numpy, flask, jsonschema versionfreezing

[burnout87]

No description provided.

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 62.34%. Comparing base (e4b7784) to head (63347bb).

Additional details and impacted files

@@           Coverage Diff           @@
##           master     #693   +/-   ##
=======================================
  Coverage   62.34%   62.34%           
=======================================
  Files          50       50           
  Lines        8950     8950           
=======================================
  Hits         5580     5580           
  Misses       3370     3370           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[dsavchenko]

• Could you briefly describe what problem does it fix?
• Would be better to have more loose restrictions in setup.py and freeze only in requirements.txt if possible
• The snyk test is failing (but I can't see the problem, it's only @volodymyrss who has access)
• So bokeh is not finally freezed?

[burnout87]

• Could you briefly describe what problem does it fix?

When using python 3.10 (and above) it installs the version 2.0.0 of numpy, which causes the error seen here, a compatibility one between the version of bokeh (2.4.2, which is frozen) and the newer version of numpy. So, by freezing the version to 1.24.4, this does not happen

* So bokeh is not finally freezed?

It is actually already frozen, to the version 2.4.2

[burnout87]

also, some issues with the versioning of flask and jsonschema came out while I was testing,hence the freezing of those libraries too

[volodymyrss]

• Could you briefly describe what problem does it fix?

When using python 3.10 (and above) it installs the version 2.0.0 of numpy, which causes the error seen here, a compatibility one between the version of bokeh (2.4.2, which is frozen) and the newer version of numpy. So, by freezing the version to 1.24.4, this does not happen

could be better to put <2.0.0 constraint for numpy.

* So bokeh is not finally freezed?

It is actually already frozen, to the version 2.4.2

[burnout87]

I tried to change the restrictions on flask (given the warning from snyk) but I am not really successful...

[volodymyrss]

Ok, well, if that's the best that seems possible.

[burnout87]

Ok, well, if that's the best that seems possible.

we'll certainly have to deal again with those dependencies in the future (eg with new versions of other libraries), then we'll see