Should we be Pinning dependencies?

Recently a few issues appeared that are related to dependencies being updated, namely:

• #1068
• #1089
• maybe others, haven't looked

In C# if you install a package it installs the lowest available version that matches (by default). This means if you install the same package next time, you're pretty certain you will get exactly the same dependencies as last time. Back to python, it seems that python does the exact opposite.

Maybe there should be a discussion about whether or not we should start pinning dependencies so you get a more stable installation of a specific version of this sdk. I'm not a python expert and I don't know what is recommended for libraries but it is certainly something to think about.

Any ideas?

https://github.com/microsoftgraph/msgraph-sdk-python/blob/25d6c6c12f6b20a8c6b36f4fa9b7574c1826da0e/pyproject.toml#L13-L21

Inizia con le dichiarazioni delle dipendenze in pyproject.toml alle righe collegate, quindi esamina le issue #1068 e #1089 per i problemi relativi agli aggiornamenti. La issue non definisce se o come le dipendenze debbano essere bloccate, quindi sono necessarie una decisione concreta e criteri di accettazione prima che l’implementazione possa essere considerata completata.