Exclude yanked grpcio 1.78.1 and move grpcio-tools to dev dependencies#115
Exclude yanked grpcio 1.78.1 and move grpcio-tools to dev dependencies#115iwillspeak merged 3 commits intomainfrom
Conversation
Co-authored-by: iwillspeak <1004401+iwillspeak@users.noreply.github.com>
There was a problem hiding this comment.
Pull request overview
Pins grpcio / grpcio-tools to avoid installing yanked grpcio 1.78.1 (yanked due to upstream bug), keeping the client usable until an upstream fix is available.
Changes:
- Add explicit
grpcio==1.78.0and tightengrpcio-toolsto==1.78.0inpyproject.toml. - Regenerate
uv.lockto reflect the 1.78.0 artifacts and updated project dependency metadata.
Reviewed changes
Copilot reviewed 1 out of 2 changed files in this pull request and generated 2 comments.
| File | Description |
|---|---|
pyproject.toml |
Pins grpcio and grpcio-tools to 1.78.0 in project dependencies. |
uv.lock |
Updates lock entries and project requires-dist to match the pinned versions. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
|
@copilot implement the two suggestions from code revew. Move the package do dev dependencies and switch the pin to a more graceful |
Co-authored-by: iwillspeak <1004401+iwillspeak@users.noreply.github.com>
Done in b0f7742:
|
There was a problem hiding this comment.
Pull request overview
Copilot reviewed 1 out of 2 changed files in this pull request and generated no new comments.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
grpcio1.78.1 was yanked from PyPI due to a critical upstream bug (grpc/grpc#41725). This excludes the yanked version while allowing consumers to automatically pick up a fixed upstream release once available.Changes
pyproject.toml: Addedgrpcio>=1.78.0,!=1.78.1,<2.0.0as a runtime dependency (excludes the yanked 1.78.1, compatible with future fixes)pyproject.toml: Movedgrpcio-toolsto thedevdependency group (it is only needed for protobuf compilation, not at runtime) with the same>=1.78.0,!=1.78.1,<2.0.0constraintuv.lock: Regenerated to reflect the updated dependency constraintsOriginal prompt
💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.