fix: further loosened dependency definitions

see #44 updated some locked dependencies to latest versions Signed-off-by: Jan Kowalleck <[email protected]>
CycloneDX · Dec 9, 2021 · 8bef6ec · 8bef6ec
1 parent d8c7ee2
commit 8bef6ec
Show file tree

Hide file tree

Showing 2 changed files with 26 additions and 23 deletions.
diff --git a/poetry.lock b/poetry.lock
diff --git a/pyproject.toml b/pyproject.toml
@@ -41,15 +41,18 @@ keywords = [
 "Bug Tracker" = "https://github.com/CycloneDX/cyclonedx-python-lib/issues"
 
 [tool.poetry.dependencies]
-# keep `requirements.lowest.txt` file in sync
+# ATTENTION: keep `requirements.lowest.txt` file in sync
 python = "^3.6"
-packageurl-python = ">= 0.3.0, < 0.10"
-requirements_parser = "^0.2.0"
-setuptools = ">=47.0.0, < 59.3"
-importlib-metadata = { version = ">= 3.4.0 < 4.9", python = "~3.6 | ~3.7" }
+packageurl-python = ">= 0.3"
+requirements_parser = ">= 0.2"
+setuptools = ">= 47.0.0"
+importlib-metadata = { version = ">= 3.4", python = "< 3.8" }
 toml = "^0.10.0"
-typing-extensions = { version = "^3.10.0", python = "~3.6 | ~3.7" }
-types-setuptools = ">= 57.0.0, < 57.5"
+# `typing-extensions` need to stay in sync with major version of `python`
+typing-extensions = { version = "^3.10", python = "< 3.8" }
+# `types-setuptools` need to stay in sync with version of `setuptools` - but 47 was not typed...
+types-setuptools = ">= 57.0.0"
+# `types-toml` need to stay in sync with version of `toml`
 types-toml = "^0.10.0"
 
 [tool.poetry.dev-dependencies]