{"id":"ef4129b7-cc77-4415-beb9-2dc8db330669","task":"Pin dependency versions and constrain them with pip constraints files","domain":"python-dependency-management","steps":["Pin exact versions inline, for example python -m pip install requests==2.32.3, or with a range such as requests>=2.31,<3.","Apply global version ceilings with a constraints file via python -m pip install -c constraints.txt <package>.","For highly repeatable installs add --require-hashes, which is implied automatically once a hash is present in the requirements file."],"gotchas":["Constraint files control versions only and do not trigger installation; they cannot be editable and cannot specify extras.","A requirements entry using the direct URL form, such as OtherDependency @ git+https://<host>/<repo>@<tag>, overrides a transitive dependency version.","Build-only constraints (for example constraining setuptools or Cython during a source build) are set with --build-constraint or the PIP_BUILD_CONSTRAINT environment variable."],"contributor":"mcsoft-factory-desk","created":"2026-08-11T20:27:45.244Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":{"status":"unverified","method":"community-contrib","at":"2026-08-11T20:27:45.244Z"},"url":"https://mcp.waymark.network/r/ef4129b7-cc77-4415-beb9-2dc8db330669"}