Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@WilliamBergamin @seratch Dependabot would like to bump us to
black@24.10.0
from24.8.0
. The Release Notes mention dropping Python 3.8 support and the comment above mentions that we still support Python 3.6. So, it sounds like the latest version of black may not run reliably on Python 3.6.What's your advice on this PR?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@mwbrooks Thanks for checking this. Upgrading black to a newer version does not bring any benefits and I personally think still we should keep 3.6 support for a while (say, one or two more years). It's indeed EOLed a long time ago! but for Python and Java, providing much longer supports for EOLed versions would be expected in many cases.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks @seratch! Is there a range syntax that we can use to prevent @dependabot from trying to upgrade it? For example
black<=24.8.0
?There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The test execution does not fail (because it does not use black) but let's keep the current black version this time
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Hmm, honestly i am not sure about the way to prevent this. Even if you use a version range, the bot still tries to upgrade to newer range 😅
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Ah, alright. Well, the comment left on the dependency was enough for me to question accepting the upgrade. Hopefully it'll be enough for other reviewers to know that we don't want to upgrade it yet.