Re:Uv's killer feature is pulling in local dependencies
by imtringued on Monday January 13, 2025 @02:28AM
(#42680968)
>If I had a working environment and didn't want to risk breaking it right at the moment, I could just not upgrade it.
The point of a lockfile is to only upgrade when you want to upgrade. I hope you understand that.
Lockfiles aren't helpful to me here because the entire point is not to be dependent upon specific versions. I actively want to go through the cycle of updating my development environment on a whim, finding that everything breaks, doing the research etc. - because that's how I find out what my version requirements actually are, so that I can properly record them in my own project metadata. And if it turns out that my requirements are narrow, that's a cue to rethink how I use the dependency, so that I can broaden them.
If I had a working environment and didn't want to risk breaking it right at the moment, I could just not upgrade it.
If my requirements were complex enough to motivate explicitly testing against a matrix of dependency versions, using one of those "other tools", I'd do that instead. But neither way do I see any real gain, as a library developer, from a lock file.