dependabot / dependabot/dependabot-core

Pip now ships with a full resolver, code likely needs updating based on outdated comment

Open
#4,934 0 comments 0 reactions 1 assignee Claimed by @jeffwidman View on GitHub
Ecosystems EE L: python:pip T: tech-debt ⚙️
Dominant language
Ruby
Stars
5.8k
Forks
1.5k
Avg merge
2d 18h
Merged PRs (30d)
149

Description

I saw this comment:
https://github.com/dependabot/dependabot-core/blob/9c090f6fe573aa3b6b05d20920c7c48f5f00403f/python/lib/dependabot/python/update_checker.rb#L109-L115

However, `pip` now ships with a real resolver: https://pyfound.blogspot.com/2020/11/pip-20-3-new-resolver.html

I'm not familiar enough with the underlying Dependabot code to know if there's really a potential problem lurking, or if it's just a stale comment.

At a minimum, the comment needs updating at some point.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.