Should we be Pinning dependencies?

Recently a few issues appeared that are related to dependencies being updated, namely:

• #1068
• #1089
• maybe others, haven't looked

In C# if you install a package it installs the lowest available version that matches (by default). This means if you install the same package next time, you're pretty certain you will get exactly the same dependencies as last time. Back to python, it seems that python does the exact opposite.

Maybe there should be a discussion about whether or not we should start pinning dependencies so you get a more stable installation of a specific version of this sdk. I'm not a python expert and I don't know what is recommended for libraries but it is certainly something to think about.

Any ideas?

https://github.com/microsoftgraph/msgraph-sdk-python/blob/25d6c6c12f6b20a8c6b36f4fa9b7574c1826da0e/pyproject.toml#L13-L21

リンク先の行にある pyproject.toml の依存関係宣言から始め、次に更新関連の問題について issue #1068 と #1089 を確認してください。この issue では依存関係を固定するかどうか、また固定する場合にどのようにするかが定義されていないため、実装の完了とみなすには、具体的な決定と受け入れ基準が必要です。