Un-pin typeguard

[dhirschfeld]

diffrax/pyproject.toml

Line 26 in 80d1f34

dependencies = ["jax>=0.4.23", "jaxtyping>=0.2.24", "typing_extensions>=4.5.0", "typeguard==2.13.3", "equinox>=0.11.2", "lineax>=0.0.5", "optimistix>=0.0.7"]

Why is typeguard pinned to an exact version, especially one that is so old?

It's generally considered very bad packaging practice to pin to exact versions as it's ~never required and prevents getting even security patches without publishing a new release.

Also, it's ancient and won't be getting any updates - current HEAD is 4.2.1:

Originally posted by @dhirschfeld in #364 (comment)

[dhirschfeld]

• https://github.com/agronholm/typeguard
• https://pypi.org/project/typeguard/#history

[patrick-kidger]

This is intentional. You'll notice jaxtyping is also pinned to the same version.

See threads like patrick-kidger/jaxtyping#124 (comment) and agronholm/typeguard#353. The quick summary is that later versions of typeguard seem to do things that are incompatible with jaxtyping etc. FWIW typeguard v2.13.3 seems to have worked robustly in all use-cases I've had for it.

[dhirschfeld]

Thanks for the explanation! And the references ❤️

Hopefully the issue can eventually be resolved upstream...