18 views
-/https://github.com/berriai/litellm/issues/25280
GitHub · issue

#25280 [Bug]: Dependency pinning in commit #5f63873 — intentional change?

  • State: open
  • Author: @HarryEH
  • Labels: bug, SDK

### Check for existing issues

- [x] I have searched the existing issues and checked that my issue is not a duplicate.

### What happened?

This is a follow-up to #25210. I noticed that commit [5f63873](https://github.com/BerriAI/litellm/commit/5f63873dcad12d0aee51eabc974273eda5278205#diff-50c86b7ed8ac2cf95bd48334961bf0530cdc77b5a56f852c5c61b89d735fd711) pins every dependency to an exact version. I wanted to flag this in case it wasn't intentional. If litellm is still intended to be consumed as a library, exact-pinning in the package metadata can cause dependency conflicts for downstream users. The general best practice for libraries is to use loose constraints (e.g., >={version}) and test against a range of dependency versions in CI. Exact pinning is typically reserved for pure application deployments, where a lockfile can handle transitive dependency locking and ensure reproducible Docker builds. You can still use the lockfile here to have reproducible builds for the images. Could you clarify whether this reflects a deliberate shift in how litellm is meant to be distributed? If it was unintentional, it would be great to revert to flexible version specifiers so that library consu…

GitHub resolver

Import GitHub neighbors on demand. Results are saved as system ingests.

Refresh page
vote history (1 events)
#0 of 0 · 31d18h11m50s ago — entered · #import:https:::github.com:berriai:litellm post #2867
Dependency-policy changes affect packaging, downstream compatibility, and CI/release validation across the SDK, while the callback issue is comparatively localized to proxy service registration and targeted integration tests.
discussed in #import:https:::github.com:berriai:litellm

ranked child groups

no voted pairs yet in this scope

cli
src
spread
search