Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update dependencies #157

Closed
c0c0n3 opened this issue Feb 1, 2019 · 1 comment
Closed

Update dependencies #157

c0c0n3 opened this issue Feb 1, 2019 · 1 comment
Labels
no-issue-activity ops infrastructure and scm related stuff

Comments

@c0c0n3
Copy link
Member

c0c0n3 commented Feb 1, 2019

We need to update our dependencies to the latest versions to avoid bit rot.

Most of our Python libs are at least one major version number behind, which might make it difficult to fix security vulnerabilities especially if those vulnerabilities are found in libraries that our direct dependencies in turn depend on. Also, we're missing out on major improvements that recent releases bring in. This is also true of external components we use, e.g. Crate. So we should look into upgrading the whole stack since we haven't done it in a year.

As we do that, we should undo the changes implemented in #158---i.e. explicit dependencies on PyYAML and certifi. (Hopefully by the time we get to tackle this issue, PyYAML 4.2 will be out!)
We should also be able to get rid of the numpy dependency as it doesn't seem to be used anywhere at the moment.

@taliaga taliaga added the ops infrastructure and scm related stuff label Feb 1, 2019
taliaga added a commit that referenced this issue May 3, 2019
Fixes #157

Signed-off-by: Tomas Aliaga <tomas.aliaga@gmail.com>
@github-actions
Copy link
Contributor

Stale issue message

This issue was closed.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
no-issue-activity ops infrastructure and scm related stuff
Projects
None yet
Development

No branches or pull requests

3 participants