dependabot / dependabot/dependabot-core

"Requirements to unlock update_not_possible" with python repo with requirements.txt

Open
#2,894 6 comments 1 reaction 0 assignees View on GitHub

Nobody has claimed this yet.

F: error-messages L: python:pip T: bug 🐞
Dominant language
Ruby
Stars
5.8k
Forks
1.5k
Avg merge
2d 13h
Merged PRs (30d)
151

Description

We recently installed dependabot in https://github.com/ultralytics/yolov3 (python repo with requirements.txt file), and after running dependabot, all packages display "Requirements to unlock update_not_possible" message, and no PR is generated, despite many packages being identified as out of date.

i.e. scipy>=1.4.1 in https://github.com/ultralytics/yolov3/blob/master/requirements.txt, which dependabot identifies as "Latest version is 1.5.4", before giving the "Requirements to unlock update_not_possible" message, and taking no action.

updater | INFO <job_77033297> Checking if scipy  needs updating
  proxy | 2020/12/20 03:37:26 [026] GET https://pypi.org:443/simple/scipy/
  proxy | 2020/12/20 03:37:26 [026] 200 https://pypi.org:443/simple/scipy/
updater | INFO <job_77033297> Latest version is 1.5.4
  proxy | 2020/12/20 03:37:26 [028] GET https://pypi.org:443/simple/scipy/
  proxy | 2020/12/20 03:37:26 [028] 200 https://pypi.org:443/simple/scipy/
updater | INFO <job_77033297> Requirements to unlock update_not_possible
updater | INFO <job_77033297> Requirements update strategy bump_versions
updater | INFO <job_77033297> No update possible for scipy

This is our first time using dependabot, so perhaps there is something we are not understanding. Any insights are appreciated. Thank you for your time!

Package manager/ecosystem
pip/python
Manifest contents prior to update
https://github.com/ultralytics/yolov3/blob/master/requirements.txt
Updated dependency
scipy>=1.4.1, should be updated to 1.5.4, but no action is taken
What you expected to see, versus what you actually saw
scipy>=1.4.1, should be updated to 1.5.4, but no action is taken
Images of the diff or a link to the PR, issue or logs
https://github.com/ultralytics/yolov3/network/updates/77033297

