Skip to content

Commit

Permalink
Unpin requirements
Browse files Browse the repository at this point in the history
lxml has a security release in version 4.6.3, however I cannot upgrade to it due to ansible-playbook-grapher pinning it directly. As an installable tool that can interact with a virtualenv, ansible-playbook-grapher should not pin dependencies but declare ranges up until the next backwards-incompatible version, to allow users to fetch such upgrades.
  • Loading branch information
adamchainz committed Apr 2, 2021
1 parent 1d2eebd commit 0984058
Showing 1 changed file with 4 additions and 4 deletions.
8 changes: 4 additions & 4 deletions requirements.txt
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
ansible>=2.8.0
graphviz==0.16
colour==0.1.5
lxml==4.6.2
packaging==20.9
graphviz<1
colour<1
lxml<5
packaging

0 comments on commit 0984058

Please sign in to comment.