Incorrect version of click installed by commoncode causes exception on scan

[rogu-beta]

Description

New scancode-toolkit installations will fail to scan due to commoncode pulling an unsupported version of click: aboutcode-org/commoncode#85

How To Reproduce

python -m venv ./venv
.\venv\Scripts\activate
pip install scancode-toolkit==32.3.3
git clone https://github.com/ClickHouse/clickhouse-java.git
scancode --copyright --email --info --license --license-text --license-references --url --classify --processes 4 --max-depth 1 --json scancode-toolkit-scan.json .\clickhouse-java

System configuration

• Windows 10
• scancode-toolkit==32.3.3

[AyanSinhaMahapatra]

@ghsa-retrieval thanks a lot for the report, looking into this.

[AyanSinhaMahapatra]

@ghsa-retrieval fixed with #4427, pip install scancode-toolkit will work again after we have a new release.

[danielthieleog]

Meanwhile there is click 8.3.0 and it fails for me with:

Traceback (most recent call last):
  File "/app/venv-scancode/bin/scancode", line 3, in <module>
    from scancode.cli import scancode
  File "/app/venv-scancode/lib/python3.13/site-packages/scancode/cli.py", line 376, in <module>
    @click.option(
     ~~~~~~~~~~~~^
        "--check-version/--no-check-version",
        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
    ...<3 lines>...
        hidden=True,
        ^^^^^^^^^^^^
        help_group=cliutils.MISC_GROUP, sort_order=1000, cls=PluggableCommandLineOption)
        ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/app/venv-scancode/lib/python3.13/site-packages/click/decorators.py", line 374, in decorator
    _param_memo(f, cls(param_decls, **attrs))
                   ~~~^^^^^^^^^^^^^^^^^^^^^^
  File "/app/venv-scancode/lib/python3.13/site-packages/commoncode/cliutils.py", line 454, in __init__
    super(PluggableCommandLineOption, self).__init__(
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^
        param_decls=param_decls,
        ^^^^^^^^^^^^^^^^^^^^^^^^
    ...<11 lines>...
        **kwargs,
        ^^^^^^^^^
    )
    ^
  File "/app/venv-scancode/lib/python3.13/site-packages/click/core.py", line 2793, in __init__
    raise TypeError("Secondary flag is not valid for non-boolean flag.")
TypeError: Secondary flag is not valid for non-boolean flag.

[AyanSinhaMahapatra]

Should be fixed with https://github.com/aboutcode-org/scancode-toolkit/releases/tag/v32.5.0, thanks @rogu-beta