proxy | time="2020-12-20T03:37:13Z" level=info msg="proxy starting" commit=21ae9f84e9bb7b3f720e9bdc56e0b7a93b360267
  proxy | 2020/12/20 03:37:13 Listening (:1080)
updater | 2020-12-20T03:37:13.168714718 [77033297:WARN:src/devices/src/legacy/serial.rs:422] Detached the serial input due to peer close/error.
updater | time="2020-12-20T03:37:14Z" level=info msg="guest starting" commit=93f0ca9ddab7d943fd6e4b0d09e3c9a987e8a768
updater | time="2020-12-20T03:37:14Z" level=info msg="starting job..." fetcher_timeout=5m0s job_id=77033297 updater_timeout=45m0s updater_version=0.129.0-794bc4cbac8a083de02872c15ea85a55ccbe2aff
updater | yarn config v1.22.5
updater | success Set "cafile" to "/etc/ssl/certs/ca-certificates.crt".
updater | Done in 0.03s.
updater | I, [2020-12-20T03:37:17.367930 #72]  INFO -- sentry: ** [Raven] Raven 3.1.1 ready to catch errors
updater | INFO <job_77033297> Starting job processing
  proxy | 2020/12/20 03:37:19 [002] GET https://api.github.com:443/repos/ultralytics/yolov3
  proxy | 2020/12/20 03:37:19 [002] * authenticating github api request
  proxy | 2020/12/20 03:37:19 [002] 200 https://api.github.com:443/repos/ultralytics/yolov3
  proxy | 2020/12/20 03:37:19 [004] GET https://api.github.com:443/repos/ultralytics/yolov3/git/refs/heads/master
  proxy | 2020/12/20 03:37:19 [004] * authenticating github api request
  proxy | 2020/12/20 03:37:19 [004] 200 https://api.github.com:443/repos/ultralytics/yolov3/git/refs/heads/master
  proxy | 2020/12/20 03:37:19 [006] GET https://api.github.com:443/repos/ultralytics/yolov3/contents/?ref=a21595e2e22e650b1e9f591c336e516b50a29b8f
  proxy | 2020/12/20 03:37:19 [006] * authenticating github api request
  proxy | 2020/12/20 03:37:19 [006] 200 https://api.github.com:443/repos/ultralytics/yolov3/contents/?ref=a21595e2e22e650b1e9f591c336e516b50a29b8f
  proxy | 2020/12/20 03:37:19 [008] GET https://api.github.com:443/repos/ultralytics/yolov3/contents/requirements.txt?ref=a21595e2e22e650b1e9f591c336e516b50a29b8f
  proxy | 2020/12/20 03:37:19 [008] * authenticating github api request
  proxy | 2020/12/20 03:37:19 [008] 200 https://api.github.com:443/repos/ultralytics/yolov3/contents/requirements.txt?ref=a21595e2e22e650b1e9f591c336e516b50a29b8f
  proxy | 2020/12/20 03:37:19 [010] GET https://api.github.com:443/repos/ultralytics/yolov3/contents/.github?ref=a21595e2e22e650b1e9f591c336e516b50a29b8f
  proxy | 2020/12/20 03:37:19 [010] * authenticating github api request
  proxy | 2020/12/20 03:37:19 [010] 200 https://api.github.com:443/repos/ultralytics/yolov3/contents/.github?ref=a21595e2e22e650b1e9f591c336e516b50a29b8f
  proxy | 2020/12/20 03:37:19 [012] GET https://api.github.com:443/repos/ultralytics/yolov3/contents/data?ref=a21595e2e22e650b1e9f591c336e516b50a29b8f
  proxy | 2020/12/20 03:37:19 [012] * authenticating github api request
  proxy | 2020/12/20 03:37:19 [012] 200 https://api.github.com:443/repos/ultralytics/yolov3/contents/data?ref=a21595e2e22e650b1e9f591c336e516b50a29b8f
  proxy | 2020/12/20 03:37:19 [014] GET https://api.github.com:443/repos/ultralytics/yolov3/contents/models?ref=a21595e2e22e650b1e9f591c336e516b50a29b8f
  proxy | 2020/12/20 03:37:19 [014] * authenticating github api request
  proxy | 2020/12/20 03:37:20 [014] 200 https://api.github.com:443/repos/ultralytics/yolov3/contents/models?ref=a21595e2e22e650b1e9f591c336e516b50a29b8f
  proxy | 2020/12/20 03:37:20 [016] GET https://api.github.com:443/repos/ultralytics/yolov3/contents/utils?ref=a21595e2e22e650b1e9f591c336e516b50a29b8f
  proxy | 2020/12/20 03:37:20 [016] * authenticating github api request
