From 4a71a3df57b111da3b32998343c801b00fb4df63 Mon Sep 17 00:00:00 2001 From: Fernando Biagetti Date: Sat, 12 Sep 2026 11:45:33 -0300 Subject: [PATCH] fix(deps): drop platformdirs, which is never imported MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit platformdirs is declared as a runtime dependency in pyproject.toml and in the PEP 723 header of src/specify_cli/__init__.py, but nothing in the repository imports it — no static import in src/, tests/, scripts/, templates/, extensions/ or presets/, and no dynamic import either: $ grep -rn "import platformdirs\|platformdirs\." src tests scripts (no matches) Verified by removing it rather than by reading alone: after `uv sync --extra test` the interpreter has no platformdirs, and the CLI and the suite are unaffected — `specify --help`, `specify check` and `specify --version` all work, and pytest reports 8176 passed, 208 skipped, identical to main. Every user installing specify-cli currently pulls a package the CLI never touches. Regenerates .github/security-audit-requirements.txt with the documented command so the committed audit snapshot stays in sync. Co-Authored-By: Claude Opus 5 --- .github/security-audit-requirements.txt | 4 ---- pyproject.toml | 1 - src/specify_cli/__init__.py | 1 - 3 files changed, 6 deletions(-) diff --git a/.github/security-audit-requirements.txt b/.github/security-audit-requirements.txt index 7acbecd440..d0ef46e5f4 100644 --- a/.github/security-audit-requirements.txt +++ b/.github/security-audit-requirements.txt @@ -132,10 +132,6 @@ pathspec==1.1.1 \ --hash=sha256:17db5ecd524104a120e173814c90367a96a98d07c45b2e10c2f3919fff91bf5a \ --hash=sha256:a00ce642f577bf7f473932318056212bc4f8bfdf53128c78bbd5af0b9b20b189 # via specify-cli (pyproject.toml) -platformdirs==4.11.0 \ - --hash=sha256:0555d18370482847566ffabcaa53ad7c6c1c29f195989ae1ed634a05f76ea1e0 \ - --hash=sha256:360ccded2b7fce0af0ff80cc8f5942a1c5d99b0e856033acb030bfc634709e74 - # via specify-cli (pyproject.toml) pluggy==1.6.0 \ --hash=sha256:7dcc130b76258d33b90f61b658791dede3486c3e6bfb003ee5c9bfb396dd22f3 \ --hash=sha256:e920276dd6813095e9377c0bc5566d94c932c33b27a3e3945d8389c374dd4746 diff --git a/pyproject.toml b/pyproject.toml index b95c328146..46faf4fa92 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -8,7 +8,6 @@ dependencies = [ "typer>=0.24.0", "click>=8.2.1", "rich", - "platformdirs", "readchar", "pyyaml>=6.0", "packaging>=23.0", diff --git a/src/specify_cli/__init__.py b/src/specify_cli/__init__.py index eee6dce00b..208b8486f5 100644 --- a/src/specify_cli/__init__.py +++ b/src/specify_cli/__init__.py @@ -4,7 +4,6 @@ # dependencies = [ # "typer", # "rich", -# "platformdirs", # "readchar", # "json5", # "pyyaml",