Pip install local with extra fails dependency resolution #12372
Labels
Milestone
Comments
KochankovID
added
S: needs triage
Closed
|
Tentatively added to the 23.3 milestone. |
|
I have a PoC level fix available here. I haven't considered all consequences yet and it needs some cleaning up, but could you already give it a shot and see if it resolves your issue? You might also be interested to know that it seems to work fine if you swap the order of the install specifiers, i.e. EDIT: cleaned it up, just need to add a test case and verify that it didn't break anything. |
|
@KochankovID Have you had a chance to try out @sanderr's proposed fix? To install that branch, run: |
1 task
|
@edmorley I tried - fixed it! 🔥 Processing /Users/ilyakochankov/gitlint |
This was referenced Nov 2, 2023
mav-intel
added a commit
to intel/libvpl
that referenced
this issue
Nov 29, 2023
Related to pypa/pip#12372 Work-around is to use older version of virtualenv.
|
I seem to be hitting this issue. |
|
@jcul I just tried to reproduce your issue but I was not successful. I'm not familiar with I do get the impression that the venv in |
|
Precommit makes distinct venvs for each hook and right now does not cap the version of virtualenv, so is using the latest version which bundles 23.3.1 with the regression. Youd have to go into each precommit venv and manually install a different version of pip or explicitly limit the version of virtualenv that's installed in the parent environment to an earlier one that's seeds with 23.2.x to prevent the precommit hook environments from using the problematic version of pip. Virtualenv does not seed the venvs with the pip used in the parent venv. That said, I also had to wipe the virtualenv cache after downgrading to 20.24.5 because it was still using pip 23.3.1 to seed environments even though thats not the version bundled. |
|
@sanderr thanks, I'm not super familiar with pre-commit myself, which is probably part of the issue. @vfazio I can try downgrading pip or installing @sanderr's branch in pre-commits virtualenv for gitlint. Edit: Actually I'm not sure how to do that, it seems pre-commit does delete the virtualenvs after each run. |
pre-commit shouldn't be deleting the environments automatically, though it will delete them if the install fails. Otherwise, the hooks are deleted via It is, however, not straightforward which folder is for which hook, but you can determine that via: So for the situation where you cannot install the plugin, which will be the case for gitlint, so there's no folder for the hook, you have a couple options:
After installing pre-commit as you did above, downgrade virtualenv to 20.24.5 Note that trying this just a few minutes ago in my own project, i ran into a similar error, but i hadn't cleared the virtualenv cache, which i think falls victim to:
This will allow you to use your pre-commit hook, but won't really allow you to test whether the proposed fix resolves the issue. |
|
Thanks, this worked for me! This workaround should tide me over for now. |
KSmanis
added a commit
to KSmanis/pip-autocompile
that referenced
this issue
Dec 16, 2023
Pin pip until pypa/pip#12372 is fixed.
mergify bot
pushed a commit
to aws/jsii
that referenced
this issue
Dec 18, 2023
