Skip to content

build(pypi): pin pytest-asyncio - #440

Merged
jimisola merged 1 commit into
mainfrom
build/pin-dependencies
Aug 17, 2026
Merged

build(pypi): pin pytest-asyncio#440
jimisola merged 1 commit into
mainfrom
build/pin-dependencies

Conversation

@jimisola

Copy link
Copy Markdown
Member

What & Why

Every dependency in the reqstool repos is now pinned to an exact version. A range means the version you get depends on when you install — CI, a laptop and a release build can each resolve differently — and a bad upstream release lands without a PR anyone reviewed.

Renovate keeps proposing upgrades exactly as before; they now arrive as reviewable PRs that CI has to pass, rather than silently.

Paired with reqstool/.github#77, which sets rangeStrategy: "pin" org-wide so nothing drifts back.

This repo

pytest-asyncio>=0.25,<1.0pytest-asyncio==0.26.0 — the only dependency here still declared as a range. 0.26.0 is the newest release inside the range it already declared, so nothing changes behaviourally.

Deliberately not 1.4.0

pytest-asyncio 1.0 was a breaking release, and this suite depends on what it changed — asyncio_mode = "auto" and asyncio_default_fixture_loop_scope = "module" are both set in pyproject.toml.

Pinning removes the <1.0 cap, so Renovate will now propose 1.x as an ordinary PR and CI will say whether the suite survives it. That is a better way to find out than guessing here.

The only dependency in this repo still declared as a range. A range means the
version installed depends on when you install, so CI, a laptop and a release
build can each resolve differently.

Pinned to 0.26.0, the newest release inside the range it already declared, so
nothing changes behaviourally.

Deliberately not 1.4.0. pytest-asyncio 1.0 was a breaking release, and this
suite depends on the behaviour it changed -- `asyncio_mode = "auto"` and
`asyncio_default_fixture_loop_scope = "module"` are both set. Pinning removes
the `<1.0` cap, so Renovate will now propose 1.x as an ordinary PR and CI will
say whether the suite survives it. That is a better way to find out than
assuming it here.

Signed-off-by: Jimisola Laursen <jimisola@jimisola.com>
@jimisola
jimisola merged commit 26e2fbb into main Aug 17, 2026
8 checks passed
@jimisola
jimisola deleted the build/pin-dependencies branch August 17, 2026 23:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant