[TINKERPOP-2810] gremlinpython aiohttp dependency requirement too strict

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Done
• Affects Version/s: 3.6.1
• Fix Version/s: 3.7.0
• Component/s: python
• Assignee: Stephen Mallette
• Reporter: Gunther Vogel
• Created: 07/Oct/22 00:35
• Updated: 08/May/23 20:17
• Resolved: 11/Nov/22 02:34

Description

Currently, the requirements specify aiohttp >= 3.8.0, <= 3.8.1, disallowing newer bugfix releases of aiohttp (current version is 3.8.3). Following the general semantic versioning rules, the upper bound should be <4.0.0 (disallow breaking changes).

The current requirements are the result of TINKERPOP-2668 which only had the goal of avoiding the bug contained in versions <= 3.7.4.

Fixing aiohttp at a non-current bugfix release step increases the maintenance effort needed to get an error-free overall library setup; in my case, gremlinpython is not even used directly, but just pulled in by awswrangler.