Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Loosen certifi version requirements (#45)
Summary: The certifi package has a "vulnerability" [0], asking us to update. Dependabot should take care of that, except it didn't: ``` > updater | 2024/07/05 <job_852060501> Checking if certifi 2023.11.17 needs updating > proxy | 2024/07/05 GET https://pypi.org:443/simple/certifi/ > proxy | 2024/07/05 200 https://pypi.org:443/simple/certifi/ > updater | 2024/07/05 <job_852060501> Filtered out 2 yanked versions > updater | 2024/07/05 <job_852060501> Latest version is 2024.7.4 > updater | 2024/07/05 <job_852060501> Requirements to unlock update_not_possible > updater | 2024/07/05 <job_852060501> Requirements update strategy lockfile_only > updater | 2024/07/05 <job_852060501> No update possible for certifi 2023.11.17 ``` I suspect that reason is that it interprets the version as a SemVer specification and 2023 -> 2024 would be a major bump and it won't do that given our strategy. It appears none of our Python code is actually depending on this package, so let's just remove it. [0] https://github.com/facebookincubator/kernel-patches-daemon/security/dependabot/23 Pull Request resolved: #45 Reviewed By: danielocfb Differential Revision: D59470231 fbshipit-source-id: d8209067d849e00ff9d858d05ddfc7cfe1530206
- Loading branch information