  proxy | 2020/12/20 03:37:20 [016] 200 https://api.github.com:443/repos/ultralytics/yolov3/contents/utils?ref=a21595e2e22e650b1e9f591c336e516b50a29b8f
  proxy | 2020/12/20 03:37:20 [018] GET https://api.github.com:443/repos/ultralytics/yolov3/contents/weights?ref=a21595e2e22e650b1e9f591c336e516b50a29b8f
  proxy | 2020/12/20 03:37:20 [018] * authenticating github api request
  proxy | 2020/12/20 03:37:20 [018] 200 https://api.github.com:443/repos/ultralytics/yolov3/contents/weights?ref=a21595e2e22e650b1e9f591c336e516b50a29b8f
updater | INFO <job_77033297> Finished job processing
updater | time="2020-12-20T03:37:20Z" level=info msg="task complete" container_id=job-77033297-file-fetcher exit_code=0 job_id=77033297 step=fetcher
updater | yarn config v1.22.5
updater | success Set "cafile" to "/etc/ssl/certs/ca-certificates.crt".
updater | Done in 0.02s.
updater | I, [2020-12-20T03:37:22.366430 #73]  INFO -- sentry: ** [Raven] Raven 3.1.1 ready to catch errors
updater | INFO <job_77033297> Starting job processing
updater | INFO <job_77033297> Starting update job for ultralytics/yolov3
updater | INFO <job_77033297> Checking if tensorboard  needs updating
  proxy | 2020/12/20 03:37:26 [022] GET https://pypi.org:443/simple/tensorboard/
  proxy | 2020/12/20 03:37:26 [022] 200 https://pypi.org:443/simple/tensorboard/
updater | INFO <job_77033297> Latest version is 2.4.0
  proxy | 2020/12/20 03:37:26 [024] GET https://pypi.org:443/simple/tensorboard/
  proxy | 2020/12/20 03:37:26 [024] 200 https://pypi.org:443/simple/tensorboard/
updater | INFO <job_77033297> Requirements to unlock update_not_possible
updater | INFO <job_77033297> Requirements update strategy bump_versions
updater | INFO <job_77033297> No update possible for tensorboard 
updater | INFO <job_77033297> Checking if scipy  needs updating
  proxy | 2020/12/20 03:37:26 [026] GET https://pypi.org:443/simple/scipy/
  proxy | 2020/12/20 03:37:26 [026] 200 https://pypi.org:443/simple/scipy/
updater | INFO <job_77033297> Latest version is 1.5.4
  proxy | 2020/12/20 03:37:26 [028] GET https://pypi.org:443/simple/scipy/
  proxy | 2020/12/20 03:37:26 [028] 200 https://pypi.org:443/simple/scipy/
updater | INFO <job_77033297> Requirements to unlock update_not_possible
updater | INFO <job_77033297> Requirements update strategy bump_versions
updater | INFO <job_77033297> No update possible for scipy 
updater | INFO <job_77033297> Checking if pycocotools  needs updating
  proxy | 2020/12/20 03:37:27 [030] GET https://pypi.org:443/simple/pycocotools/
  proxy | 2020/12/20 03:37:27 [030] 200 https://pypi.org:443/simple/pycocotools/
updater | INFO <job_77033297> Latest version is 2.0.2
  proxy | 2020/12/20 03:37:27 [032] GET https://pypi.org:443/simple/pycocotools/
  proxy | 2020/12/20 03:37:27 [032] 200 https://pypi.org:443/simple/pycocotools/
updater | INFO <job_77033297> Requirements to unlock update_not_possible
updater | INFO <job_77033297> Requirements update strategy bump_versions
updater | INFO <job_77033297> No update possible for pycocotools 
updater | INFO <job_77033297> Checking if cython  needs updating
  proxy | 2020/12/20 03:37:27 [034] GET https://pypi.org:443/simple/cython/
  proxy | 2020/12/20 03:37:27 [034] 200 https://pypi.org:443/simple/cython/
updater | INFO <job_77033297> Latest version is 0.29.21
  proxy | 2020/12/20 03:37:28 [036] GET https://pypi.org:443/simple/cython/
  proxy | 2020/12/20 03:37:28 [036] 200 https://pypi.org:443/simple/cython/
updater | INFO <job_77033297> No update needed for cython 
updater | INFO <job_77033297> Checking if torchvision  needs updating
