-
Notifications
You must be signed in to change notification settings - Fork 470
deps: bump flagsmith-common from 2.2.4 to 2.2.5 #6256
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Changes from all commits
0cf407f
03ad2f5
e63928f
50c1abc
e780dc6
a167e76
7b3f69d
3866828
d2f248a
6ad6e54
be15c76
4f744f2
b01b811
71a4e38
2a09ee7
954a1f5
1bd95a5
7f8d0ad
File filter
Filter by extension
Conversations
Jump to
Diff view
Diff view
There are no files selected for viewing
Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -163,7 +163,7 @@ pygithub = "2.1.1" | |
| hubspot-api-client = "^8.2.1" | ||
| djangorestframework-dataclasses = "^1.3.1" | ||
| pyotp = "^2.9.0" | ||
| flagsmith-common = "^2.2.4" | ||
| flagsmith-common = { git = "https://github.com/flagsmith/flagsmith-common", branch = "fix/os-dir-permissions" } | ||
|
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. Bug: Conflicting Dependency Sources Block InstallationThe
Contributor
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. Reminder to use a tagged version. |
||
| django-stubs = "^5.1.3" | ||
| tzdata = "^2024.1" | ||
| djangorestframework-simplejwt = "^5.5.1" | ||
|
|
||
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Bug: Unstable Dependencies Break Build Reproducibility
The dependency points to a mutable git branch
fix/os-dir-permissionsinstead of a version tag, despite the PR claiming to bump to version 2.2.5. This creates non-reproducible builds since the branch content can change without notice, and different installations could receive different code. The dependency should reference a specific version tag or commit hash for reproducibility.