Skip to content

Refresh onfido-python after onfido-openapi-spec update (6d0dfd9) - #118

Closed
devops-automation-onfido wants to merge 1 commit into
masterfrom
release-upgrade
Closed

Refresh onfido-python after onfido-openapi-spec update (6d0dfd9)#118
devops-automation-onfido wants to merge 1 commit into
masterfrom
release-upgrade

Conversation

@devops-automation-onfido

@devops-automation-onfido devops-automation-onfido commented Jul 24, 2026

Copy link
Copy Markdown
Collaborator

Auto-generated PR with changes till commit onfido/onfido-openapi-spec@6d0dfd9 (included)

Additional changes:

  • None

@kigawas

kigawas commented Aug 17, 2026

Copy link
Copy Markdown

Why virtualenv is a dependency but not a dev-dependency?

@devops-automation-onfido devops-automation-onfido changed the title Refresh onfido-python after onfido-openapi-spec update (46cd3c9) Refresh onfido-python after onfido-openapi-spec update (7efb60c) Aug 24, 2026
@devops-automation-onfido devops-automation-onfido changed the title Refresh onfido-python after onfido-openapi-spec update (7efb60c) Refresh onfido-python after onfido-openapi-spec update (6d0dfd9) Aug 24, 2026
@dvacca-onfido

Copy link
Copy Markdown
Contributor

Why virtualenv is a dependency but not a dev-dependency?

@kigawas Good catch, thanks for flagging this! virtualenv was added to pin a minimum version addressing a known vulnerability (it's a transitive dependency of tox, which we use for testing). However, you're right — it shouldn't be a runtime dependency of this library. We're removing it entirely since it's already pulled in transitively by our dev tooling (see onfido/onfido-openapi-spec#229). Fix coming in the next release.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants