Upgrade pinned version of cpg-utils in analysis-runner web

[dancoates]

So that the membership import statement is correct

[EddieLF]

requirements.in has cpg-utils~=5.0.1, while requirements.txt has cpg-utils==5.0.10 - are these the same?

[dancoates]

requirements.in has cpg-utils~=5.0.1, while requirements.txt has cpg-utils==5.0.10 - are these the same?

They should be compatible if we're using semantic versioning correctly, The ~= in requirements.in means that pip-compile will specify the newest patch version >=5.0.1. The requirements.txt file is the "lock" file though, it's the ultimate source of truth of what gets installed

[MattWellie]

so this will pick up the latest in the 5.0.X range? Below we have cpg-utils==5.0.10, so should this be cpg-utils~=5.0.10

[MattWellie]

should have refreshed the page eh

[dancoates]

It's effectively the same thing, the requirements.in is just saying this should work with anything above 5.0.1 but less than 5.1, in some ways it is nice to keep it kind of loose, because if another dependency were to specify cpg-utils==5.0.4, pip-compile could resolve the conflict and decide to use 5.0.4. Whereas if we specified ~=5.0.10 here that wouldn't be a resolvable conflict