…mak/test/generated-code (#4378) Bumps [pip](https://github.com/pypa/pip) from 23.3.1 to 23.3.2. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/pypa/pip/blob/main/NEWS.rst">pip's changelog</a>.</em></p> <blockquote> <h1>23.3.2 (2023-12-17)</h1> <h2>Bug Fixes</h2> <ul> <li>Fix a bug in extras handling for link requirements (<code>[#12372](pypa/pip#12372) <https://github.com/pypa/pip/issues/12372></code>_)</li> <li>Fix mercurial revision "parse error": use <code>--rev={ref}</code> instead of <code>-r={ref}</code> (<code>[#12373](pypa/pip#12373) <https://github.com/pypa/pip/issues/12373></code>_)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/pypa/pip/commit/f9fea4096e7a5c0e6068b874e98f7d4d2a57b0d5"><code>f9fea40</code></a> Bump for release</li> <li><a href="https://github.com/pypa/pip/commit/3891d417eaaaa10560b5f07ce830d84f18773211"><code>3891d41</code></a> Fix news file name</li> <li><a href="https://github.com/pypa/pip/commit/fb1be0fe4936e498607c831211ecb04365e949d4"><code>fb1be0f</code></a> Fix a few typing issues</li> <li><a href="https://github.com/pypa/pip/commit/b23341dce5fe9df8a6e90f56599e43bbe2e57d94"><code>b23341d</code></a> Update AUTHORS.txt</li> <li><a href="https://github.com/pypa/pip/commit/4513b9cb05346dd45dfe8e4237f2f85df6a93004"><code>4513b9c</code></a> added second test case</li> <li><a href="https://github.com/pypa/pip/commit/69b58102f522f0e10d2b3bd31e7b9ee074abd16d"><code>69b5810</code></a> Fixed bug in extras handling for link requirements</li> <li><a href="https://github.com/pypa/pip/commit/7189400275d90953c902addb0a03520adb36bb28"><code>7189400</code></a> Update news/370392cf-52cd-402c-b402-06d2ff398f89.bugfix.rst</li> <li><a href="https://github.com/pypa/pip/commit/3f9c9f919ed5ef845aaf0880e64b73b992b7aab8"><code>3f9c9f9</code></a> fix mercurial revision parse error: use two hypen argument --rev= instead of -r=</li> <li>See full diff in <a href="https://github.com/pypa/pip/compare/23.3.1...23.3.2">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>
edgarrmondragon
pushed a commit
to MeltanoLabs/tap-messagebird
that referenced
this issue
Dec 18, 2023
) Bumps [pip](https://github.com/pypa/pip) from 23.3.1 to 23.3.2. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/pypa/pip/blob/main/NEWS.rst">pip's changelog</a>.</em></p> <blockquote> <h1>23.3.2 (2023-12-17)</h1> <h2>Bug Fixes</h2> <ul> <li>Fix a bug in extras handling for link requirements (<code>[#12372](pypa/pip#12372) <https://github.com/pypa/pip/issues/12372></code>_)</li> <li>Fix mercurial revision "parse error": use <code>--rev={ref}</code> instead of <code>-r={ref}</code> (<code>[#12373](pypa/pip#12373) <https://github.com/pypa/pip/issues/12373></code>_)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/pypa/pip/commit/f9fea4096e7a5c0e6068b874e98f7d4d2a57b0d5"><code>f9fea40</code></a> Bump for release</li> <li><a href="https://github.com/pypa/pip/commit/3891d417eaaaa10560b5f07ce830d84f18773211"><code>3891d41</code></a> Fix news file name</li> <li><a href="https://github.com/pypa/pip/commit/fb1be0fe4936e498607c831211ecb04365e949d4"><code>fb1be0f</code></a> Fix a few typing issues</li> <li><a href="https://github.com/pypa/pip/commit/b23341dce5fe9df8a6e90f56599e43bbe2e57d94"><code>b23341d</code></a> Update AUTHORS.txt</li> <li><a href="https://github.com/pypa/pip/commit/4513b9cb05346dd45dfe8e4237f2f85df6a93004"><code>4513b9c</code></a> added second test case</li> <li><a href="https://github.com/pypa/pip/commit/69b58102f522f0e10d2b3bd31e7b9ee074abd16d"><code>69b5810</code></a> Fixed bug in extras handling for link requirements</li> <li><a href="https://github.com/pypa/pip/commit/7189400275d90953c902addb0a03520adb36bb28"><code>7189400</code></a> Update news/370392cf-52cd-402c-b402-06d2ff398f89.bugfix.rst</li> <li><a href="https://github.com/pypa/pip/commit/3f9c9f919ed5ef845aaf0880e64b73b992b7aab8"><code>3f9c9f9</code></a> fix mercurial revision parse error: use two hypen argument --rev= instead of -r=</li> <li>See full diff in <a href="https://github.com/pypa/pip/compare/23.3.1...23.3.2">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) Dependabot will merge this PR once CI passes on it, as requested by @edgarrmondragon. [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
inmantaci
pushed a commit
to inmanta/inmanta-core
that referenced
this issue
Dec 18, 2023
