pipenv install -e . fails due to dependency resolution for packages installed through direct URL #3148
Comments
techalchemy
added
Type: Duplicate
|
This currently only works in the If you have a need to expand variables here, you will need to write an enhancement proposal and submit it as a PR against the |
I'm not sure what you mean: P.S. You are right, |
haizaar
changed the title
|
Did more tests - the issue is not related to credentials. Here is a simple reproduction: cd $(mktemp -d)
pipenv install https://github.com/haizaar/uberlogging/archive/v0.0.2.tar.gz
cat > setup.py << EOF
from setuptools import find_packages, setup
setup(
name="foo",
version="0.0.1",
packages=find_packages(),
install_requires=(
"uberlogging",
)
)
EOF
pipenv install -e .The last one fails with: |
|
@techalchemy Sorry if I'm nudging, but usually you are quite responsive and there is silence on this one. Have you had a chance to look at my last comment where I show that it's actually not related to credentials and affects any package installed by direct URL? I.e. |
|
Pip needs to know where to look to resolve dependencies—usually with |
|
Pip actually works, i.e. works just fine. I guess it's because If it works in |
|
Pip 18.1 is the first release to work this way. We vendor pip for dependency resolution and I only just updated it a week ago. Please test against master. This functionality has existed for like a month |
|
Tried with the latest master. Still breaks with similar error. Detailed error log/ # pip install git+https://github.com/pypa/pipenv.git Adding 8795c83 to Pipfile's [packages]…
Adding foo to Pipfile's [packages]… $ pipenv --supportPipenv version: Pipenv location: Python location: Python installations found:
PEP 508 Information: System environment variables:
Pipenv–specific environment variables: Debug–specific environment variables:
Contents of [[source]]
url = "https://pypi.org/simple"
verify_ssl = true
name = "pypi"
[packages]
"8795c83" = {file = "https://github.com/haizaar/uberlogging/archive/v0.0.2.tar.gz"}
foo = {editable = true, path = "."}
[dev-packages]
[requires]
python_version = "3.6"
Contents of {
"_meta": {
"hash": {
"sha256": "56e5ae563599827b1b2b1646113786b350c9aa72bfa4a3c16e7e7740b9368469"
},
"pipfile-spec": 6,
"requires": {
"python_version": "3.6"
},
"sources": [
{
"name": "pypi",
"url": "https://pypi.org/simple",
"verify_ssl": true
}
]
},
"default": {
"8795c83": {
"file": "https://github.com/haizaar/uberlogging/archive/v0.0.2.tar.gz"
}
},
"develop": {}
}
|
|
I guess I'm lucky to start with those URL install just after they released :) |
|
Can we reopen it in a meanwhile? |
|
Yes sorry :) I haven't actually sorted out how to hand this over to pip during resolution, but I need to get this sorted out before I cut the release |
|
I guess labels are off as well. |
techalchemy
added
Type: Bug 🐛
|
In looking this over, I think it may actually be due to a bug in |
|
I guess you meant Then trying to |
- Fix dependecy resolution for _all_ dependencies which are just direct URLs or files - Bypass pip-tools for non-editable requirements which can be resolved - Fixes #3148 Signed-off-by: Dan Ryan <dan@danryan.co>
|
Happy New Year everyone. Do you think you'll have have to work on it in the near future? |
|
Next item on my list due to dependency links being disabled as of today’s pip release. It’s holding back my other changes now so I’ll be looking at it tomorrow. Thanks for your patience and sorry for taking so long on this one. |
- Fix dependecy resolution for _all_ dependencies which are just direct URLs or files - Bypass pip-tools for non-editable requirements which can be resolved - Fixes #3148 Signed-off-by: Dan Ryan <dan@danryan.co>
- Fixes #3148 Signed-off-by: Dan Ryan <dan@danryan.co>
|
This was incredibly challenging but I have it completely implemented and will be merging it tonight |
|
You are the hero! I'm eager to try it.
…On Tue, 5 Mar 2019 at 13:13, Dan Ryan ***@***.***> wrote:
This was incredibly challenging but I have it completely implemented and
will be merging it tonight
—
You are receiving this because you authored the thread.
Reply to this email directly, view it on GitHub
<#3148 (comment)>, or mute
the thread
<https://github.com/notifications/unsubscribe-auth/AADjWdn18UOpugksumZnwxWssz8z91F8ks5vTdLEgaJpZM4YL5p9>
.
--
Zaar
|
|
Yeeeee-haw!!! It works! Thank you very much! |
2020.5.28 (2020-05-28) ====================== Features & Improvements ----------------------- - `pipenv install` and `pipenv sync` will no longer attempt to install satisfied dependencies during installation. pypa#3057, pypa#3506 - Added support for resolution of direct-url dependencies in `setup.py` files to respect `PEP-508` style URL dependencies. pypa#3148 - Added full support for resolution of all dependency types including direct URLs, zip archives, tarballs, etc. - Improved error handling and formatting. - Introduced improved cross platform stream wrappers for better `stdout` and `stderr` consistency. pypa#3298 - For consistency with other commands and the `--dev` option description, `pipenv lock --requirements --dev` now emits both default and development dependencies. The new `--dev-only` option requests the previous behaviour (e.g. to generate a `dev-requirements.txt` file). pypa#3316 - Pipenv will now successfully recursively lock VCS sub-dependencies. pypa#3328 - Added support for `--verbose` output to `pipenv run`. pypa#3348 - Pipenv will now discover and resolve the intrinsic dependencies of **all** VCS dependencies, whether they are editable or not, to prevent resolution conflicts. pypa#3368 - Added a new environment variable, `PIPENV_RESOLVE_VCS`, to toggle dependency resolution off for non-editable VCS, file, and URL based dependencies. pypa#3577 - Added the ability for Windows users to enable emojis by setting `PIPENV_HIDE_EMOJIS=0`. pypa#3595 - Allow overriding `PIPENV_INSTALL_TIMEOUT` environment variable (in seconds). pypa#3652 - Allow overriding `PIP_EXISTS_ACTION` evironment variable (value is passed to pip install). Possible values here: <https://pip.pypa.io/en/stable/reference/pip/#exists-action-option> Useful when you need to `PIP\_EXISTS\_ACTION=i` (ignore existing packages) - great for CI environments, where you need really fast setup. pypa#3738 - Pipenv will no longer forcibly override `PIP_NO_DEPS` on all vcs and file dependencies as resolution happens on these in a pre-lock step. pypa#3763 - Improved verbose logging output during `pipenv lock` will now stream output to the console while maintaining a spinner. pypa#3810 - Added support for automatic python installs via `asdf` and associated `PIPENV_DONT_USE_ASDF` environment variable. pypa#4018 - Pyenv/asdf can now be used whether or not they are available on PATH. Setting `PYENV_ROOT`/`ASDF_DIR` in a `.env` file allows Pipenv to install an interpreter without any shell customizations, so long as pyenv/asdf is installed. pypa#4245 - Added `--key` command line parameter for including personal PyUp.io API tokens when running `pipenv check`. pypa#4257 Behavior Changes ---------------- - Make conservative checks of known exceptions when subprocess returns output, so user won\'t see the whole traceback - just the error. pypa#2553 - Do not touch Pipfile early and rely on it so that one can do `pipenv sync` without a Pipfile. pypa#3386 - Re-enable `--help` option for `pipenv run` command. pypa#3844 - Make sure `pipenv lock -r --pypi-mirror {MIRROR_URL}` will respect the pypi-mirror in requirements output. pypa#4199 Bug Fixes --------- - Raise `PipenvUsageError` when \[\[source\]\] does not contain url field. pypa#2373 - Fixed a bug which caused editable package resolution to sometimes fail with an unhelpful setuptools-related error message. pypa#2722 - Fixed an issue which caused errors due to reliance on the system utilities `which` and `where` which may not always exist on some systems. - Fixed a bug which caused periodic failures in python discovery when executables named `python` were not present on the target `$PATH`. pypa#2783 - Dependency resolution now writes hashes for local and remote files to the lockfile. pypa#3053 - Fixed a bug which prevented `pipenv graph` from correctly showing all dependencies when running from within `pipenv shell`. pypa#3071 - Fixed resolution of direct-url dependencies in `setup.py` files to respect `PEP-508` style URL dependencies. pypa#3148 - Fixed a bug which caused failures in warning reporting when running pipenv inside a virtualenv under some circumstances. - Fixed a bug with package discovery when running `pipenv clean`. pypa#3298 - Quote command arguments with carets (`^`) on Windows to work around unintended shell escapes. pypa#3307 - Handle alternate names for UTF-8 encoding. pypa#3313 - Abort pipenv before adding the non-exist package to Pipfile. pypa#3318 - Don\'t normalize the package name user passes in. pypa#3324 - Fix a bug where custom virtualenv can not be activated with pipenv shell pypa#3339 - Fix a bug that `--site-packages` flag is not recognized. pypa#3351 - Fix a bug where `pipenv --clear` is not working pypa#3353 - Fix unhashable type error during `$ pipenv install --selective-upgrade` pypa#3384 - Dependencies with direct `PEP508` compliant VCS URLs specified in their `install_requires` will now be successfully locked during the resolution process. pypa#3396 - Fixed a keyerror which could occur when locking VCS dependencies in some cases. pypa#3404 - Fixed a bug that `ValidationError` is thrown when some fields are missing in source section. pypa#3427 - Updated the index names in lock file when source name in Pipfile is changed. pypa#3449 - Fixed an issue which caused `pipenv install --help` to show duplicate entries for `--pre`. pypa#3479 - Fix bug causing `[SSL: CERTIFICATE_VERIFY_FAILED]` when Pipfile `[[source]]` has `verify_ssl=false` and url with custom port. pypa#3502 - Fix `sync --sequential` ignoring `pip install` errors and logs. pypa#3537 - Fix the issue that lock file can\'t be created when `PIPENV_PIPFILE` is not under working directory. pypa#3584 - Pipenv will no longer inadvertently set `editable=True` on all vcs dependencies. pypa#3647 - The `--keep-outdated` argument to `pipenv install` and `pipenv lock` will now drop specifier constraints when encountering editable dependencies. - In addition, `--keep-outdated` will retain specifiers that would otherwise be dropped from any entries that have not been updated. pypa#3656 - Fixed a bug which sometimes caused pipenv to fail to respect the `--site-packages` flag when passed with `pipenv install`. pypa#3718 - Normalize the package names to lowercase when comparing used and in-Pipfile packages. pypa#3745 - `pipenv update --outdated` will now correctly handle comparisons between pre/post-releases and normal releases. pypa#3766 - Fixed a `KeyError` which could occur when pinning outdated VCS dependencies via `pipenv lock --keep-outdated`. pypa#3768 - Resolved an issue which caused resolution to fail when encountering poorly formatted `python_version` markers in `setup.py` and `setup.cfg` files. pypa#3786 - Fix a bug that installation errors are displayed as a list. pypa#3794 - Update `pythonfinder` to fix a problem that `python.exe` will be mistakenly chosen for virtualenv creation under WSL. pypa#3807 - Fixed several bugs which could prevent editable VCS dependencies from being installed into target environments, even when reporting successful installation. pypa#3809 - `pipenv check --system` should find the correct Python interpreter when `python` does not exist on the system. pypa#3819 - Resolve the symlinks when the path is absolute. pypa#3842 - Pass `--pre` and `--clear` options to `pipenv update --outdated`. pypa#3879 - Fixed a bug which prevented resolution of direct URL dependencies which have PEP508 style direct url VCS sub-dependencies with subdirectories. pypa#3976 - Honor `PIPENV_SPINNER` environment variable pypa#4045 - Fixed an issue with `pipenv check` failing due to an invalid API key from `pyup.io`. pypa#4188 - Fixed a bug which caused versions from VCS dependencies to be included in `Pipfile.lock` inadvertently. pypa#4217 - Fixed a bug which caused pipenv to search non-existent virtual environments for `pip` when installing using `--system`. pypa#4220 - `Requires-Python` values specifying constraint versions of python starting from `1.x` will now be parsed successfully. pypa#4226 - Fix a bug of `pipenv update --outdated` that can\'t print output correctly. pypa#4229 - Fixed a bug which caused pipenv to prefer source distributions over wheels from `PyPI` during the dependency resolution phase. Fixed an issue which prevented proper build isolation using `pep517` based builders during dependency resolution. pypa#4231 - Don\'t fallback to system Python when no matching Python version is found. pypa#4232 Vendored Libraries ------------------ - Updated `pip_shims` to support `--outdated` with new pip versions. pypa#3766 - Update vendored dependencies and invocations - Update vendored and patched dependencies - Update patches on `piptools`, `pip`, `pip-shims`, `tomlkit` - Fix invocations of dependencies - Fix custom `InstallCommand` instantiation - Update `PackageFinder` usage - Fix `Bool` stringify attempts from `tomlkit` - Updated vendored dependencies: - **attrs**: `18.2.0 => `19.1.0` - **certifi**: `2018.10.15 => `2019.3.9` - **cached\_property**: `1.4.3 => `1.5.1` - **cerberus**: `1.2.0 => `1.3.1` - **click**: `7.0.0 => `7.1.1` - **click-completion**: `0.5.0 => `0.5.1` - **colorama**: `0.3.9 => `0.4.3` - **contextlib2**: `(new) => `0.6.0.post1` - **distlib**: `0.2.8 => `0.2.9` - **funcsigs**: `(new) => `1.0.2` - **importlib\_metadata** `1.3.0 => `1.5.1` - **importlib-resources**: `(new) => `1.4.0` - **idna**: `2.7 => `2.9` - **jinja2**: `2.10.0 => `2.11.1` - **markupsafe**: `1.0 => `1.1.1` - **more-itertools**: `(new) => `5.0.0` - **orderedmultidict**: `(new) => `1.0` - **packaging**: `18.0 => `19.0` - **parse**: `1.9.0 => `1.15.0` - **pathlib2**: `2.3.2 => `2.3.3` - **pep517**: `(new) => `0.5.0` - **pexpect**: `4.6.0 => `4.8.0` - **pip-shims**: `0.2.0 => `0.5.1` - **pipdeptree**: `0.13.0 => `0.13.2` - **pyparsing**: `2.2.2 => `2.4.6` - **python-dotenv**: `0.9.1 => `0.10.2` - **pythonfinder**: `1.1.10 => `1.2.2` - **pytoml**: `(new) => `0.1.20` - **requests**: `2.20.1 => `2.23.0` - **requirementslib**: `1.3.3 => `1.5.4` - **scandir**: `1.9.0 => `1.10.0` - **shellingham**: `1.2.7 => `1.3.2` - **six**: `1.11.0 => `1.14.0` - **tomlkit**: `0.5.2 => `0.5.11` - **urllib3**: `1.24 => `1.25.8` - **vistir**: `0.3.0 => `0.5.0` - **yaspin**: `0.14.0 => `0.14.3` - **zipp**: `0.6.0` - Removed vendored dependency **cursor**. pypa#4169 - Add and update vendored dependencies to accommodate `safety` vendoring: - **safety** `(none)` => `1.8.7` - **dparse** `(none)` => `0.5.0` - **pyyaml** `(none)` => `5.3.1` - **urllib3** `1.25.8` => `1.25.9` - **certifi** `2019.11.28` => `2020.4.5.1` - **pyparsing** `2.4.6` => `2.4.7` - **resolvelib** `0.2.2` => `0.3.0` - **importlib-metadata** `1.5.1` => `1.6.0` - **pip-shims** `0.5.1` => `0.5.2` - **requirementslib** `1.5.5` => `1.5.6` pypa#4188 - Updated vendored `pip` => `20.0.2` and `pip-tools` => `5.0.0`. pypa#4215 - Updated vendored dependencies to latest versions for security and bug fixes: - **requirementslib** `1.5.8` => `1.5.9` - **vistir** `0.5.0` => `0.5.1` - **jinja2** `2.11.1` => `2.11.2` - **click** `7.1.1` => `7.1.2` - **dateutil** `(none)` => `2.8.1` - **backports.functools\_lru\_cache** `1.5.0` => `1.6.1` - **enum34** `1.1.6` => `1.1.10` - **toml** `0.10.0` => `0.10.1` - **importlib\_resources** `1.4.0` => `1.5.0` pypa#4226 - Changed attrs import path in vendored dependencies to always import from `pipenv.vendor`. pypa#4267 Improved Documentation ---------------------- - Added documenation about variable expansion in `Pipfile` entries. pypa#2317 - Consolidate all contributing docs in the rst file pypa#3120 - Update the out-dated manual page. pypa#3246 - Move CLI docs to its own page. pypa#3346 - Replace (non-existant) video on docs index.rst with equivalent gif. pypa#3499 - Clarify wording in Basic Usage example on using double quotes to escape shell redirection pypa#3522 - Ensure docs show navigation on small-screen devices pypa#3527 - Added a link to the TOML Spec under General Recommendations & Version Control to clarify how Pipfiles should be written. pypa#3629 - Updated the documentation with the new `pytest` entrypoint. pypa#3759 - Fix link to GIF in README.md demonstrating Pipenv\'s usage, and add descriptive alt text. pypa#3911 - Added a line describing potential issues in fancy extension. pypa#3912 - Documental description of how Pipfile works and association with Pipenv. pypa#3913 - Clarify the proper value of `python_version` and `python_full_version`. pypa#3914 - Write description for `--deploy` extension and few extensions differences. pypa#3915 - More documentation for `.env` files pypa#4100 - Updated documentation to point to working links. pypa#4137 - Replace docs.pipenv.org with pipenv.pypa.io pypa#4167 - Added functionality to check spelling in documentation and cleaned up existing typographical issues. pypa#4209
Issue description
The title may be a bit confusing, thus I hope description will be clearer.