  proxy | 2020/12/20 03:37:28 [038] GET https://pypi.org:443/simple/torchvision/
  proxy | 2020/12/20 03:37:28 [038] 200 https://pypi.org:443/simple/torchvision/
updater | INFO <job_77033297> Latest version is 0.8.2
  proxy | 2020/12/20 03:37:28 [040] GET https://pypi.org:443/simple/torchvision/
  proxy | 2020/12/20 03:37:28 [040] 200 https://pypi.org:443/simple/torchvision/
updater | INFO <job_77033297> Requirements to unlock update_not_possible
updater | INFO <job_77033297> Requirements update strategy bump_versions
updater | INFO <job_77033297> No update possible for torchvision 
updater | INFO <job_77033297> Checking if seaborn  needs updating
  proxy | 2020/12/20 03:37:28 [042] GET https://pypi.org:443/simple/seaborn/
  proxy | 2020/12/20 03:37:28 [042] 200 https://pypi.org:443/simple/seaborn/
updater | INFO <job_77033297> Latest version is 0.11.0
  proxy | 2020/12/20 03:37:29 [044] GET https://pypi.org:443/simple/seaborn/
  proxy | 2020/12/20 03:37:29 [044] 200 https://pypi.org:443/simple/seaborn/
updater | INFO <job_77033297> No update needed for seaborn 
updater | INFO <job_77033297> Checking if torch  needs updating
  proxy | 2020/12/20 03:37:29 [046] GET https://pypi.org:443/simple/torch/
  proxy | 2020/12/20 03:37:29 [046] 200 https://pypi.org:443/simple/torch/
updater | INFO <job_77033297> Latest version is 1.7.1
  proxy | 2020/12/20 03:37:29 [048] GET https://pypi.org:443/simple/torch/
  proxy | 2020/12/20 03:37:29 [048] 200 https://pypi.org:443/simple/torch/
updater | INFO <job_77033297> Requirements to unlock update_not_possible
updater | INFO <job_77033297> Requirements update strategy bump_versions
updater | INFO <job_77033297> No update possible for torch 
updater | INFO <job_77033297> Checking if pandas  needs updating
  proxy | 2020/12/20 03:37:29 [050] GET https://pypi.org:443/simple/pandas/
  proxy | 2020/12/20 03:37:29 [050] 200 https://pypi.org:443/simple/pandas/
updater | INFO <job_77033297> Latest version is 1.1.5
  proxy | 2020/12/20 03:37:29 [052] GET https://pypi.org:443/simple/pandas/
  proxy | 2020/12/20 03:37:29 [052] 200 https://pypi.org:443/simple/pandas/
updater | INFO <job_77033297> No update needed for pandas 
updater | INFO <job_77033297> Checking if numpy  needs updating
  proxy | 2020/12/20 03:37:30 [054] GET https://pypi.org:443/simple/numpy/
  proxy | 2020/12/20 03:37:30 [054] 200 https://pypi.org:443/simple/numpy/
updater | INFO <job_77033297> Latest version is 1.19.4
  proxy | 2020/12/20 03:37:30 [056] GET https://pypi.org:443/simple/numpy/
  proxy | 2020/12/20 03:37:30 [056] 200 https://pypi.org:443/simple/numpy/
updater | INFO <job_77033297> Requirements to unlock update_not_possible
updater | INFO <job_77033297> Requirements update strategy bump_versions
updater | INFO <job_77033297> No update possible for numpy 
updater | INFO <job_77033297> Checking if opencv-python  needs updating
  proxy | 2020/12/20 03:37:31 [058] GET https://pypi.org:443/simple/opencv-python/
  proxy | 2020/12/20 03:37:31 [058] 200 https://pypi.org:443/simple/opencv-python/
updater | INFO <job_77033297> Latest version is 4.4.0.46
  proxy | 2020/12/20 03:37:31 [060] GET https://pypi.org:443/simple/opencv-python/
  proxy | 2020/12/20 03:37:31 [060] 200 https://pypi.org:443/simple/opencv-python/
updater | INFO <job_77033297> Requirements to unlock update_not_possible
updater | INFO <job_77033297> Requirements update strategy bump_versions
updater | INFO <job_77033297> No update possible for opencv-python 
updater | INFO <job_77033297> Checking if pyyaml  needs updating
  proxy | 2020/12/20 03:37:31 [062] GET https://pypi.org:443/simple/pyyaml/
