{"action":"created","issue":{"url":"https://api.github.com/repos/pypa/pip/issues/3134","labels_url":"https://api.github.com/repos/pypa/pip/issues/3134/labels{/name}","comments_url":"https://api.github.com/repos/pypa/pip/issues/3134/comments","events_url":"https://api.github.com/repos/pypa/pip/issues/3134/events","html_url":"https://github.com/pypa/pip/issues/3134","id":107999711,"number":3134,"title":"Cascading dependency resolution in boto3","user":{"login":"theherk","id":3605078,"avatar_url":"https://avatars.githubusercontent.com/u/3605078?v=3","gravatar_id":"","url":"https://api.github.com/users/theherk","html_url":"https://github.com/theherk","followers_url":"https://api.github.com/users/theherk/followers","following_url":"https://api.github.com/users/theherk/following{/other_user}","gists_url":"https://api.github.com/users/theherk/gists{/gist_id}","starred_url":"https://api.github.com/users/theherk/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/theherk/subscriptions","organizations_url":"https://api.github.com/users/theherk/orgs","repos_url":"https://api.github.com/users/theherk/repos","events_url":"https://api.github.com/users/theherk/events{/privacy}","received_events_url":"https://api.github.com/users/theherk/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-09-23T20:28:06Z","updated_at":"2015-09-23T20:38:43Z","closed_at":"2015-09-23T20:38:43Z","body":"I'm not sure how the dependency resolution is supposed to work in pip, but I think I have found a problem.\r\n\r\nI am referencing this issue: https://github.com/boto/boto3/issues/270\r\n\r\nAs of 22 Sep jmespath was bumped to version 0.8.0 from 0.7.1. This is causing a problem. boto3 requires `'jmespath>=0.6.2,<1.0.0'`, so it installs the latest version (0.8.0). It also requires botocore, which requires `'jmespath==0.7.1'`.\r\n\r\nWhen pip gets to this point, having already installed 0.8.0, it would be nice if it realized that the installed jmespath 0.8.0 does not satisfy this requirement, so reinstall with the required version, knowing it still satisfies boto3 requirement of `'jmespath>=0.6.2,<1.0.0'`. But it doesn't.\r\n\r\nIs this not possible?"},"comment":{"url":"https://api.github.com/repos/pypa/pip/issues/comments/142721637","html_url":"https://github.com/pypa/pip/issues/3134#issuecomment-142721637","issue_url":"https://api.github.com/repos/pypa/pip/issues/3134","id":142721637,"user":{"login":"qwcode","id":1052224,"avatar_url":"https://avatars.githubusercontent.com/u/1052224?v=3","gravatar_id":"","url":"https://api.github.com/users/qwcode","html_url":"https://github.com/qwcode","followers_url":"https://api.github.com/users/qwcode/followers","following_url":"https://api.github.com/users/qwcode/following{/other_user}","gists_url":"https://api.github.com/users/qwcode/gists{/gist_id}","starred_url":"https://api.github.com/users/qwcode/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/qwcode/subscriptions","organizations_url":"https://api.github.com/users/qwcode/orgs","repos_url":"https://api.github.com/users/qwcode/repos","events_url":"https://api.github.com/users/qwcode/events{/privacy}","received_events_url":"https://api.github.com/users/qwcode/received_events","type":"User","site_admin":false},"created_at":"2015-09-23T20:38:43Z","updated_at":"2015-09-23T20:38:43Z","body":"it's an open issue to handle this better  (#988 )\r\n\r\nin the mean time though, you can work around this yourself (once you realize what's going on) using requirements file overrides.  \r\n\r\nsee case #2 here:  https://pip.pypa.io/en/latest/user_guide/#requirements-files"}}