gi...@apache.org>.
dave2wave commented on PR #37:
URL: https://github.com/apache/tooling-llmao/pull/37#issuecomment-5721405212
ATR abandoned the asfpy version of `pubsub.py` for a bespoke one: https://github.com/apache/tooling-trusted-releases/blob/main/atr/pubsub.py
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@tooling.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@tooling.apache.org
For additional commands, e-mail: commits-help@tooling.apache.org
Re: [PR] chore(deps): bump cryptography (tooling-llmao)
Posted by "netomi (via GitHub)" <gi...@apache.org>.
netomi commented on PR #37:
URL: https://github.com/apache/tooling-llmao/pull/37#issuecomment-5721672325
Adding `asfpy` as source dependency is actually not needed, just the override for cryptography to avoid resolution errors.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@tooling.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@tooling.apache.org
For additional commands, e-mail: commits-help@tooling.apache.org
Re: [PR] chore(deps): bump asfpy and cryptography dependencies (tooling-llmao)
Posted by "gstein (via GitHub)" <gi...@apache.org>.
gstein commented on PR #37:
URL: https://github.com/apache/tooling-llmao/pull/37#issuecomment-5721227937
There are a couple changes that Sander wanted me to review/merge. I am offline, but do all this and make an asfpy release
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@tooling.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@tooling.apache.org
For additional commands, e-mail: commits-help@tooling.apache.org
Re: [PR] chore(deps): bump cryptography (tooling-llmao)
Posted by "gstein (via GitHub)" <gi...@apache.org>.
gstein commented on PR #37:
URL: https://github.com/apache/tooling-llmao/pull/37#issuecomment-5746750908
https://github.com/apache/infrastructure-asfpy/commit/1e2da65c47605d63ee6627386d34c871a7e60122 drops the upper bound, so the override is no longer required. Use any version of cryptography desired.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@tooling.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@tooling.apache.org
For additional commands, e-mail: commits-help@tooling.apache.org
Re: [PR] chore(deps): bump cryptography (tooling-llmao)
Posted by "dave2wave (via GitHub)" <gi...@apache.org>.
dave2wave commented on PR #37:
URL: https://github.com/apache/tooling-llmao/pull/37#issuecomment-5721630254
I see `asfpy-0.58` from Feb 12. Cryptography is a dependency and then is specified as a package in `uv.lock`
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@tooling.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@tooling.apache.org
For additional commands, e-mail: commits-help@tooling.apache.org
Re: [PR] chore(deps): bump cryptography (tooling-llmao)
Posted by "dave2wave (via GitHub)" <gi...@apache.org>.
dave2wave commented on PR #37:
URL: https://github.com/apache/tooling-llmao/pull/37#issuecomment-5721681917
What you have now looks similar to what ATR does.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@tooling.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@tooling.apache.org
For additional commands, e-mail: commits-help@tooling.apache.org
Re: [PR] chore(deps): bump asfpy and cryptography dependencies (tooling-llmao)
Posted by "netomi (via GitHub)" <gi...@apache.org>.
netomi commented on PR #37:
URL: https://github.com/apache/tooling-llmao/pull/37#issuecomment-5721558233
Afaict, asfpy is not used by the project, but pulled in as transitive dependency by `asfquart`. Unfortunately it has a quite strict qualifier for cryptography which prevents you from upgrading it. A new release should solve that as well, so this PR could be closed in favor of a new release.
I did review and merge the PRs from Sander and some other dependabot PRs, so it should be ready for a release.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@tooling.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@tooling.apache.org
For additional commands, e-mail: commits-help@tooling.apache.org
Re: [PR] chore(deps): bump asfpy and cryptography dependencies (tooling-llmao)
Posted by "dave2wave (via GitHub)" <gi...@apache.org>.
dave2wave commented on PR #37:
URL: https://github.com/apache/tooling-llmao/pull/37#issuecomment-5721579623
I think that @sbp may have got around this cryptography issue. We'll see if he responds, but not likely until tomorrow.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@tooling.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@tooling.apache.org
For additional commands, e-mail: commits-help@tooling.apache.org
Re: [PR] chore(deps): bump cryptography (tooling-llmao)
Posted by "gstein (via GitHub)" <gi...@apache.org>.
gstein closed pull request #37: chore(deps): bump cryptography
URL: https://github.com/apache/tooling-llmao/pull/37
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@tooling.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@tooling.apache.org
For additional commands, e-mail: commits-help@tooling.apache.org