Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

docs(lambda-python): recommend lockfiles #14847

Merged
merged 4 commits into from
Jun 8, 2021

Conversation

eladb
Copy link
Contributor

@eladb eladb commented May 24, 2021

Since python bundles use source hashes (and as a general best practice), add a recommendation to use a dependency lockfile.

Fixes #14607


By submitting this pull request, I confirm that my contribution is made under the terms of the Apache-2.0 license

Since python bundles use source hashes (and as a general best practice), add a recommendation to use a dependency lockfile.

Fixes #14607
@gitpod-io
Copy link

gitpod-io bot commented May 24, 2021

@eladb eladb enabled auto-merge (squash) May 24, 2021 08:55
@eladb eladb requested a review from a team May 24, 2021 08:55
@mergify mergify bot added the contribution/core This is a PR that came from AWS. label May 24, 2021
@@ -44,6 +44,16 @@ If `requirements.txt` or `Pipfile` exists at the entry path, the construct will
all required modules in a [Lambda compatible Docker container](https://gallery.ecr.aws/sam/build-python3.7)
according to the `runtime`.

Python bundles are only recreated and published when a file in a source directory has changed.
Copy link
Contributor

@nija-at nija-at May 26, 2021

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Who generates this lock file and when/who updates it? Does the bundling phase of PythonFunction do it?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This needs to be done by the user

@mergify
Copy link
Contributor

mergify bot commented Jun 8, 2021

Thank you for contributing! Your pull request will be updated from master and then merged automatically (do not update manually, and be sure to allow changes to be pushed to your fork).

@eladb eladb merged commit 0aea547 into master Jun 8, 2021
@eladb eladb deleted the benisrae/lambda-python-docs-lockfile branch June 8, 2021 17:38
@aws-cdk-automation
Copy link
Collaborator

AWS CodeBuild CI Report

  • CodeBuild project: AutoBuildProject89A8053A-LhjRyN9kxr8o
  • Commit ID: 001f415
  • Result: SUCCEEDED
  • Build Logs (available for 30 days)

Powered by github-codebuild-logs, available on the AWS Serverless Application Repository

hollanddd pushed a commit to hollanddd/aws-cdk that referenced this pull request Aug 26, 2021
Since python bundles use source hashes (and as a general best practice), add a recommendation to use a dependency lockfile.

Fixes aws#14607
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
@aws-cdk/aws-lambda-python contribution/core This is a PR that came from AWS.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

(lambda-python): document that not using a lockfile will not allow transitive dependencies to be updated
5 participants