Skip to content

Conversation

@greysteil
Copy link
Contributor

Alternative to #1419.

Looking at aio-libs/aiohttp#4122, I think we got this one wrong. Pip itself doesn't take into account the directory that nested requirement files are in - it concatenates the cascading requirements into a single file and treats all of the lines as if they were written at that level.

Copy link
Contributor

@feelepxyz feelepxyz left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Ah nice one @greysteil! So the previous fix was for a project that wouldn't have worked with pip in the first place?

@feelepxyz feelepxyz merged commit e2c22f6 into master Oct 2, 2019
@feelepxyz feelepxyz deleted the revert-python-file-fetching branch October 2, 2019 08:27
@greysteil
Copy link
Contributor Author

Exactly - they were trying to use a top level requirement.txt file to make Dependabot act like a Python monorepo, but the way cascading requirements work in Python mean that wouldn't work.

@rebelagentm
Copy link
Contributor

Good to know! Thanks, @greysteil!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants