On Sat, Apr 18, 2020 at 5:18 PM Jeremy Stanley <fungi@yuggoth.org> wrote:
On 2020-04-18 16:18:24 +0200 (+0200), Radosław Piliszek wrote:
On Sat, Apr 18, 2020 at 2:56 PM Jeremy Stanley <fungi@yuggoth.org> wrote: [...]
In what way is it not enforced? Or put another way, what were you expecting it to enforce which it doesn't?
Oh, I mean the lockfile part. If lower-constraints jobs pass without enforcing each transitive dependency, then it's not enforced in this way. [...]
I wouldn't mind digging into a specific example of this. It seems likely to be one (or more) of: <snip>
Be my guest. The case is about *transitive* dependencies, not direct. See the already mentioned kolla-cli change. [1] This is what is not enforced (except for Sean's legit -1 :-) ). [1] https://review.opendev.org/720754 -yoctozepto