My
packagessection of Pipfile is as follows:pipenv installpasses fine, but then I try to dopipenv install --dev -e .with the followingsetup.py:it fails with
Could not find a version that matches private_pkg, thoughprivate_pkgis listed in thesatisfied requirements below.
pip install -e .works just fine in pipenv's venv and the resulting installation is functional. Bug?$ pipenv --support
Pipenv version:
'2018.10.13'Pipenv location:
'/home/.../.local/lib/python3.6/site-packages/pipenv'Python location:
'/usr/bin/python3.6'Python installations found:
3.7.0:/usr/bin/python3.73.7.0:/usr/bin/python3.7m3.6.6:/home/.../bin/python3.63.6.6:/usr/bin/python3.63.6.6:/usr/bin/python3.6m3.5.2:/usr/bin/python3.53.5.2:/usr/bin/python3.5m2.7.12:/usr/bin/python2.7PEP 508 Information:
System environment variables:
LC_PAPERXDG_VTNRXDG_SESSION_IDLC_ADDRESSCLUTTER_IM_MODULELC_MONETARYXDG_GREETER_DATA_DIRVIRTUALENVWRAPPER_SCRIPTVIRTUALENVWRAPPER_PROJECT_FILENAMESESSIONGPG_AGENT_INFOPIP_PYTHON_PATHSHELLVTE_VERSIONTERMQT_LINUX_ACCESSIBILITY_ALWAYS_ONDIRENV_DIRLC_NUMERICWINDOWIDGNOME_KEYRING_CONTROLUPSTART_SESSIONGTK_MODULESUSERQT_ACCESSIBILITYLC_TELEPHONELS_COLORSUNITY_HAS_3D_SUPPORTXDG_SESSION_PATHXDG_SEAT_PATHSSH_AUTH_SOCKDEFAULTS_PATHVIRTUAL_ENVWORKON_HOMEDIRENV_WATCHESUNITY_DEFAULT_PROFILEXDG_CONFIG_DIRSPIPENV_ACTIVEPATHDESKTOP_SESSIONQT_QPA_PLATFORMTHEMEQT_IM_MODULEVIRTUALENVWRAPPER_HOOK_DIRLC_IDENTIFICATIONJOBPWDXDG_SESSION_TYPEXMODIFIERSLANGGNOME_KEYRING_PIDMANDATORY_PATHGDM_LANGLC_MEASUREMENTNODE_PATHIM_CONFIG_PHASECOMPIZ_CONFIG_PROFILEPS1PYTHONDONTWRITEBYTECODEPAPERSIZEGDMSESSIONGTK2_MODULESSESSIONTYPEGITAWAREPROMPTXDG_SEATHOMESHLVLLANGUAGE_VIRTUALENVWRAPPER_APIGNOME_DESKTOP_SESSION_IDUPSTART_INSTANCEPIP_SHIMS_BASE_MODULELOGNAMEUPSTART_EVENTSXDG_SESSION_DESKTOPPYTHONPATHGITHUB_RO_TOKENCOMPIZ_BIN_PATHQT4_IM_MODULEXDG_DATA_DIRSDBUS_SESSION_BUS_ADDRESSLESSOPENUPSTART_JOBINSTANCEDISPLAYXDG_RUNTIME_DIRGTK_IM_MODULEXDG_CURRENT_DESKTOPDIRENV_DIFFLC_TIMELESSCLOSEXAUTHORITYLC_NAME_Pipenv–specific environment variables:
PIPENV_ACTIVE:1Debug–specific environment variables:
SHELL:/bin/bashLANG:en_US.UTF-8Contents of
Pipfile('/home/.../Pipfile'):Contents of
Pipfile.lock('/home/.../Pipfile.lock'):{ "_meta": { "hash": { "sha256": "ae2ceeae45ac82d25d2563ac6b7d421babd5dda5437a4f0c35fddc78be4f417c" }, "pipfile-spec": 6, "requires": { "python_version": "3.6" }, "sources": [ { "name": "pypi", "url": "https://pypi.org/simple", "verify_ssl": true } ] }, "default": { "private_pkg: { "file": "https://${GITHUB_RO_TOKEN}:@github.com/Org/private_pkg/archive/v0.1.0.tar.gz" }, "prometheus-client": { "hashes": [ "sha256:046cb4fffe75e55ff0e6dfd18e2ea16e54d86cc330f369bebcc683475c8b68a9" ], "index": "pypi", "version": "==0.4.2" }, "uberlogging": { "file": "https://github.com/haizaar/uberlogging/archive/v0.0.2.tar.gz" } }, "develop": {} }The text was updated successfully, but these errors were encountered: