2 changed files with 16 additions and 0 deletions
@ -0,0 +1,12 @@ |
|||||||
|
# Notes |
||||||
|
|
||||||
|
The frozen dependency lists in this folder are *generated* files. |
||||||
|
|
||||||
|
- Starting from `contrib/requirements/requirements*.txt`, |
||||||
|
- we use the `contrib/freeze_packages.sh` script, |
||||||
|
- to generate `contrib/deterministic-build/requirements*.txt`. |
||||||
|
|
||||||
|
The source files list direct dependencies with loose version requirements, |
||||||
|
while the output files list all transitive dependencies with exact version+hash pins. |
||||||
|
|
||||||
|
The build scripts only use these hash pinned requirement files. |
||||||
Loading…
Reference in new issue