Skip to content

Guard uv upgrade conflict attribution - #20593

Draft
zsol wants to merge 1 commit into
zsol/upgrade-05-outputfrom
zsol/upgrade-06-conflicts
Draft

Guard uv upgrade conflict attribution#20593
zsol wants to merge 1 commit into
zsol/upgrade-05-outputfrom
zsol/upgrade-06-conflicts

Conversation

@zsol

@zsol zsol commented Jul 21, 2026

Copy link
Copy Markdown
Member

Universal lockfiles can contain forks created by conflicting projects, extras, or dependency groups. Projecting those forks onto ordinary PEP 508 markers can make a version from one conflicting branch appear applicable to an unrelated declaration, causing uv upgrade to rewrite the wrong requirement.

This blocks attribution for declarations under a conflicting project, extra, or group, including explicit and compound extra markers and included dependency groups. The affected declaration remains unchanged with a precise warning while other safe declarations can still be upgraded. Conflicts belonging to another declaration or workspace member do not block unrelated optional or group dependencies.

@zsol
zsol temporarily deployed to automations July 21, 2026 18:44 — with GitHub Actions Inactive
@zsol
zsol force-pushed the zsol/upgrade-06-conflicts branch from fc0df64 to 1ab1970 Compare July 28, 2026 12:10
@zsol
zsol temporarily deployed to automations July 28, 2026 12:11 — with GitHub Actions Inactive
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant