Skip to content

Conversation

@steven-rescale
Copy link

@steven-rescale steven-rescale commented Oct 2, 2025

Fixes #102

The future package has a security vulnerability with no patched version. Since it's not doing anything here, it would be good to remove it from the dependencies and publish an updated version.

stapelberg added a commit to stapelberg/nixpkgs that referenced this pull request Dec 2, 2025
This dependency is unused in pyjwkest, but disabled in nixpkgs.
There is an upstream pull request pending to remove the dependency:
IdentityPython/pyjwkest#107

Before this change, these 2 Python packages failed to build:

nix build .#python313Packages.pyjwkest
nix build .#python313Packages.oic

With the following message:

error:
       … while evaluating the attribute 'drvPath'
         at /nix/store/65sypvf1f26fyi1vq6h25wg9z5gipgy8-source/lib/customisation.nix:429:7:
          428|     // {
          429|       drvPath =
             |       ^
          430|         assert condition;

       … while evaluating the attribute 'drvPath'
         at /nix/store/65sypvf1f26fyi1vq6h25wg9z5gipgy8-source/lib/customisation.nix:429:7:
          428|     // {
          429|       drvPath =
             |       ^
          430|         assert condition;

       … while calling the 'derivationStrict' builtin
         at <nix/derivation-internal.nix>:37:12:
           36|
           37|   strict = derivationStrict drvAttrs;
             |            ^
           38|

       (stack trace truncated; use '--show-trace' to show the full, detailed trace)

       error: future-1.0.0 not supported for interpreter python3.13

(I am using the oic package via the pretix-oidc plugin.)
nixpkgs-ci bot pushed a commit to NixOS/nixpkgs that referenced this pull request Dec 3, 2025
This dependency is unused in pyjwkest, but disabled in nixpkgs.
There is an upstream pull request pending to remove the dependency:
IdentityPython/pyjwkest#107

Before this change, these 2 Python packages failed to build:

nix build .#python313Packages.pyjwkest
nix build .#python313Packages.oic

With the following message:

error:
       … while evaluating the attribute 'drvPath'
         at /nix/store/65sypvf1f26fyi1vq6h25wg9z5gipgy8-source/lib/customisation.nix:429:7:
          428|     // {
          429|       drvPath =
             |       ^
          430|         assert condition;

       … while evaluating the attribute 'drvPath'
         at /nix/store/65sypvf1f26fyi1vq6h25wg9z5gipgy8-source/lib/customisation.nix:429:7:
          428|     // {
          429|       drvPath =
             |       ^
          430|         assert condition;

       … while calling the 'derivationStrict' builtin
         at <nix/derivation-internal.nix>:37:12:
           36|
           37|   strict = derivationStrict drvAttrs;
             |            ^
           38|

       (stack trace truncated; use '--show-trace' to show the full, detailed trace)

       error: future-1.0.0 not supported for interpreter python3.13

(I am using the oic package via the pretix-oidc plugin.)

(cherry picked from commit dbefe89)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

1 participant