Bump levenshtein from 0.27.4 to 0.27.5 - #208
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps [levenshtein](https://github.com/rapidfuzz/Levenshtein) from 0.27.4 to 0.27.5. - [Release notes](https://github.com/rapidfuzz/Levenshtein/releases) - [Changelog](https://github.com/rapidfuzz/Levenshtein/blob/main/HISTORY.md) - [Commits](rapidfuzz/Levenshtein@v0.27.4...v0.27.5) --- updated-dependencies: - dependency-name: levenshtein dependency-version: 0.27.5 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]>
villelaitila
left a comment
There was a problem hiding this comment.
Reviewed the diff (a one-line bump of Levenshtein in requirements.txt, 0.27.4 → 0.27.5). The change itself is trivial, but it's worth flagging a compatibility issue it introduces:
This bump breaks pip install -r requirements.txt on Python 3.10, which the package still claims to support.
setup.cfgdeclarespython_requires = >=3.8and lists classifiers for Python 3.8 through 3.13.- Per PyPI metadata,
Levenshtein==0.27.4requires Python>=3.10(already inconsistent with the 3.8/3.9 classifiers, pre-existing before this PR). Levenshtein==0.27.5requires Python>=3.11— matching the upstream changelog's "removed support for Python 3.10" note. No wheels exist for 3.10 at this version, sopip install -r requirements.txt(used perCLAUDE.md's documented setup flow) will now fail outright on Python 3.10, not just 3.8/3.9.
Since install_requires in setup.cfg pins only Levenshtein>=0.25.1 (unbounded), this doesn't break the installable package's advertised support directly, but it does break the pinned dev/CI requirements file for anyone still on 3.10, and widens the gap between the advertised Python support matrix and what's actually installable.
Suggest either:
- Capping this bump (stay on
0.27.4or an intermediate version that still supports 3.10) if Python 3.10 support is still intended, or - Dropping 3.10 (and re-checking 3.8/3.9) from
setup.cfg'spython_requires/classifiers to match reality, and merging as-is.
No other logical issues in this diff — it's a single dependency version bump with no code changes.
Generated by Claude Code
Bumps levenshtein from 0.27.4 to 0.27.5.
Release notes
Sourced from levenshtein's releases.
Changelog
Sourced from levenshtein's changelog.
Commits
1efe2deBump the github-actions group across 1 directory with 2 updates3073c26add support for 3.15 and drop support for 3.101558944Avoid unnecessary len calls on iterables610846efix str len overflow when size_t is 32 bitDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)