-
Notifications
You must be signed in to change notification settings - Fork 62
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Fix handling of prerelease-only resolutions #477
Conversation
Signed-off-by: William Woodruff <[email protected]>
We need `all([any(...) ...])` because of the nested iterators here: we check whether each requirement's specifier allows this candidate, and all specifiers need to allow it.
Thanks again for reporting this @redbmk! I can confirm that these changes appear to fix the bug for me: $ pip-audit -r <(echo 'sqlalchemy2-stubs') --format=json
No known vulnerabilities found
{"dependencies": [{"name": "sqlalchemy2-stubs", "version": "0.0.2a32", "vulns": []}, {"name": "typing-extensions", "version": "4.4.0", "vulns": []}], "fixes": []} Would you mind also giving them a spin and letting me know if they work for you as well? |
This is perfect - works like a charm! Thanks for fixing this so fast! |
No problem, thanks again for helping us debug! I'll get a patch release made to ship this out as well. |
Awesome, thanks! Was just going to ask what your typical release cadence was - I'll keep an eye out for the release |
WIP; just for visibility into where I've inserted debug statements.Fixes #472.
Signed-off-by: William Woodruff [email protected]