Re: python 3.7 problems

[Thomas Klausner <wiz%netbsd.org@localhost>]

On Tue, Oct 25, 2022 at 11:19:09AM +0000, nia wrote:
> On Tue, Oct 25, 2022 at 10:10:34AM +0200, Thomas Klausner wrote:
> > So a recent update of py-setuptools_scm introduced a cyclic dependency
> > for python 3.7 because it needs the importlib-metadata module, but
> > that needs py-setuptools_scm to build.
> > 
> > The missing dependency now leads to heavy fallout for python 3.7 modules, a sample:
> 
> My experiences fighting py-cryptography basically led me to
> believe we should be abstracting away the dependency handling
> for Python.
> 
> i.e. we should use versioned_dependencies.mk for everything.
> 
> Handling Python dependencies directly using DEPENDS has proven too
> error-prone - how many developers have managed to break the
> tree with incorrect python dependencies? I certainly have.
> 
> Wider use of versioned_dependencies.mk would easily allow us
> to substitute an older version of a specific Python library
> to work around upstreams breaking things.

Well, that is of course an option, to keep a version of
py-setuptools_scm around that doesn't depend on py-importlib-metadata
(or the other way round? whose "fault" is it?).

But I don't think it's worth our collective time to do this, since in
9 months 3.7 will be EOL anyway and we have 4 (soon 5) other python
versions in pkgsrc...
 Thomas