dev-python/tuf-4.0.0 depends on "securesystemslib>=0.26.0,<0.32.0" #3357

Closed
opened 2024-05-21 19:09:30 +02:00 by zentoo · 2 comments

While debugging a huge issue with HACS I have need to install dev-python/securesystemslib-0.31.0.
I couldn't because actual dev-python/tuf-4.0.0 ebuild requires dev-python/securesystemslib-1.0.0.
It appears strange because a lot of HACS users have need to installed securesystemslib-0.31.0 to solve their HACS issue.
So I have checked dev-python/tuf requirements and it is:

From https://github.com/theupdateframework/python-tuf/blob/v4.0.0/pyproject.toml:

dependencies = [
  "requests>=2.19.1",
  "securesystemslib>=0.26.0,<0.32.0",
]

It seems that a simple rename of current ebuild is enough to backport securesystemslib to version 0.31.0.

While debugging a huge issue with HACS I have need to install dev-python/securesystemslib-0.31.0. I couldn't because actual dev-python/tuf-4.0.0 ebuild requires dev-python/securesystemslib-1.0.0. It appears strange because a lot of HACS users have need to installed securesystemslib-0.31.0 to solve their HACS issue. So I have checked dev-python/tuf requirements and it is: From https://github.com/theupdateframework/python-tuf/blob/v4.0.0/pyproject.toml: ``` dependencies = [ "requests>=2.19.1", "securesystemslib>=0.26.0,<0.32.0", ] ``` It seems that a simple rename of current ebuild is enough to backport securesystemslib to version 0.31.0.
Author

I close it for a new issue because homeassistant-2024.5.4 requires >=tuf-2.0.0 and actually (in a venv) it uses tuf-5.0.0 that requires securesystemslib-1.0.0.

I close it for a new issue because homeassistant-2024.5.4 requires >=tuf-2.0.0 and actually (in a venv) it uses tuf-5.0.0 that requires securesystemslib-1.0.0.
onkelbeh added this to the 2024.5.5 milestone 2024-05-26 11:22:09 +02:00
onkelbeh added the requirement label 2024-05-26 11:22:19 +02:00
Owner

added it anyway: 9e4784501 dev-python/securesystemslib: add 0.31.0

added it anyway: 9e4784501 dev-python/securesystemslib: add 0.31.0
Sign in to join this conversation.
No Label requirement
2 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: onkelbeh/HomeAssistantRepository#3357