Pin click version

[valentinoli]

Click 8.3.0 includes breaking changes causing build failures in projects using Hatch. This commit pins the version to a version known to work with the current Hatch release.

#2050

[valentinoli]

@ofek

This is currently causing all pipelines using Hatch to break

Can we be more strict with the version specifier?

This is not the first time it has happened. Also happened to my team when uv published a breaking change in v0.7.0

So perhaps consider pinning dependencies of Hatch strictly

[valentinoli]

Another case in point: #2052

[mbercx]

To motivate this PR even more, note that the click developers don't strictly follow SemVer:

https://palletsprojects.com/versions#not-semver

You could also consider click=8.2.2 click~=8.2.1, since they still respect patch versions.

EDIT: Seems version 8.2.2 was yanked: https://pypi.org/project/click/8.2.2/

[Simon-Bru]

Would love to benefit from this too ! @ofek

[jorng]

@ofek I'm sorry to add onto the pings, but this is breaking a huge number of projects out there using Hatch, and is a very straightforward change. Can we get this merged as quickly as you are able? We need a new version released to continue using Hatch.

[ofek]

#2050 (comment)

[ofek]

Thanks for the assist! We went with a slightly different fix in order to avoid pinning. https://github.com/pypa/hatch/releases/tag/hatch-v1.14.2

[valentinoli]

@ofek Thank you. I am interested in understanding what you did to fix it. Could you elaborate?

[ofek]

#2053