Log file Viewer

[15:34:03] <agronholm> can someone recommend a dependency management tool for use in Python apps deployed via Docker?

[15:34:22] <agronholm> I've tried pipenv and poetry but both tools have major flaws which make them unusable

[15:35:00] <agronholm> in particular both have difficulties with prerelease versions and installation from VCS

[15:36:08] <agronholm> pipenv is "all or nothing" regards to prerelease versions, whereas pip handles them gracefully

[15:36:24] <agronholm> and with poetry I have not been able to figure out how to install something from a particular branch

[16:47:22] <bolovanos> hithere

[16:50:06] <bolovanos> I would like to upgrade all installed packages using -U option refferend in man "... Upgrade all packages to the newes". "pip2 install --upgrade" results in "You must give at least one requirement to install (see "pip help install")"

[16:50:10] <bolovanos> What am I doing wrong?

[16:51:57] <ngoldbaum> that only updates one pacakge

[16:51:58] <ngoldbaum> you want https://stackoverflow.com/questions/2720014/upgrading-all-packages-with-pip

[16:59:49] <bolovanos> ngoldbaum, that is exactly first place I have been looking in to. But I thought that something happened and upgrade-all (https://github.com/pypa/pip/issues/59) have been implemented. Which option stack would you suggest as the most reliable?

[17:02:35] <ngoldbaum> bolovanos: see https://github.com/pypa/pip/issues/4551 for the current tracking issue for that

[17:02:49] <ngoldbaum> dunno offhand, i don't normally try to update my entire environment

[17:08:56] <bolovanos> ngoldbaum, ok, thank you!

[17:16:26] <utek> agronholm: have you tries pip-tools? And freezing requirements?

[17:16:31] <utek> s/tries/tried/

[17:30:04] <agronholm> utek: I did years before, need to revisit that

[17:31:56] <di_codes> agronholm: that's what we use for warehouse, it works quite nicely IMO

[17:52:11] <agronholm> yeah, looking at pip-compile, it looks just like what I need

[20:14:28] <dstufft> agronholm: pairing pip-compile with dependabot is great too

[20:15:18] <agronholm> dstufft: only if the project is hosted on github

[20:15:23] <agronholm> (ours is not)