snazy opened a new issue, #1221:
URL: https://github.com/apache/polaris/issues/1221

   ### Describe the bug
   
   The 
[./polaris](https://github.com/apache/polaris/blob/0b34812e27f0fb263ce35ae00ef4cec5ec410a89/polaris)
 script sets up the Python venv if the `./polaris-venv` directory does not 
exist, but never updates the dependencies.
   
   This leaves client with outdated libraries and can lead to 
incompatibilities, but more importantly never pulls security fixes in the 
dependencies.
   
   This may also break dev-workflows, assuming that the declared dependencies 
are being used.
   
   There should be a mechanism to at least regularly update the venv 
dependencies.
   
   ### To Reproduce
   
   _No response_
   
   ### Actual Behavior
   
   _No response_
   
   ### Expected Behavior
   
   _No response_
   
   ### Additional context
   
   _No response_
   
   ### System information
   
   _No response_


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to