extremal-python-dependencies
A utility for installing extremal versions of dependencies for more robust testing.
Install extremal versions of package dependencies for more robust continuous integration testing, given a package that specifies its dependencies in a pyproject.toml file.
For instance, one might use this utility to install the minimum supported version of each dependency before a CI run. Ensuring all tests then pass adds confidence that the code is indeed compatible with the full range of package versions it claims to be compatible with, helping to prevent users from encountering broken installs.
Another way to use this tool is to install development versions of certain packages.
This utility works with dependencies specified in a pyproject.toml file. It modifies pyproject.toml, either by sending the transformed version to stdout (the default) or by modifying in place (which may be useful in CI scripts).
How to use
The following snippet modifies pyproject.toml in place to test with the minimum supported version of each direct dependency, under the minimum supported tox version (as specified by minversion in tox.ini).
pip install "tox==$(extremal-python-dependencies get-tox-minversion)"
extremal-python-dependencies pin-dependencies-to-minimum --inplace
tox -epy
The following snippet modifies pyproject.toml in place to test with the development version of one or more dependencies:
extremal-python-dependencies pin-dependencies \
"qiskit @ git+https://github.com/Qiskit/qiskit.git" \
"qiskit-ibm-runtime @ git+https://github.com/Qiskit/qiskit-ibm-runtime.git" \
--inplace
tox -epy
Each of the above patterns can be used in a CI script.
Caveats
- The minimum versions of all optional dependencies installed simultaneously must be compatible with each other.
- This tool does not set the minimum supported version of transitive dependencies.
Similar tools
- requirements-builder: builds requirements from a
setup.pyfile instead of apyproject.tomlfile - uv's
--resolutionstrategies:lowest-directinstalls the lowest compatible versions of direct dependencies (similar to thepin-dependenciespattern above), whilelowestextends this to transitive dependencies as well — addressing a caveat of this tool. Ifextremal-python-dependenciesdoes not meet your needs,uvmay.
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file extremal_python_dependencies-1.0.0.tar.gz.
File metadata
- Download URL: extremal_python_dependencies-1.0.0.tar.gz
- Upload date:
- Size: 14.5 kB
- Tags: Source
- Uploaded using Trusted Publishing? Yes
- Uploaded via:
twine/6.1.0 CPython/3.13.12
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
c22334908e8707ef9b7e75b528c4eacc1c890417dc32d14b7b0265415b227df4
|
|
| MD5 |
7a54d19b82e499d031252dc627d42284
|
|
| BLAKE2b-256 |
26bc3a9c92a3ca9d589e5fee5d30de901a9b57c95bfaee4a5b2f201ca794c018
|
Provenance
The following attestation bundles were made for extremal_python_dependencies-1.0.0.tar.gz:
Publisher:
release.yml on IBM/extremal-python-dependencies
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
extremal_python_dependencies-1.0.0.tar.gz -
Subject digest:
c22334908e8707ef9b7e75b528c4eacc1c890417dc32d14b7b0265415b227df4 - Sigstore transparency entry: 2130613555
- Sigstore integration time:
-
Permalink:
IBM/extremal-python-dependencies@ecc84d33bb0650fee824f9a0fa807fcb72e4f479 -
Branch / Tag:
refs/tags/1.0.0 - Owner: https://github.com/IBM
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
release.yml@ecc84d33bb0650fee824f9a0fa807fcb72e4f479 -
Trigger Event:
push
-
Statement type:
File details
Details for the file extremal_python_dependencies-1.0.0-py3-none-any.whl.
File metadata
- Download URL: extremal_python_dependencies-1.0.0-py3-none-any.whl
- Upload date:
- Size: 13.6 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? Yes
- Uploaded via:
twine/6.1.0 CPython/3.13.12
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
cf2db865ea0590711026620efac15dd8c40408463eb542ed3f316a2c6024b25b
|
|
| MD5 |
52e21161196d5bf2fdb40d89c3d23088
|
|
| BLAKE2b-256 |
08b9956ea28d98b5405b0619f23e297461ec657080f1209c0290cac4cb1dafce
|
Provenance
The following attestation bundles were made for extremal_python_dependencies-1.0.0-py3-none-any.whl:
Publisher:
release.yml on IBM/extremal-python-dependencies
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
extremal_python_dependencies-1.0.0-py3-none-any.whl -
Subject digest:
cf2db865ea0590711026620efac15dd8c40408463eb542ed3f316a2c6024b25b - Sigstore transparency entry: 2130613639
- Sigstore integration time:
-
Permalink:
IBM/extremal-python-dependencies@ecc84d33bb0650fee824f9a0fa807fcb72e4f479 -
Branch / Tag:
refs/tags/1.0.0 - Owner: https://github.com/IBM
-
Access:
public
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
release.yml@ecc84d33bb0650fee824f9a0fa807fcb72e4f479 -
Trigger Event:
push
-
Statement type:
