Labels: ci, packaging, priority:medium
File: uv.lock (580 KB, committed), pytest.yml:39 (pip install -e), cache keyed on unpinned pyproject.toml
Description. Every install workflow uses pip install -e (not uv sync --locked); deps are almost all floors (torch>=2.1.0, transformers>=4.40,<5.4). The committed lockfile is never used.
Why it matters. CI resolves fresh versions on cache miss, so a breaking upstream release turns CI red with no code change, and green CI doesn't reproduce what a customer's pip install gets. The lockfile that would prevent this is dead weight drifting from reality.
Tasks.
Dedup. Not covered.
Labels:
ci,packaging,priority:mediumFile:
uv.lock(580 KB, committed),pytest.yml:39(pip install -e), cache keyed on unpinnedpyproject.tomlDescription. Every install workflow uses
pip install -e(notuv sync --locked); deps are almost all floors (torch>=2.1.0,transformers>=4.40,<5.4). The committed lockfile is never used.Why it matters. CI resolves fresh versions on cache miss, so a breaking upstream release turns CI red with no code change, and green CI doesn't reproduce what a customer's
pip installgets. The lockfile that would prevent this is dead weight drifting from reality.Tasks.
uv.lockin CI (uv sync --locked) + add a lock-freshness check, or delete the unused lockfile. Pick one source of truth.Dedup. Not covered.