[BUG] New `boxsdk` (v10) contains breaking changes

[jgsogo]

Describe the bug

We consume boxsdk without an upper bound, they have just releases a new v10 version with breaking changes (changelog). We need an upper bound.

To Reproduce

Just try to install this detect-secrets package

Expected behavior

It works

Screenshots

  File "/root/.cache/pre-commit/repou9angn7y/py_env-python3.11/lib/python3.11/site-packages/detect_secrets/plugins/box.py", line 1, in <module>
    from boxsdk import Client
ModuleNotFoundError: No module named 'boxsdk'

Impact

high

[ocofaigh]

I have verified that the following workaround works for people using pre-commit hook:

- repo: https://github.com/ibm/detect-secrets
  rev: 0.13.1+ibm.62.dss
  hooks:
    - id: detect-secrets
      additional_dependencies: [boxsdk<4] 

[fraz3alpha]

Thanks for that workaround @ocofaigh , we've done that workaround on multiple repositories to unblock them, but there are many more to go...

@jgsogo / @rossgrady are all the bits fixed that should should be OK now? are there plans to release a new tag of detect-secrets with this change in so that this workaround doesn't need to be in every repository?

0.13.1+ibm.62.dss is the latest tag from December 2023, but there haven't been any commits until sorting this out so there wasn't any new code to release - so I think most people are waiting on a bump in version, rather than having to do it twice - first with the workaround, and then to remove the workaround and increase the version.