Skip to content

Conversation

goneri
Copy link

@goneri goneri commented Aug 20, 2025

Having a strong dependency with one specific binary release is
problematical because:

  • it won't work on Linux a soon as the platform is not amd64, we support
    4 architectures
  • if the dependency has a critical issue (e.g CVE), we need to also
    publish a release.

Overall, we should relax all our dependencies.

Having a strong dependency with one specific binary release is
problematical because:
- it won't work on Linux a soon as the platform is not amd64, we support
  4 architectures
- if the dependency has a critical issue (e.g CVE), we need to also
  publish a release.

Overall, we should relax all our dependencies.
@goneri
Copy link
Author

goneri commented Aug 20, 2025

We've a similar problem with psycopg2, we should not depend on psycopg2-binary by default.

@goneri
Copy link
Author

goneri commented Aug 20, 2025

Also, is there a reason why we don't pull psycopg3 like for ansible-ai-connect-service?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant