Use the lockfile as constraints when doing uv run --with

[delfick]

Hello,

I'm using uv 0.4.10

I'm trying to make my project use uv project semantics and to get around uv not having support for conflicting requirements I have scripts to run my tests with either uv run --with mypy==1.4.0 django-stubs==4.2.3 or uv run --with mypy==1.11.2 --with django-stubs==5.0.2 and that works.

However, it seems that it's not using the lock file as a constraints and so it's not respecting that I have a specific version of django in my project.

Is it possible to make it so that doing a uv run using --with uses the lock file as a constraints?

[juftin]

Agreed - I came looking for a very similar issue to this. In my case I'd like to run Python CLIs in my environment without installing other tools.

For example, in a linting CI/CD job I'd like to just run ruff which is one of my dev dependencies, without installing everything else:

[build-system]
build-backend = "hatchling.build"
requires = ["hatchling"]

[project]
dependencies = [
  "requests"
]
name = "example"
readme = "README.md"
requires-python = ">=3.11,<4"
version = "0.1.0"

[tool.uv]
dev-dependencies = [
  "ruff>=0.6.5",
  "pytest>=8.3.3"
]

In this case I would want to run something like this and have it respect my lockfile:

uv run --with ruff ruff format .

Even better (for my use case), it would be nice to install ruff into my virtual environment without having to install any of my other dev dependencies:

uv run --only-sync ruff ruff format .

[charliermarsh]

@juftin -- Are you looking for uv run --only-dev ruff format .?

[juftin]

Kind of, I'm using uv run --only-dev ruff format . today but it syncs all of my dev dependencies when I really only need ruff for the CI job.

Maybe this is a niche need, but I'd like to be able to install/run just ruff without trying to sync the other dev dependencies (that was my idea with the --only-sync flag in the above example)

If uv run --with ruff --no-sync ruff format . respected my lock file that would also work.

[charliermarsh]

Yeah I think we should respect the lockfile for the —with dependencies. At the very least we should prefer versions that are in the lockfile.

[delfick]

awesome, thanks for the fix!