botbuilder-python icon indicating copy to clipboard operation
botbuilder-python copied to clipboard

aiohttp frozen to one specific version prevents usage amongst library, provide wider constraints

Open alexrecuenco opened this issue 9 months ago • 1 comments

Version

All

Describe the bug

The dependency is requested as A==B, this is not a great idea for a library, since other packages can't properly find compatibilities

In NodeJS it is fine, because it can install multiple versions of non-peer dependencies recursively, in python it can be troublesome to do so.

Expected behavior

At a bare minimum, it allows me to use the latest bugfix version of aiohttp without a new version of botbuilder-python being released.

If at all possible, just provide unbound dependencies with >= unless you know of concrete incompatibilities. Or at least just a major release constraint.

Additional context

See bounding version constraints, similar discussions about dependencies in poetry issues

alexrecuenco avatar Apr 30 '25 11:04 alexrecuenco

See another setup.py as an example.

https://github.com/aio-libs/aiohttp-devtools/blob/master/setup.py

alexrecuenco avatar Apr 30 '25 11:04 alexrecuenco