Drop support for Python 3.5#1238
Conversation
Python 3.5 has now reached its end-of-life and has been retired. https://www.python.org/dev/peps/pep-0478/ The optional (but highly recommended) 'cryptography' dependency has also just dropped support for 3.5. Continuing support for 3.5 in TUF does not seem worth the effort. Signed-off-by: Lukas Puehringer <lukas.puehringer@nyu.edu>
Also enables windows builds for the recently added Python 3.9. Signed-off-by: Lukas Puehringer <lukas.puehringer@nyu.edu>
requirements-pinned.txt lists all immediate and transitive dependencies combined for all supported Python versions. This commit semi-automatically updates the pinned dependencies using the instructions in requirements.txt: Updated dependencies are: - cryptography (supersedes dependabot's theupdateframework#1237) - certifi (supersedes dependabot's theupdateframework#1233) - enum34 (oddly not detected by dependabot) Signed-off-by: Lukas Puehringer <lukas.puehringer@nyu.edu>
We recently enabled support for Python 3.9 and also added 3.9 builds on appveyor, but they don't work out of the box. Instead of troubleshooting this I suggest we soon switch to GitHub actions: theupdateframework#1195. Signed-off-by: Lukas Puehringer <lukas.puehringer@nyu.edu>
joshuagl
left a comment
joshuagl
left a comment
There was a problem hiding this comment.
Odd that Dependabot didn't detect Enum, I wonder if it's not picking up dependencies which are only used on Python2?
Could be. I'll keep an eye on it. Btw. I'm also thinking of a better way to auto-update |
Could be a good use of a scheduled GitHub action, much like securesystemlib's ed25519 check? |
Exactly what I had in mind. :) |
3 participants
Please fill in the fields below to submit a pull request. The more information
that is provided, the better.
Fixes #
Description of the changes being introduced by the pull request:
Python 3.5 has now reached its end-of-life and has been retired:
https://www.python.org/dev/peps/pep-0478/
The optional (but highly recommended) 'cryptography' dependency has also just dropped support for 3.5. Continuing support for 3.5 in TUF does not seem worth the effort.
This PR also updates the test configuration accordingly and recomputes the pinned dependencies.
Please verify and check that the pull request fulfills the following
requirements: