Skip to content

Pinned setuptools version (setuptools==42.0.2) is too restrictive #104

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
zlalvani opened this issue Dec 16, 2020 · 2 comments
Closed

Pinned setuptools version (setuptools==42.0.2) is too restrictive #104

zlalvani opened this issue Dec 16, 2020 · 2 comments

Comments

@zlalvani
Copy link

Expected Behavior

Dependency versions are loose enough to be resolved in most cases

Actual Behavior

Pinned dependency on setuptools is old and potentially too specific

Steps to Reproduce the Problem

  1. pip install -r requirements.txt in a requirements file with both datadog-lambda and another dependency with a conflicting setuptools version. In this case, wiremock.

Specifications

  • Datadog Lambda Layer version: 2.26.0
  • Python version: 3.8.6

Stacktrace

ERROR: Cannot install -r requirements-dev.txt (line 13) and -r requirements.txt (line 14) because these package versions have conflicting dependencies.

The conflict is caused by:
  datadog-lambda 2.26.0 depends on setuptools==42.0.2
  wiremock 2.1.3 depends on setuptools>=45.2.0  
@ryboe
Copy link

ryboe commented Jan 5, 2021

Yes, we're having issues with Ye Olde Setuptools too.

Collecting setuptools==42.0.2
  Downloading setuptools-42.0.2-py2.py3-none-any.whl (583 kB)
ERROR: Hashes are required in --require-hashes mode, but they are missing from some requirements. Here is a list of those requirements along with the hashes their downloaded archives actually had. Add lines like these to your requirements files to prevent tampering. (If you did not enable --require-hashes manually, note that it turns on automatically when any package has a hash.)
    setuptools==42.0.2 --hash=sha256:c8abd0f3574bc23afd2f6fd2c415ba7d9e097c8a99b845473b0d957ba1e2dac6

@sfirrin
Copy link
Contributor

sfirrin commented Apr 1, 2021

Hi @zlalvani and @ryboe, thanks for bringing this to our attention. As of https://github.com/DataDog/datadog-lambda-python/releases/tag/v32 we're now specifying the current latest version of setuptools or greater. If you're still running into issues please reopen and let us know.

@sfirrin sfirrin closed this as completed Apr 1, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants