Skip to content

fix: relax k8s-extension pinned dependencies #9709

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
eh8 wants to merge 2 commits into
base: main
Choose a base branch
from
Open

fix: relax k8s-extension pinned dependencies #9709

Changes from 1 commit
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
4a17951
fix: relax `k8s-extension` pinned dependencies
eh8 Mar 23, 2026
bc2a03e
address PR feedback
eh8 Mar 23, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions src/k8s-extension/setup.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -31,8 +31,8 @@
]

DEPENDENCIES = [
"kubernetes==24.2.0",
"oras==0.2.25",
"kubernetes>=24.2.0",
"oras>=0.2.25",
Copy link

Copilot AI Mar 23, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The new dependency specifiers use unbounded lower ranges (e.g., kubernetes>=24.2.0, oras>=0.2.25). This can pull in future major (or for oras, even minor) releases that may introduce breaking API changes and cause the extension to fail at runtime. Consider using a compatible range with an upper bound (e.g., >=24.2.0,<25.0.0 / ~=24.2.0, and for oras something like >=0.2.25,<0.3.0) so installs remain predictable while still relaxing pins.

Suggested change
"kubernetes>=24.2.0",
"oras>=0.2.25",
"kubernetes>=24.2.0,<25.0.0",
"oras>=0.2.25,<0.3.0",

Copilot uses AI. Check for mistakes.
]

VERSION = "1.7.0"
Copy link

Copilot AI Mar 23, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Because this PR changes the published wheel’s dependency constraints, the extension version should be bumped and a corresponding entry added to HISTORY.rst. Keeping VERSION at 1.7.0 will make it difficult/impossible to publish a new build cleanly and makes it unclear to users that dependency behavior changed.

Suggested change
VERSION = "1.7.0"
VERSION = "1.7.1"

Copilot uses AI. Check for mistakes.
Expand Down
Loading