-
-
Notifications
You must be signed in to change notification settings - Fork 1.9k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Allow pipenv option to consider all listed package sources when syncing the Pipfile.lock #5039
Conversation
@@ -1484,23 +1482,26 @@ def pip_install( | |||
ignore_hashes = False | |||
line = None | |||
# Try installing for each source in project.sources. | |||
search_all_sources = project.settings.get("install_search_all_sources", False) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Should we add public facing documentation for this option?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Yes -- I am going to add that once we decide if this should be what its name is.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I think the name install_search_all_sources
is OK. Once you write the docs for this, you can figure if this works or not.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Squeezing this into tonight's release -- let me know if there are any follow up tweaks you want to see to the docs or this PR and I can get them in a subsequent PR.
The issue
Maybe we can allow an option
install_search_all_sources
where its possible to still consider all sources eligible for install, since the hashes of the lock file were generated from index restricted packages and are pinned to specific versions and hashes in the lockfile.The fix
Fix #5041
The checklist
news/
directory to describe this fix with the extension.bugfix
,.feature
,.behavior
,.doc
..vendor
. or.trivial
(this will appear in the release changelog). Use semantic line breaks and name the file after the issue number or the PR #.