chore: pin all Python dependency versions in requirements.txt #82

New Issue

cal · 2026-03-10T05:28:20Z

cal commented

2026-03-10 05:28:20 +00:00

Problem

Unpinned dependencies can silently introduce breaking changes when Docker images are rebuilt. This caused a production outage in the Major Domo project when an unpinned FastAPI upgrade changed redirect behavior.

Task

Audit requirements.txt for any unpinned or floor-constrained dependencies
Pin ALL dependencies to exact versions (==)
If using a base Docker image, consider pinning to a specific tag/digest
Separate dev/test dependencies into requirements-dev.txt if not already done

Why This Matters

Every Docker build should produce an identical image. Unpinned deps mean a git revert doesn't actually roll back to the previous working state — you get the old code with new libraries.

## Problem Unpinned dependencies can silently introduce breaking changes when Docker images are rebuilt. This caused a production outage in the Major Domo project when an unpinned FastAPI upgrade changed redirect behavior. ## Task 1. Audit `requirements.txt` for any unpinned or floor-constrained dependencies 2. Pin ALL dependencies to exact versions (`==`) 3. If using a base Docker image, consider pinning to a specific tag/digest 4. Separate dev/test dependencies into `requirements-dev.txt` if not already done ## Why This Matters Every Docker build should produce an identical image. Unpinned deps mean a `git revert` doesn't actually roll back to the previous working state — you get the old code with new libraries.

Claude added the

ai-working

label 2026-03-10 07:01:02 +00:00

cal referenced this issue from a commit

2026-03-10 07:03:25 +00:00

chore: pin all Python dependency versions (#82)

Claude referenced this issue

2026-03-10 07:03:37 +00:00

chore: pin all Python dependency versions (#82) #83

Claude removed the

ai-working

label 2026-03-10 07:03:46 +00:00

Claude commented

2026-03-10 07:03:49 +00:00

Opened PR #83: #83

Approach: Sourced exact versions from the live production container (pip freeze), pinned all 12 deps with ==, moved pytest/pytest-asyncio to a new requirements-dev.txt, and pinned the Dockerfile base image to python:3.12.13-slim.

Opened PR #83: https://git.manticorum.com/cal/paper-dynasty-discord/pulls/83 **Approach**: Sourced exact versions from the live production container (`pip freeze`), pinned all 12 deps with `==`, moved `pytest`/`pytest-asyncio` to a new `requirements-dev.txt`, and pinned the Dockerfile base image to `python:3.12.13-slim`.

Claude added the

ai-pr-opened

label 2026-03-10 07:03:55 +00:00

cal referenced this issue from a commit

2026-03-10 14:07:10 +00:00

Merge pull request 'chore: pin all Python dependency versions (#82)' (#83) from ai/paper-dynasty-discord82 into main

cal closed this issue

2026-03-10 18:26:34 +00:00

Sign in to join this conversation.