  proxy | 2020/12/20 03:37:31 [062] 200 https://pypi.org:443/simple/pyyaml/
updater | INFO <job_77033297> Latest version is 5.3.1
  proxy | 2020/12/20 03:37:32 [064] GET https://pypi.org:443/simple/pyyaml/
  proxy | 2020/12/20 03:37:32 [064] 200 https://pypi.org:443/simple/pyyaml/
updater | INFO <job_77033297> Requirements to unlock update_not_possible
updater | INFO <job_77033297> Requirements update strategy bump_versions
updater | INFO <job_77033297> No update possible for pyyaml 
updater | INFO <job_77033297> Checking if matplotlib  needs updating
  proxy | 2020/12/20 03:37:32 [066] GET https://pypi.org:443/simple/matplotlib/
  proxy | 2020/12/20 03:37:32 [066] 200 https://pypi.org:443/simple/matplotlib/
updater | INFO <job_77033297> Latest version is 3.3.3
  proxy | 2020/12/20 03:37:32 [068] GET https://pypi.org:443/simple/matplotlib/
  proxy | 2020/12/20 03:37:32 [068] 200 https://pypi.org:443/simple/matplotlib/
updater | INFO <job_77033297> Requirements to unlock update_not_possible
updater | INFO <job_77033297> Requirements update strategy bump_versions
updater | INFO <job_77033297> No update possible for matplotlib 
updater | INFO <job_77033297> Checking if thop  needs updating
  proxy | 2020/12/20 03:37:32 [070] GET https://pypi.org:443/simple/thop/
  proxy | 2020/12/20 03:37:32 [070] 200 https://pypi.org:443/simple/thop/
updater | INFO <job_77033297> Latest version is 0.0.31.post2005241907
  proxy | 2020/12/20 03:37:32 [072] GET https://pypi.org:443/simple/thop/
  proxy | 2020/12/20 03:37:32 [072] 200 https://pypi.org:443/simple/thop/
updater | INFO <job_77033297> No update needed for thop 
updater | INFO <job_77033297> Checking if tqdm  needs updating
  proxy | 2020/12/20 03:37:32 [074] GET https://pypi.org:443/simple/tqdm/
  proxy | 2020/12/20 03:37:32 [074] 200 https://pypi.org:443/simple/tqdm/
updater | INFO <job_77033297> Latest version is 4.54.1
  proxy | 2020/12/20 03:37:32 [076] GET https://pypi.org:443/simple/tqdm/
  proxy | 2020/12/20 03:37:32 [076] 200 https://pypi.org:443/simple/tqdm/
updater | INFO <job_77033297> Requirements to unlock update_not_possible
updater | INFO <job_77033297> Requirements update strategy bump_versions
updater | INFO <job_77033297> No update possible for tqdm 
updater | INFO <job_77033297> Checking if pillow  needs updating
  proxy | 2020/12/20 03:37:33 [078] GET https://pypi.org:443/simple/pillow/
  proxy | 2020/12/20 03:37:33 [078] 200 https://pypi.org:443/simple/pillow/
updater | INFO <job_77033297> Latest version is 8.0.1
  proxy | 2020/12/20 03:37:33 [080] GET https://pypi.org:443/simple/pillow/
  proxy | 2020/12/20 03:37:33 [080] 200 https://pypi.org:443/simple/pillow/
updater | INFO <job_77033297> No update needed for pillow 
updater | INFO <job_77033297> Finished job processing
updater | time="2020-12-20T03:37:34Z" level=info msg="task complete" container_id=job-77033297-updater exit_code=0 job_id=77033297 step=updater

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start with the pip/python update run for the linked yolov3 requirements.txt, focusing on the log sequence around "Requirements to unlock update_not_possible" and the scipy constraint. Reproduce the job with the shown manifest and compare the resolver's handling of scipy>=1.4.1 with the reported latest version 1.5.4. Done means valid updates are proposed for eligible requirements, or the logs clearly explain why an update cannot be made.

Written by the indexing model from the issue text.

Assessment

Tech stack
python
Domain
tooling
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.