Skip to content

Use lowest-direct dependency resolution by default#373

Merged
stefanvanburen merged 2 commits intomainfrom
svanburen/lowest-direct-resolution
Sep 12, 2025
Merged

Use lowest-direct dependency resolution by default#373
stefanvanburen merged 2 commits intomainfrom
svanburen/lowest-direct-resolution

Conversation

@stefanvanburen
Copy link
Member

We'll still test with highest (i.e., newest) dependencies in CI, but to avoid thinking things like #371 will work.

We'll still test with highest (i.e., newest) dependencies in CI, but to
avoid thinking things like #371 will work.
@stefanvanburen stefanvanburen merged commit c7e5074 into main Sep 12, 2025
22 checks passed
@stefanvanburen stefanvanburen deleted the svanburen/lowest-direct-resolution branch September 12, 2025 14:46
stefanvanburen added a commit that referenced this pull request Feb 25, 2026
This switches our version resolution back to the default of "highest",
but leaves around our testing of our entire version range in CI. This
more closely follows [the recommendation of the uv team][1] for
libraries. This should help with resolving some of the GitHub security
alerts we get on this repository.

[1]: https://docs.astral.sh/uv/concepts/resolution/#resolution-strategy

Ref: connectrpc/connect-python#142
Ref: #373
Ref: astral-sh/uv#18178 (comment)
stefanvanburen added a commit that referenced this pull request Feb 26, 2026
This switches our version resolution back to the default of "highest",
but leaves around our testing of our entire version range in CI. This
more closely follows [the recommendation of the uv team][1] for
libraries. This should help with resolving some of the GitHub security
alerts we get on this repository.

[1]: https://docs.astral.sh/uv/concepts/resolution/#resolution-strategy

Ref: connectrpc/connect-python#142
Ref: #373
Ref:
astral-sh/uv#18178 (comment)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants