Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update Python and Pillow #3336

Merged
merged 3 commits into from
Oct 16, 2023
Merged

Update Python and Pillow #3336

merged 3 commits into from
Oct 16, 2023

Conversation

matejcik
Copy link
Contributor

This resolves dependabot errors about vulnerable libwebp. We should not be affected by the vulnerability, but better safe than sorry.

It also adds Python 3.11 to the tox matrix for trezorlib.
I tried adding Python 3.12 but it fails because something something distutils -- they were removed from Python in 3.12, but tooling still depends on them. My guess is that we'd need to upgrade pip / setuptools / poetry, but I'm not sure which of them and how exactly. @mmilata if you could take a brief look and see if you can fix it easily, that would be nice; if not, let's live without Py3.12 for now.

@matejcik matejcik requested a review from mmilata October 10, 2023 14:07
@mmilata
Copy link
Member

mmilata commented Oct 10, 2023

I don't see anything obvious. Perhaps we need to bump nixpkgs for 3.12 to work, there might be some bugfixes in more recent package.

@mmilata
Copy link
Member

mmilata commented Oct 10, 2023

3.11 seems to fail on aio-libs/aiohttp#6600

@mmilata mmilata mentioned this pull request Oct 10, 2023
2 tasks
@matejcik
Copy link
Contributor Author

the too-old stellar sdk is holding us back, I'll see if I can fix it easily

@matejcik
Copy link
Contributor Author

rebased on top of drop-simple-rlp because it was causing trouble.
e1ff3ca should resolve the py3.11 problem

@matejcik matejcik merged commit f7aec0a into main Oct 16, 2023
8 checks passed
@matejcik matejcik deleted the matejcik/update-pillow branch October 16, 2023 11:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
Archived in project
Development

Successfully merging this pull request may close these issues.

2 participants