Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

vcs_dependency: set implicit source reference #449

Merged
merged 1 commit into from
Aug 24, 2022

Conversation

radoering
Copy link
Member

@radoering radoering commented Aug 24, 2022

Resolves: python-poetry/poetry#2325

When a vcs dependency without a reference (branch, tag or rev) in pyproject.toml is locked, source_reference is implicitly set to HEAD. Unfortunately, this has the effect that the requested dependency (without source_reference) and the locked dependency (with source_reference) are not considered equal. This in turn has the effect, that the latest version instead of the locked version is installed.

Downstream test: python-poetry/poetry#6228

  • Added tests for changed code.
  • Updated documentation for changed code.

@sonarcloud
Copy link

sonarcloud bot commented Aug 24, 2022

Kudos, SonarCloud Quality Gate passed!    Quality Gate passed

Bug A 0 Bugs
Vulnerability A 0 Vulnerabilities
Security Hotspot A 0 Security Hotspots
Code Smell A 0 Code Smells

No Coverage information No Coverage information
0.0% 0.0% Duplication

@finswimmer finswimmer merged commit be07024 into python-poetry:main Aug 24, 2022
radoering added a commit to python-poetry/poetry that referenced this pull request Aug 27, 2022
radoering added a commit to radoering/poetry that referenced this pull request Aug 27, 2022
radoering added a commit to python-poetry/poetry that referenced this pull request Aug 27, 2022
bostonrwalker pushed a commit to bostonrwalker/poetry-core that referenced this pull request Aug 29, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Git Dependencies do not respect lock file
2 participants