potiuk commented on PR #40073:
URL: https://github.com/apache/airflow/pull/40073#issuecomment-2151466854
> That's why the --resolution lowest flag on uv is appealing btw, it'll let
us identify when we've missed bumping the min on a dep :) (though I'm not sure
if we are doing that yet or not, can't remember as I haven't followed that
closely).
Precisely. We should not **just** bump the dependency with no reason. There
could be good reasons which is something we know (like avoiding a security
issue) but generally the `--lowest-direct` test should find and point out the
cases where we need to do the bump because some of our code (and we know it via
unit test) needs a feature or fix added in that version.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]