News for hackers. Stuff that matters.
Re:Uv's killer feature is pulling in local dependencies by baq on Monday January 13, 2025 @03:59AM (#42681454)
IMHO the clear separation between lockfile and deps in other package managers was a direct consequence of people being confused about what requirements.txt should be. It can be both and could be for ages (pip freeze) but the defaults were not conductive to clear separation. If we started with lockfile.txt and dependencies.txt, the world may have looked different. Alas.
Re:Uv's killer feature is pulling in local dependencies by zahlman on Monday January 13, 2025 @12:37PM (#42686092)
The thing is, the distinction is purely semantic - Pip doesn't care. If you tell it all the exact versions of everything to install, it will still try to "solve" that - i.e., it will verify that what you've specified is mutually compatible, and check whether you left any dependencies out.