Purpose
Occasionally, a new pip release is incompatible with the latest existing pip-tools release.
The purpose of this package is to make it easy to ensure compatible installations of the two tools.
Approach
Once the incompatible pip release hits, there may be a span of time during which pip-tools is not yet ready for its own release.
Upon or in advance of these events, this package will be swiftly published to PyPI, and will depend on:
pip-tools>=LATEST
pip<INCOMPATIBLE
This package will have no real content of its own.
Once a pip-tools version is released that is compatible with the latest pip release, this package will be published again, depending on:
pip-tools>=LATEST
pip
The pip-tools package itself sets the minimum pip version.
Versioning
Since this has no real code to version, we will version each release with the corresponding latest version of pip-tools, for clarity.
If a new release is needed without a pip-tools version bump, an extra version segment will be added. This is done by setting version_overflow in vars.json. Otherwise, version_overflow should be the empty string.
Warnings
This package is currently maintained by me, some guy you don’t know.
I am not going to anything malicious with this package, but depending on it without verifying its content is a risk you should beware.
Usage
$ pip install -U pip pip-tools pip-and-pip-tools
Maintenance
If anyone wants to take over maintenance of the package, or adopt it into a trusted organization, please open an issue.
Keeping it updated:
Install and setup [mise](https://mise.jdx.dev/)
Edit vars.json, and a hook defined in mise.toml should rewrite pyproject.toml. vars.json has three keys:
bad_pip_version: INCOMPATIBLE in the Approach section above, it’s either a pip version string to block updating to (or beyond), or the empty string when the latest pip release is compatible with pip-tools
latest_pip_tools_version: LATEST in the Approach section above, it’s a pip-tools minimum version string
Leave version_overflow set to the empty string unless you need a second release against the same pip-tools version, in which case use an integer string like "1".
Commit, tag, and push, with the tag being the release version, for example:
$ git commit vars.json pyproject.toml -m "block pip 26.1"
$ git tag 7.6.0
$ git push && git push --tags
Metadata
Release files for pip_and_pip_tools 7.6.1
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | Actions |
|---|---|---|---|---|
| pip_and_pip_tools-7.6.1.tar.gz | 2.7 kB | Without provenance | Details for pip_and_pip_tools-7.6.1.tar.gz |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Actions Reset |
|---|---|---|---|---|
| pip_and_pip_tools-7.6.1-py2.py3-none-any.whl | Python 3, Python 2 | none | any | Details for pip_and_pip_tools-7.6.1-py2.py3-none-any.whl |
Total release size: 6.0 kB
Release files / pip_and_pip_tools-7.6.1.tar.gz
| Download URL | pip_and_pip_tools-7.6.1.tar.gz |
|---|---|
| Size | 2.7 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
8bbd55dd7bd3612bd23d66c33592cc01e772d98f98ae7d492893c8ec903a6cfc
|
|
BLAKE2b-256 checksum How to use checksums |
990a739ba254cb94c9dcef88baa94964b6d25a9c691acca0dea001e1b3c65b38
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
uv/0.12.3 {"installer":{"name":"uv","version":"0.12.3","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}
|
Release files / pip_and_pip_tools-7.6.1-py2.py3-none-any.whl
| Download URL | pip_and_pip_tools-7.6.1-py2.py3-none-any.whl |
|---|---|
| Size | 3.3 kB |
| Tags | Python 2 Python 3 |
|
SHA-256 checksum How to use checksums |
2fc1bc83eda59d06a15d6d0b69c3c873381f03ff2794269653c8788d343add22
|
|
BLAKE2b-256 checksum How to use checksums |
7a1f0c0febf89ea1417538d896f015e6bddcab05a4cd1a0fb3ae6df70bcc93ec
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
uv/0.12.3 {"installer":{"name":"uv","version":"0.12.3","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Ubuntu","version":"24.04","id":"noble","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":true}
|
Security for pip_and_pip_tools 7.6.1
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.