How to selectively upgrade dependencies?

[brettdh]

Per @techalchemy 's comment on this (now locked) issue: pypa/pipenv#966 (comment)

To those who have been waiting patiently for a fix, please do try the resolver mentioned above— we are eager to see if it meets your needs. It implements proper backtracking and resolution and shouldn’t handle this upgrade strategy

I would love to help test this out, but it's not clear to me from the docs here how to test the workflow where I only want to upgrade dependencies (and their dependencies) that are necessary to the current operation (e.g. upgrading a top-level dependency). Does passa also support --selective-upgrade or --keep-outdated, or is there some other way of achieving similar behavior?

[uranusjr]

I believe it already does it by default. PinReuseProvider (used by the upgrade command by default) tries to reuse the versions specified in Pipfile.lock, and does not change them if possible. Try it out and see if it works as you’d expect (I can’t be 100% sure whether my understanding of this issue fits yours), and report anything that seems wrong to you.

[brettdh]

Interesting. 🤔

That's great to hear, but I was sort of expecting that a resolver used by pipenv would have to also support the upgrade-everything workflow, per discussions on that same issue.

I imagine, though, since you mentioned "by default" a couple times, there's a way to override this to eagerly upgrade everything?

[uranusjr]

Yeah there are currently two “strategies” you can choose from the command line, “eager” and “only-if-needed”.

https://github.com/sarugaku/passa/blob/master/src/passa/cli/upgrade.py#L25

If you don’t choose one, only-if-needed is used (hence “by default”). The difference if that say if package A depends on B, passa upgrade A only upgrades A (unless the new version requires an upgrade of B), while passa upgrade A --strategy=eager also tries to upgrade B.

(The idea is borrowed from pip install --upgrade; it has a similar flag.)

[uranusjr]

The reminds me, there really needs some write up on how the whole system is designed…