Bump pipenv from 2023.7.23 to 2023.10.24 (#1502)

* Bump pipenv from 2023.7.23 to 2023.10.24 Bumps [pipenv](https://github.com/pypa/pipenv) from 2023.7.23 to 2023.10.24. - [Release notes](https://github.com/pypa/pipenv/releases) - [Changelog](https://github.com/pypa/pipenv/blob/main/CHANGELOG.md) - [Commits](pypa/pipenv@v2023.7.23...v2023.10.24) --- updated-dependencies: - dependency-name: pipenv dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> * Add changelog entry * Update test fixtures for new pipenv output --------- Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Ed Morley <[email protected]>
heroku · Nov 8, 2023 · d91a725 · d91a725
1 parent fa4067f
commit d91a725
Show file tree

Hide file tree

Showing 3 changed files with 7 additions and 3 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -3,6 +3,7 @@
 ## [Unreleased]
 
 - Updated setuptools from 68.0.0 to 68.2.2. ([#1501](https://github.com/heroku/heroku-buildpack-python/pull/1501))
+- Updated pipenv from 2023.7.23 to 2023.10.24. ([#1502](https://github.com/heroku/heroku-buildpack-python/pull/1502))
 
 ## [v239] - 2023-11-08
 

diff --git a/requirements/pipenv.txt b/requirements/pipenv.txt
@@ -1 +1 @@
-pipenv==2023.7.23
+pipenv==2023.10.24
diff --git a/spec/hatchet/pipenv_spec.rb b/spec/hatchet/pipenv_spec.rb
@@ -45,7 +45,10 @@
           remote: -----> Installing python-#{DEFAULT_PYTHON_VERSION}
           remote: -----> Installing pip #{PIP_VERSION}, setuptools #{SETUPTOOLS_VERSION} and wheel #{WHEEL_VERSION}
           remote: -----> Installing dependencies with Pipenv #{PIPENV_VERSION}
-          remote:        The flag --skip-lock has been deprecated for removal.  Without running the lock resolver it is not possible to manage multiple package indexes.  Additionally it bypasses the build consistency guarantees provided by maintaining a lock file.
+          remote:        The flag --skip-lock has been reintroduced (but is not recommended).  Without 
+          remote:        the lock resolver it is difficult to manage multiple package indexes, and hash 
+          remote:        checking is not provided.  However it can help manage installs with current 
+          remote:        deficiencies in locking across platforms.
           remote:        Installing dependencies from Pipfile...
           remote: -----> Installing SQLite3
         OUTPUT
@@ -294,7 +297,7 @@
           remote: -----> Installing python-#{DEFAULT_PYTHON_VERSION}
           remote: -----> Installing pip #{PIP_VERSION}, setuptools #{SETUPTOOLS_VERSION} and wheel #{WHEEL_VERSION}
           remote: -----> Installing dependencies with Pipenv #{PIPENV_VERSION}
-          remote:        Your Pipfile.lock \\(.+\\) is out of date. Expected: \\(.+\\).
+          remote:        Your Pipfile.lock \\(.+\\) is out of date.  Expected: \\(.+\\).
           remote:        .+
           remote:        ERROR:: Aborting deploy
         REGEX