dependabot / dependabot/dependabot-core
Pip now ships with a full resolver, code likely needs updating based on outdated comment
Open
Ecosystems
EE
L: python:pip
T: tech-debt ⚙️
- Dominant language
- Ruby
- Stars
- 5.8k
- Forks
- 1.5k
- Avg merge
- 2d 18h
- Merged PRs (30d)
- 149
Description
I saw this comment:
https://github.com/dependabot/dependabot-core/blob/9c090f6fe573aa3b6b05d20920c7c48f5f00403f/python/lib/dependabot/python/update_checker.rb#L109-L115
However, `pip` now ships with a real resolver: https://pyfound.blogspot.com/2020/11/pip-20-3-new-resolver.html
I'm not familiar enough with the underlying Dependabot code to know if there's really a potential problem lurking, or if it's just a stale comment.
At a minimum, the comment needs updating at some point.
Contributor guide
Assessment
This issue has not been assessed yet.