Skip to content

NO-SNOW: pin pip<26 in dependency env to fix pip-tools stdlib_pkgs incompatibility - #2985

Merged
sfc-gh-fpawlowski merged 1 commit into
mainfrom
fix/dependency-check-pip26-compat
Aug 4, 2026
Merged

sfc-gh-fpawlowski merged 1 commit into
mainfrom
fix/dependency-check-pip26-compat

Conversation

@sfc-gh-fpawlowski

Copy link
Copy Markdown
Contributor

Summary

  • pip-tools 7.6.0 imports pip._internal.utils.compat.stdlib_pkgs which was removed in pip 26.0.
  • GitHub Actions runners recently upgraded to pip 26.2, causing [testenv:dependency] to fail with ImportError: cannot import name 'stdlib_pkgs'.
  • Fix: pin pip<26 in the [testenv:dependency] deps list so pip-tools always runs against a compatible pip version.

Test plan

  • Verify dependency tox env passes in CI after this change
  • Confirm no other tox envs are affected (only [testenv:dependency] has skip_install = True with pip-tools)

🤖 Generated with Claude Code

…compatibility

pip-tools 7.6.0 imports pip._internal.utils.compat.stdlib_pkgs which was
removed in pip 26.0. Pin pip<26 in the [testenv:dependency] env to keep
pip-tools working until pip-tools is updated to not use pip internals.

Observed failing on pip==26.2 with:
  ImportError: cannot import name 'stdlib_pkgs' from
  'pip._internal.utils.compat'

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
@sfc-gh-fpawlowski
sfc-gh-fpawlowski requested a review from a team as a code owner August 3, 2026 19:08

@snowflake-security-bot snowflake-security-bot Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Snowflake Security Review

Security grade: A — Passed ✅

This PR was classified as LOW risk by the automated pre-screen.

@github-actions github-actions Bot locked and limited conversation to collaborators Aug 3, 2026
@sfc-gh-fpawlowski sfc-gh-fpawlowski added the NO-CHANGELOG-UPDATES This pull request does not need to update CHANGELOG.md label Aug 4, 2026
@sfc-gh-fpawlowski
sfc-gh-fpawlowski enabled auto-merge (squash) August 4, 2026 06:32
@sfc-gh-fpawlowski
sfc-gh-fpawlowski merged commit 3c64408 into main Aug 4, 2026
102 of 106 checks passed
@sfc-gh-fpawlowski
sfc-gh-fpawlowski deleted the fix/dependency-check-pip26-compat branch August 4, 2026 07:54
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

NO-CHANGELOG-UPDATES This pull request does not need to update CHANGELOG.md

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants