Update zarr_checksum dependency to ~= 0.4.0

[jwodder]

No description provided.

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Comparison is base (523f758) 88.50% compared to head (766ef11) 88.59%.

Additional details and impacted files

@@            Coverage Diff             @@
##           master    #1393      +/-   ##
==========================================
+ Coverage   88.50%   88.59%   +0.08%     
==========================================
  Files          77       77              
  Lines       10492    10492              
==========================================
+ Hits         9286     9295       +9     
+ Misses       1206     1197       -9     

Flag	Coverage Δ
unittests	88.59% <ø> (+0.08%)	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[yarikoptic]

why specifically that new version if no changes to the code which uses it?

[jwodder]

@yarikoptic It removes some heavy dependencies from dandi-cli's dependency tree.

[yarikoptic]

I get that, but

• for new user -- it would already install newer lighter version
• for existing user -- it would do nothing besides updating zarr_checksum -- those dependencies are already installed and would not even be removed.

so what is the point?

[jwodder]

@yarikoptic

for new user -- it would already install newer lighter version

No, it wouldn't. dandi-cli's current master commit depends on zarr_checksum ~= 0.3.2, which has an upper bound of < 0.4.0.

Another point in favor of this change: zarr_checksum's dependency on boto3 has twice caused dependency issues with backups2datalad and its aiobotocore dependency. In order to permanently avoid this problem, zarr_checksum must be updated to 0.4.0+ for both backups2datalad and dandi (the latter being a dependency of backups2datalad).

[yarikoptic]

No, it wouldn't. dandi-cli's current master commit depends on zarr_checksum ~= 0.3.2, which has an upper bound of < 0.4.0.

for that I guess we would have needed zarr_checksum >= 0.3.2,<0.5 or alike... but ok, if you insist and think that it would make a world a better place for us -- let's proceed.

[github-actions]

🚀 PR was released in 0.59.1 🚀