Skip to content

Conversation

@michael-johnston
Copy link
Member

Without --reinstall, uv sync will use existing wheels it finds for workspace members. This behaviour is not what you want for testing e.g.

  • Use "uv sync --group test" to create a brand new environment
  • Switch branches
  • Use "uv sync --group test" to update the venv to new branch and test -> does not work as expected. Packages from previous branch will be used.

The only solution is --reinstall which forces a rebuild of the local workspace members.

Without `--reinstall`, `uv sync` will use existing wheels it finds for workspace members. This behaviour is not what you want for testing e.g.
- Use "uv sync --group test" to create a brand new environment
- Switch branches
- Use "uv sync --group test" to update the venv to new branch and test -> does not work as expected. Packages from previous branch will be used.

The only solution is `--reinstall` which forces a rebuild of the local workspace members.
@DRL-NextGen
Copy link
Member

Checks Summary

Last run: 2025-12-03T10:34:48.161Z

Code Risk Analyzer vulnerability scan found 2 vulnerabilities:

Severity Identifier Package Details Fix
🔷 Medium CVE-2025-50181 urllib3
urllib3 redirects are not disabled when retries are disabled on PoolManager instantiationGHSA-pq67-6m6q-mj2v

urllib3:2.3.0->kubernetes:34.1.0
2.5.0
🔷 Medium CVE-2025-50182 urllib3
urllib3 does not control redirects in browsers and Node.jsGHSA-48p4-8xcf-vxj5

urllib3:2.3.0->kubernetes:34.1.0
2.5.0

Copy link
Member

@AlessandroPomponio AlessandroPomponio left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM thanks

@AlessandroPomponio AlessandroPomponio added this pull request to the merge queue Dec 3, 2025
Merged via the queue into main with commit 40ce0b0 Dec 3, 2025
18 checks passed
@AlessandroPomponio AlessandroPomponio deleted the maj_update_test_docs branch December 3, 2025 15:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants