Skip to content

[depthfirst-3690] Upgrade multiple packages in requirements.txt - #2

Open
depthfirst-app[bot] wants to merge 1 commit into
mainfrom
patcherai/requirements.txt-multiple-upgrades-3690
Open

[depthfirst-3690] Upgrade multiple packages in requirements.txt#2
depthfirst-app[bot] wants to merge 1 commit into
mainfrom
patcherai/requirements.txt-multiple-upgrades-3690

Conversation

@depthfirst-app

Copy link
Copy Markdown

Overview

Upgrade

  • Bumped requests minimum from >=2.31.0 to >=2.33.0.
  • Bumped snowflake-connector-python minimum from >=3.2.0 to >=3.13.1.

Changes

  • Updated README system requirements from Python 3.8+ to Python 3.10+ because requests>=2.33.0 declares Requires-Python: >=3.10 and no longer supports Python 3.8/3.9 installs.
  • Fixed a preexisting syntax error in main-script.py where the V_USER_FEEDBACK analytics view SQL string ended with four quotes instead of the closing triple quote. No dependency API adaptation was required; this was necessary for compile validation to complete.

Backward Compatibility

  • Python 3.8 and 3.9 are no longer supported by the declared dependency set. Users running those versions must upgrade to Python 3.10+ before installing the updated requirements.
  • The Snowflake write_pandas usage was import-checked and did not require application code changes.

Vulnerabilities Fixed

Warnings

  • No automated test suite was present in the repository. Runtime integration with real Moveworks and Snowflake credentials was not exercised.

Verified

  • pip install -r requirements.txt
  • ✅ Exact target install check for requests==2.33.0 and snowflake-connector-python==3.13.1
  • python3 -m py_compile main-script.py
  • ✅ Import smoke check for requests, snowflake.connector, and snowflake.connector.pandas_tools.write_pandas
  • python3 main-script.py usage/help path
  • ✅ Configured validation commands: true setup/compilecheck/test

Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants