We do it like this: - configure the project with pyproject.toml, - use pip-compile (from the pip-tools package) to create a lockfile, - commit the lockfile i

We do it like this: - configure the project with pyproject.toml, - use pip-compile (from the pip-tools package) to create a lockfile, - commit the lockfile into git, - whenever we want to update the dependencies, do it through pip-compile again (if you give it an existing lockfile as output, it will keep what's in there and change only what's required). Since all our requirements are cross-platform and on PyPI, we can install the same env everywhere.