Bumps [pip](https://github.com/pypa/pip) from 23.3.1 to 23.3.2. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/pypa/pip/blob/main/NEWS.rst">pip's changelog</a>.</em></p> <blockquote> <h1>23.3.2 (2023-12-17)</h1> <h2>Bug Fixes</h2> <ul> <li>Fix a bug in extras handling for link requirements (<code>[#12372](pypa/pip#12372) <https://github.com/pypa/pip/issues/12372></code>_)</li> <li>Fix mercurial revision "parse error": use <code>--rev={ref}</code> instead of <code>-r={ref}</code> (<code>[#12373](pypa/pip#12373) <https://github.com/pypa/pip/issues/12373></code>_)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/pypa/pip/commit/f9fea4096e7a5c0e6068b874e98f7d4d2a57b0d5"><code>f9fea40</code></a> Bump for release</li> <li><a href="https://github.com/pypa/pip/commit/3891d417eaaaa10560b5f07ce830d84f18773211"><code>3891d41</code></a> Fix news file name</li> <li><a href="https://github.com/pypa/pip/commit/fb1be0fe4936e498607c831211ecb04365e949d4"><code>fb1be0f</code></a> Fix a few typing issues</li> <li><a href="https://github.com/pypa/pip/commit/b23341dce5fe9df8a6e90f56599e43bbe2e57d94"><code>b23341d</code></a> Update AUTHORS.txt</li> <li><a href="https://github.com/pypa/pip/commit/4513b9cb05346dd45dfe8e4237f2f85df6a93004"><code>4513b9c</code></a> added second test case</li> <li><a href="https://github.com/pypa/pip/commit/69b58102f522f0e10d2b3bd31e7b9ee074abd16d"><code>69b5810</code></a> Fixed bug in extras handling for link requirements</li> <li><a href="https://github.com/pypa/pip/commit/7189400275d90953c902addb0a03520adb36bb28"><code>7189400</code></a> Update news/370392cf-52cd-402c-b402-06d2ff398f89.bugfix.rst</li> <li><a href="https://github.com/pypa/pip/commit/3f9c9f919ed5ef845aaf0880e64b73b992b7aab8"><code>3f9c9f9</code></a> fix mercurial revision parse error: use two hypen argument --rev= instead of -r=</li> <li>See full diff in <a href="https://github.com/pypa/pip/compare/23.3.1...23.3.2">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>
inmantaci
pushed a commit
to inmanta/inmanta-core
that referenced
this issue
Dec 18, 2023
Bumps [pip](https://github.com/pypa/pip) from 23.3.1 to 23.3.2. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/pypa/pip/blob/main/NEWS.rst">pip's changelog</a>.</em></p> <blockquote> <h1>23.3.2 (2023-12-17)</h1> <h2>Bug Fixes</h2> <ul> <li>Fix a bug in extras handling for link requirements (<code>[#12372](pypa/pip#12372) <https://github.com/pypa/pip/issues/12372></code>_)</li> <li>Fix mercurial revision "parse error": use <code>--rev={ref}</code> instead of <code>-r={ref}</code> (<code>[#12373](pypa/pip#12373) <https://github.com/pypa/pip/issues/12373></code>_)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/pypa/pip/commit/f9fea4096e7a5c0e6068b874e98f7d4d2a57b0d5"><code>f9fea40</code></a> Bump for release</li> <li><a href="https://github.com/pypa/pip/commit/3891d417eaaaa10560b5f07ce830d84f18773211"><code>3891d41</code></a> Fix news file name</li> <li><a href="https://github.com/pypa/pip/commit/fb1be0fe4936e498607c831211ecb04365e949d4"><code>fb1be0f</code></a> Fix a few typing issues</li> <li><a href="https://github.com/pypa/pip/commit/b23341dce5fe9df8a6e90f56599e43bbe2e57d94"><code>b23341d</code></a> Update AUTHORS.txt</li> <li><a href="https://github.com/pypa/pip/commit/4513b9cb05346dd45dfe8e4237f2f85df6a93004"><code>4513b9c</code></a> added second test case</li> <li><a href="https://github.com/pypa/pip/commit/69b58102f522f0e10d2b3bd31e7b9ee074abd16d"><code>69b5810</code></a> Fixed bug in extras handling for link requirements</li> <li><a href="https://github.com/pypa/pip/commit/7189400275d90953c902addb0a03520adb36bb28"><code>7189400</code></a> Update news/370392cf-52cd-402c-b402-06d2ff398f89.bugfix.rst</li> <li><a href="https://github.com/pypa/pip/commit/3f9c9f919ed5ef845aaf0880e64b73b992b7aab8"><code>3f9c9f9</code></a> fix mercurial revision parse error: use two hypen argument --rev= instead of -r=</li> <li>See full diff in <a href="https://github.com/pypa/pip/compare/23.3.1...23.3.2">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>
