It seems the intent behind this is misinformed: --locked will fail if we don't have the latest up-to-date versions in the lockfile, in regard of the versions provided in the pyproject.toml.
This can make entirely legit builds, with a proper lockfile, fail because the pyproject.toml is updated to latest versions and the lockfile is not.
I guess we want to use --frozen here and not --locked. Right ?
python-buildpack/lib/uv.sh
Line 144 in 8cd6378
It seems the intent behind this is misinformed:
--lockedwill fail if we don't have the latest up-to-date versions in the lockfile, in regard of the versions provided in the pyproject.toml.This can make entirely legit builds, with a proper lockfile, fail because the pyproject.toml is updated to latest versions and the lockfile is not.
I guess we want to use
--frozenhere and not--locked. Right ?