packagedcode: replace unmaintained toml with tomllib/tomli

[gotmax23]

toml has been unmaintained for years and was superseded by tomli on PyPI which was eventually added to the stdlib as tomllib in Python 3.11.

Tasks

• Reviewed contribution guidelines
• PR is descriptively titled 📑 and links the original issue above 🔗
• Tests pass -- look for a green checkbox ✔️ a few minutes after opening your PR
  Run tests locally to check for errors.
• Commits are in uniquely-named feature branch and has no merge conflicts 📁
• Updated documentation pages (if applicable)
• Updated CHANGELOG.rst (if applicable)

[AyanSinhaMahapatra]

@gotmax23 Thanks++ for bringing this up and adding a PR.

Everything looks good to me, just one update required:

• Also update the requirements file similarly: https://github.com/aboutcode-org/scancode-toolkit/blob/develop/requirements.txt#L72, this is used for release archives and local development installations.

[gotmax23]

Also update the requirements file similarly: https://github.com/aboutcode-org/scancode-toolkit/blob/develop/requirements.txt#L72, this is used for release archives and local development installations.

Is there a command to update them? Usually, they'd be be generated by pip-compile or in some other standardized way.

[xsuchy]

I will link here the Fedora Change page that contains more info about deprecation of toml and availability of tomli in older systems https://fedoraproject.org/wiki/Changes/DeprecatePythonToml

[xsuchy]

+1

[AyanSinhaMahapatra]

Thanks++ @gotmax23 @xsuchy , this is merged with some minor updates at #4594

Is there a command to update them? Usually, they'd be be generated by pip-compile or in some other standardized way.

You can run https://github.com/aboutcode-org/scancode-toolkit/blob/develop/etc/scripts/gen_requirements.py to update a requirements file (from a vritualenv, after doing a configure and pip install --upgrade-strategy eager --force-reinstall --upgrade -e . to update all deps or specifically update some dependencies in the virtualenv)

Note that we also have to use https://github.com/aboutcode-org/scancode-toolkit/blob/develop/etc/scripts/fetch_thirdparty.py and update https://github.com/aboutcode-org/thirdparty-packages before we release so we have the wheels/sources and .ABOUT files used to create the release archive apps.