From 78a492cb9f611a4fccaf6556c966b848885833ba Mon Sep 17 00:00:00 2001 From: Thomas Grainger Date: Tue, 27 Aug 2019 10:29:24 +0100 Subject: Add deprecation notice Fixes #50 --- README.rst | 15 +++++++++++++++ 1 file changed, 15 insertions(+) diff --git a/README.rst b/README.rst index 879e84a..99b00af 100644 --- a/README.rst +++ b/README.rst @@ -19,6 +19,21 @@ Setup scripts can use pytest-runner to add setup.py test support for pytest runner. +Deprecation Notice +================== + +pytest-runner depends on deprecated features of setuptools and relys on features that break security +mechanisms in pip. For example `setup_requires` and `tests_require` bypass `pip --require-hashes`. +See also https://github.com/pypa/setuptools/issues/1684. + +It is recommended that you: + +- Remove 'pytest-runner' from your 'setup_requires', preferably removing the `setup_requires` option. +- Remove 'pytest' and any other testing requirements from 'tests_require', preferably removing the `setup_requires` option. +- Use a requirement-test.txt file to hold test dependencies +- Invoke tests with ``pytest`` +- Another good option is to configure a ``tox.ini`` next to your ``setup.cfg`` https://tox.readthedocs.io/en/latest/ + Usage ===== -- cgit v1.2.1