edgarrmondragon
pushed a commit
to edgarrmondragon/dbt-sqlite-example
that referenced
this issue
Dec 18, 2023
Bumps [pip](https://github.com/pypa/pip) from 23.3.1 to 23.3.2. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/pypa/pip/blob/main/NEWS.rst">pip's changelog</a>.</em></p> <blockquote> <h1>23.3.2 (2023-12-17)</h1> <h2>Bug Fixes</h2> <ul> <li>Fix a bug in extras handling for link requirements (<code>[#12372](pypa/pip#12372) <https://github.com/pypa/pip/issues/12372></code>_)</li> <li>Fix mercurial revision "parse error": use <code>--rev={ref}</code> instead of <code>-r={ref}</code> (<code>[#12373](pypa/pip#12373) <https://github.com/pypa/pip/issues/12373></code>_)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/pypa/pip/commit/f9fea4096e7a5c0e6068b874e98f7d4d2a57b0d5"><code>f9fea40</code></a> Bump for release</li> <li><a href="https://github.com/pypa/pip/commit/3891d417eaaaa10560b5f07ce830d84f18773211"><code>3891d41</code></a> Fix news file name</li> <li><a href="https://github.com/pypa/pip/commit/fb1be0fe4936e498607c831211ecb04365e949d4"><code>fb1be0f</code></a> Fix a few typing issues</li> <li><a href="https://github.com/pypa/pip/commit/b23341dce5fe9df8a6e90f56599e43bbe2e57d94"><code>b23341d</code></a> Update AUTHORS.txt</li> <li><a href="https://github.com/pypa/pip/commit/4513b9cb05346dd45dfe8e4237f2f85df6a93004"><code>4513b9c</code></a> added second test case</li> <li><a href="https://github.com/pypa/pip/commit/69b58102f522f0e10d2b3bd31e7b9ee074abd16d"><code>69b5810</code></a> Fixed bug in extras handling for link requirements</li> <li><a href="https://github.com/pypa/pip/commit/7189400275d90953c902addb0a03520adb36bb28"><code>7189400</code></a> Update news/370392cf-52cd-402c-b402-06d2ff398f89.bugfix.rst</li> <li><a href="https://github.com/pypa/pip/commit/3f9c9f919ed5ef845aaf0880e64b73b992b7aab8"><code>3f9c9f9</code></a> fix mercurial revision parse error: use two hypen argument --rev= instead of -r=</li> <li>See full diff in <a href="https://github.com/pypa/pip/compare/23.3.1...23.3.2">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
odl-github
pushed a commit
to opendaylight/integration-test
that referenced
this issue
Jan 6, 2024
Verification of git message is failing because of a pip installation issue: jorisroovers/gitlint#535 pypa/pip#12372 The issue has been addressed for pip v23.3.2: https://github.com/pypa/pip/releases/tag/23.3.2 but the virtual environment for the pre-commit hook does not appear to have the version available yet. Run the gitlint with tox directly until the issue is resolved in the Jenkins environment. Change-Id: I033240f8f7bb5a14217dbc763687ac490ae4b3d0 Signed-off-by: Sangwook Ha <[email protected]>
kai687
pushed a commit
to kai687/sphinxawesome-theme
that referenced
this issue
Jan 8, 2024
Bumps [pip](https://github.com/pypa/pip) from 23.3.1 to 23.3.2. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/pypa/pip/blob/main/NEWS.rst">pip's changelog</a>.