3 ms·
There is a misunderstanding. This is why I don't use the lock file to update dependencies in the first place. You have to use the requirements.txt for updates.
by nurettin 4y ago
There is a misunderstanding.
This is why I don't use the lock file to update dependencies in the first place. You have to use the requirements.txt for updates. The lock is for deploying, or initializing to last stable revision.
requirements.txt also ensures that you only install what you need.
- 323 4y agoBut pip -U will only update first level dependencies (the ones directly listed in requirements.txt). It will not update secondary dependencies. This is why every 3 months or so I completely delete the venv and recreate it.
- nurettin 4y agoI see, yes unfortunately even if we lock the requirements, people just yank versions or update them in place. It all feels a little bit finicky pardon the fun.