Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Remove rapidfuzz version pin #2730

Merged
merged 4 commits into from
Jul 4, 2022
Merged

Remove rapidfuzz version pin #2730

merged 4 commits into from
Jul 4, 2022

Conversation

tstadel
Copy link
Member

@tstadel tstadel commented Jun 24, 2022

@tstadel tstadel requested a review from masci June 24, 2022 15:34
setup.cfg Outdated
@@ -98,7 +98,7 @@ install_requires =
elastic-apm

# context matching
rapidfuzz==2.0.13
rapidfuzz!=2.0.14
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I would pin it more explicitly, something like rapidfuzz>=2.0.15,<2.1.

Copy link
Member Author

@tstadel tstadel Jun 27, 2022

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@masci why "pinning" the minor version with the <2.1 restriction in this particular case? I wouldn't expect any breaking changes from a minor version increase. I see the disadvantage that people using haystack and rapidfuzz (for something else using some new 2.1 feature) together in their app wouldn't be able to do so.
To give a bit more context to the situation: till now any version from 2.0.7 to 2.0.15 (except 2.0.14) worked. Versions below 2.0.7 weren't tested.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I mistakenly thought this was a dev dependency, if users might have the library already in their project before adding Haystack my proposal is definitely too aggressive. If you think rapidfuzz>=2.0.15,<3 is still too restrictive we can go with rapidfuzz>=2.0.7,<3,!=2.0.14

@tstadel tstadel requested a review from masci June 28, 2022 07:55
Copy link
Member

@julian-risch julian-risch left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM! 👍

@tstadel tstadel merged commit 322d964 into master Jul 4, 2022
@tstadel tstadel deleted the remove_rapidfuzz_pin branch July 4, 2022 11:53
Krak91 pushed a commit to Krak91/haystack that referenced this pull request Jul 26, 2022
* remove rapidfuzz version pin

* exclude malicious version 2.0.14

* update rapidfuzz version restrictions
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants