pyln-testing: move mnemonic dependency directly into pyln-testing
What changed, and why it matters
This commit is a routine packaging fix. It moves a Python library called 'mnemonic' from the main project's dependency list into the dependency list of a smaller sub-package (pyln-testing). This ensures that anyone installing only pyln-testing gets the missing library. There is no security vulnerability or code behavior change here.
No security action needed. Treat as a normal build/packaging maintenance commit.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The diff adjusts pyproject.toml and uv.lock to declare ‘mnemonic>=0.21’ as a direct dependency of contrib/pyln-testing instead of the top-level project. This resolves an installation-time dependency declaration issue when pyln-testing is installed standalone. No source code, cryptographic operations, network handling, or runtime logic is modified.
Changed components
contrib/pyln-testing/pyproject.tomlpyproject.tomluv.lockInspect captured patch +3 / −3
diff --git a/contrib/pyln-testing/pyproject.toml b/contrib/pyln-testing/pyproject.toml
index e942e5e0..ff2808d6 100644
--- a/contrib/pyln-testing/pyproject.toml
+++ b/contrib/pyln-testing/pyproject.toml
@@ -17,6 +17,7 @@ dependencies = [
"cheroot>=8,<=10",
"psutil>=5.9.0",
"requests>=2.32.0",
+ "mnemonic>=0.21",
]
[dependency-groups]
diff --git a/pyproject.toml b/pyproject.toml
index 76335c2e..b86ffef5 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -19,7 +19,6 @@ dependencies = [
"pytest-rerunfailures>=16.0.1",
"pyln-testing",
"pyln-proto",
- "mnemonic>=0.21",
]
package-mode = false
[dependency-groups]
diff --git a/uv.lock b/uv.lock
index 0c75e49f..18721b93 100644
--- a/uv.lock
+++ b/uv.lock
@@ -460,7 +460,6 @@ dependencies = [
{ name = "grpcio" },
{ name = "grpcio-tools" },
{ name = "mako" },
- { name = "mnemonic" },
{ name = "protobuf" },
{ name = "pyln-client" },
{ name = "pyln-grpc-proto" },
@@ -502,7 +501,6 @@ requires-dist = [
{ name = "grpcio", specifier = "==1.75.1" },
{ name = "grpcio-tools", specifier = "==1.75.1" },
{ name = "mako", specifier = ">=1.1.6" },
- { name = "mnemonic", specifier = ">=0.21" },
{ name = "protobuf", specifier = "==6.32.1" },
{ name = "pyln-client", editable = "contrib/pyln-client" },
{ name = "pyln-grpc-proto", editable = "contrib/pyln-grpc-proto" },
@@ -1719,6 +1717,7 @@ dependencies = [
{ name = "ephemeral-port-reserve" },
{ name = "flask" },
{ name = "jsonschema" },
+ { name = "mnemonic" },
{ name = "psutil" },
{ name = "psycopg2-binary" },
{ name = "pyln-client" },
@@ -1747,6 +1746,7 @@ requires-dist = [
{ name = "flask", specifier = ">=3.0.0" },
{ name = "grpcio", marker = "extra == 'grpc'", specifier = ">=1.75.0" },
{ name = "jsonschema", specifier = ">=4.4.0" },
+ { name = "mnemonic", specifier = ">=0.21" },
{ name = "psutil", specifier = ">=5.9.0" },
{ name = "psycopg2-binary", specifier = ">=2.9.0" },
{ name = "pyln-client", editable = "contrib/pyln-client" },
Why this scored 20/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.