Skip to content

setup-poetry: Lock Poetry dependencies#84

Open
bkeryan wants to merge 5 commits into
mainfrom
users/bkeryan/lock-poetry-deps
Open

setup-poetry: Lock Poetry dependencies#84
bkeryan wants to merge 5 commits into
mainfrom
users/bkeryan/lock-poetry-deps

Conversation

@bkeryan

@bkeryan bkeryan commented Jun 7, 2026

Copy link
Copy Markdown
Collaborator

What does this Pull Request accomplish?

Use a requirements.txt file to install Poetry with locked dependencies.

Why should this Pull Request be merged?

Closes #19

What testing has been done?

PR build

@bkeryan bkeryan requested a review from mshafer-NI as a code owner June 7, 2026 23:48
@bkeryan bkeryan changed the title setup-poetry: Lock Poetry deps setup-poetry: Lock Poetry dependencies Jun 7, 2026
package-mode = false

[tool.poetry.dependencies]
# Recent versions of cryptography do not support 3.9.0 or 3.9.1.

Copy link
Copy Markdown
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

With python = "^3.9", Poetry chose to use cryptography 43.0.3 (Oct 2024) for Python <3.14 and PyPy and cryptography 48.0.0 (May 2026) for Python 3.14.

Comment thread setup-poetry/action.yml
description: >
A Boolean specifying whether to use a lock file when installing Poetry and
its dependencies.
default: true

Copy link
Copy Markdown
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

TODO: test setting use-lock-file: false

Comment thread setup-poetry/action.yml
exit 1
fi
if [ x"$USE_LOCK_FILE" = x"true" -a ! -d "$GITHUB_ACTION_PATH/versions/$POETRY_VERSION" ]; then
echo "::error title=Setup Poetry Error::Lock file does not exist for version: '$POETRY_VERSION'"

Copy link
Copy Markdown
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

TODO: test this error case

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Install Poetry using locked dependencies

1 participant