Fix a regression from commit dbea3f5 where `pip install --system` tries
to install using the `python` executable first which, on some systems
may point to Python 2. Instead try `python3` first.
* Add test, ensure dev lock use default packages as constraints.
* Use default packages as constraints when locking develop packages.
* Add test, ensure installing dev-packages use default packages as constraints. (#4371) (#2987)
* Use default packages as constraints when installing provided dev packages.
* change vistir.path.normalize_path to pipenv.utils.shell.normalize_path
* Add function that get contraints from packages.
* Add test for get_constraints_from_deps function
* Use get_constraints_from_deps to get constraints
* Use @cached_property instead of @property
* Use standalone utility to write constraints file
* prepare_constraint_file use precomputed constraints.
* Add news fragment.
* Include markers
* Change to marker flag and include test
* Flip markers flag to exclude by default
* Docs and newsfile
* Let default dependencies update dev dependencies
Solved by using existing convert_deps_to_pip function.
Fix#5076.
Original implementation by @fraser-langton. This also
solves the export of packages with editable mode, as suggested
by @hoyaaaa (#5071).
* Check at the end of install if the failed dependency queue is empty or not and exit with error when there are still failed dependencies.
* Address PR feedback about crayons.
* Fix windows tests that fail because of showing the progress bar, but only local -- CI still breaks.
* Skip these tests on the windows CI for now. Created https://github.com/pypa/pipenv/issues/5064 to track
* Removed usage of fs_str from vistir
This function was all about compatability of py2-py3.3 versions.
Later versions don't need it.
* Explicitly convert dict values to strings
* Add news fragment
* Allow PIPENV_VENV_IN_PROJECT to be read in as None, and ensure if it is set to False that it does not use .venv directory.
* refactor based on PR feedback and add news fragment.
* Review unit test coverage and add new tests. Remove unneccesary bits from other tests.
* Restore this message as stderr because it affects requirements.txt generation.
* Only load the dotenv file when it's a real file, and thus only print the message when it's present.
* Add news fragment.
Previously, due to a probable typo in the code for importing a
requirements file to create a new pipenv project, SSL/TLS validation was
disabled by default for any package index servers specified in the
requirements file with the `--index-url` or `--extra-index-url` options.
In addition, `--trusted-host` options in the requirements file would not
work as intended, because any host or host:port pair provided with these
options was incorrectly being matched against the full URLs of the
configured index server(s) (i.e. including the scheme, path, etc.),
instead of extracting and comparing with the host and port parts only,
as intended.
This PR fixes both of these issues, flipping the existing behavior to
require SSL/TLS validation by default, and optionally allowing TLS
validation to be disabled explicitly for specific host:port with the
`--trusted-host` option if provided.
Matt Davis