openedx / openedx/openedx-platform
Un-Pin lxml and xmlsec
Nobody has claimed this yet.
- Dominant language
- Python
- Stars
- 8.2k
- Forks
- 4.4k
- Avg merge
- 6d 18h
- Merged PRs (30d)
- 42
Description
These dependencies are pinned because when we upgrade them and then try to run the code, we get a version mismatch error at runtime. This happens because the version of the binaries shipped in those python libraries is linked to a newer version of the libxml2 library than what is on the version of ubuntu we're running on.
I considered running with --no-binary for these two packages but that increased complexity as it added more system package requirements that would need to be updated here and in tutor. So I didn't opt for that yet.
For now the requirements are pinned until the version of libxml2 in ubuntu updates at which point we might see this error again and this can be unpinned.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
The issue does not name a requirements file; start by locating the pins for lxml and xmlsec and checking the Ubuntu libxml2 version used by openedx-platform. Confirm candidate unpinned versions run without the reported runtime mismatch, and account for any no-binary or system-package implications before removing the pins.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python, ubuntu
- Domain
- backend, operating-systems
- Issue type
- Refactor
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100