Should we be Pinning dependencies?

Recently a few issues appeared that are related to dependencies being updated, namely:

• #1068
• #1089
• maybe others, haven't looked

In C# if you install a package it installs the lowest available version that matches (by default). This means if you install the same package next time, you're pretty certain you will get exactly the same dependencies as last time. Back to python, it seems that python does the exact opposite.

Maybe there should be a discussion about whether or not we should start pinning dependencies so you get a more stable installation of a specific version of this sdk. I'm not a python expert and I don't know what is recommended for libraries but it is certainly something to think about.

Any ideas?

https://github.com/microsoftgraph/msgraph-sdk-python/blob/25d6c6c12f6b20a8c6b36f4fa9b7574c1826da0e/pyproject.toml#L13-L21

先從連結行中的 pyproject.toml 相依性宣告開始，然後檢視 issue #1068 和 #1089，了解與更新相關的問題。該 issue 沒有規定是否應固定相依性，也沒有規定應如何固定，因此在實作可以被視為完成之前，需要先作出具體決定並制定驗收標準。