Skip to content

Commit e1ffd10

Browse files
committed
Force wheel version to 0.46.3
Fixes https://github.com/alphagov/notifications-api/security/dependabot/99 Wheel was introduced when we upgraded `click-datetime` to version 0.4. `click-datetime` pins `wheel` to a max version of 0.44.x: https://github.com/click-contrib/click-datetime/blob/942964cf71b5c43a542e63e634c934ab29d3daf3/pyproject.toml#L16 Older versions of `click-datetime` didn’t depend on wheel. By pinning wheel to a newer version, we force the previous version of `click-datetime` to be installed, without having to pin to an old version of something.
1 parent c405671 commit e1ffd10

File tree

3 files changed

+9
-8
lines changed

3 files changed

+9
-8
lines changed

requirements.in

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -30,3 +30,4 @@ notifications-utils @ git+https://github.com/alphagov/notifications-utils.git@11
3030
git+https://github.com/alphagov/gds_metrics_python.git@6f1840a57b6fb1ee40b7e84f2f18ec229de8aa72
3131

3232
sentry-sdk[flask,celery,sqlalchemy]~=1.45
33+
wheel>=0.46.2

requirements.txt

Lines changed: 4 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -50,7 +50,7 @@ click==8.3.1
5050
# click-plugins
5151
# click-repl
5252
# flask
53-
click-datetime==0.4.0
53+
click-datetime==0.2
5454
# via -r requirements.in
5555
click-didyoumean==0.3.1
5656
# via celery
@@ -159,6 +159,7 @@ packaging==26.0
159159
# gunicorn
160160
# kombu
161161
# marshmallow
162+
# wheel
162163
phonenumbers==9.0.25
163164
# via notifications-utils
164165
prometheus-client==0.24.1
@@ -261,5 +262,5 @@ webcolors==25.10.0
261262
# via jsonschema
262263
werkzeug==3.1.6
263264
# via flask
264-
wheel==0.44.0
265-
# via click-datetime
265+
wheel==0.46.3
266+
# via -r requirements.in

requirements_for_test.txt

Lines changed: 4 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -73,7 +73,7 @@ click==8.3.1
7373
# click-plugins
7474
# click-repl
7575
# flask
76-
click-datetime==0.4.0
76+
click-datetime==0.2
7777
# via -r requirements.txt
7878
click-didyoumean==0.3.1
7979
# via
@@ -237,6 +237,7 @@ packaging==26.0
237237
# kombu
238238
# marshmallow
239239
# pytest
240+
# wheel
240241
pathspec==1.0.4
241242
# via mypy
242243
phonenumbers==9.0.25
@@ -430,9 +431,7 @@ werkzeug==3.1.6
430431
# flask
431432
# moto
432433
# pytest-httpserver
433-
wheel==0.44.0
434-
# via
435-
# -r requirements.txt
436-
# click-datetime
434+
wheel==0.46.3
435+
# via -r requirements.txt
437436
xmltodict==1.0.4
438437
# via moto

0 commit comments

Comments
 (0)