</em></p> <blockquote> <h1>23.3.2 (2023-12-17)</h1> <h2>Bug Fixes</h2> <ul> <li>Fix a bug in extras handling for link requirements (<code>[#12372](pypa/pip#12372) <https://github.com/pypa/pip/issues/12372></code>_)</li> <li>Fix mercurial revision "parse error": use <code>--rev={ref}</code> instead of <code>-r={ref}</code> (<code>[#12373](pypa/pip#12373) <https://github.com/pypa/pip/issues/12373></code>_)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/pypa/pip/commit/f9fea4096e7a5c0e6068b874e98f7d4d2a57b0d5"><code>f9fea40</code></a> Bump for release</li> <li><a href="https://github.com/pypa/pip/commit/3891d417eaaaa10560b5f07ce830d84f18773211"><code>3891d41</code></a> Fix news file name</li> <li><a href="https://github.com/pypa/pip/commit/fb1be0fe4936e498607c831211ecb04365e949d4"><code>fb1be0f</code></a> Fix a few typing issues</li> <li><a href="https://github.com/pypa/pip/commit/b23341dce5fe9df8a6e90f56599e43bbe2e57d94"><code>b23341d</code></a> Update AUTHORS.txt</li> <li><a href="https://github.com/pypa/pip/commit/4513b9cb05346dd45dfe8e4237f2f85df6a93004"><code>4513b9c</code></a> added second test case</li> <li><a href="https://github.com/pypa/pip/commit/69b58102f522f0e10d2b3bd31e7b9ee074abd16d"><code>69b5810</code></a> Fixed bug in extras handling for link requirements</li> <li><a href="https://github.com/pypa/pip/commit/7189400275d90953c902addb0a03520adb36bb28"><code>7189400</code></a> Update news/370392cf-52cd-402c-b402-06d2ff398f89.bugfix.rst</li> <li><a href="https://github.com/pypa/pip/commit/3f9c9f919ed5ef845aaf0880e64b73b992b7aab8"><code>3f9c9f9</code></a> fix mercurial revision parse error: use two hypen argument --rev= instead of -r=</li> <li>See full diff in <a href="https://github.com/pypa/pip/compare/23.3.1...23.3.2">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
and others
Description
Let's say we have a package that we install locally via pip (the version name is generated something like 0.20.0.dev48+g4d91197). Then we install the same package locally, but with the indication extra. Pip in this case refuses to install the package due to an error: could not find a version that satisfies the requirement
Expected behavior
For example, take the gitlint repository: https://github.com/jorisroovers/gitlint
If you use it as a pre-commit, the following will happen: pip install . ./gitlint-core[trusted-deps]
When installing gitlint itself (pip install .) gitlint-core is being installed. Then the installation of gitlint-core[trusted-deps] (pip install ./gitlint-core[trusted-deps]) starts and fails.
pip-23.2.1 - works as needed
pip-23.3.1 - error
pip version
23.3.1
Python version
Python 3.11.0
OS
mac os m1
How to Reproduce
Output
Processing /Users/ilyakochankov/Yandex.Disk.localized/Programming/gitlint
Installing build dependencies ... done
Getting requirements to build wheel ... done
Preparing metadata (pyproject.toml) ... done
Processing ./gitlint-core
Installing build dependencies ... done
Getting requirements to build wheel ... done
Preparing metadata (pyproject.toml) ... done
INFO: pip is looking at multiple versions of gitlint to determine which version is compatible with other requirements. This could take a while.
ERROR: Could not find a version that satisfies the requirement gitlint-core==0.20.0.dev48+g4d91197 (from gitlint) (from versions: 0.17.0, 0.18.0, 0.19.0.dev73, 0.19.0.dev75, 0.19.0.dev76, 0.19.0.dev77, 0.19.0.dev78, 0.19.0.dev79, 0.19.0.dev80, 0.19.0.dev81, 0.19.0.dev82, 0.19.0rc1, 0.19.0rc2.dev1, 0.19.0rc2, 0.19.0rc3.dev1, 0.19.0, 0.19.1.dev1, 0.19.1.dev2, 0.19.1, 0.19.2.dev1, 0.19.2.dev2, 0.19.2.dev3, 0.19.2.dev4, 0.19.2.dev5, 0.20.0.dev2, 0.20.0.dev3, 0.20.0.dev6, 0.20.0.dev7, 0.20.0.dev8, 0.20.0.dev9, 0.20.0.dev10, 0.20.0.dev11, 0.20.0.dev12, 0.20.0.dev13, 0.20.0.dev14, 0.20.0.dev15, 0.20.0.dev16, 0.20.0.dev17, 0.20.0.dev18, 0.20.0.dev19, 0.20.0.dev20, 0.20.0.dev21, 0.20.0.dev22, 0.20.0.dev23, 0.20.0.dev24, 0.20.0.dev25, 0.20.0.dev27, 0.20.0.dev29, 0.20.0.dev30, 0.20.0.dev31, 0.20.0.dev32, 0.20.0.dev33, 0.20.0.dev34, 0.20.0.dev35, 0.20.0.dev36, 0.20.0.dev37, 0.20.0.dev38, 0.20.0.dev39, 0.20.0.dev40, 0.20.0.dev41, 0.20.0.dev42, 0.20.0.dev43, 0.20.0.dev44, 0.20.0.dev45, 0.20.0.dev48)
ERROR: No matching distribution found for gitlint-core==0.20.0.dev48+g4d91197
Code of Conduct
The text was updated successfully, but these errors were encountered: