Skip to content

Conversation

@charliermarsh
Copy link
Member

@charliermarsh charliermarsh commented Dec 6, 2025

Summary

There are a class of outcomes whereby an index might not be included in "allowed indexes", but could still correctly appear in a lockfile. In the linked case, we have two default = true indexes, and one of them is also named. We omit the second default = true index from the list of "allowed indexes", but since it's named, a dependency can reference it explicitly. We handle this correctly for project.dependencies, but the handling was incorrectly omitting dependency groups.

Closes #16843.

@charliermarsh charliermarsh added the bug Something isn't working label Dec 6, 2025
@charliermarsh charliermarsh marked this pull request as ready for review December 6, 2025 03:13
@charliermarsh charliermarsh enabled auto-merge (squash) December 6, 2025 03:13
@charliermarsh charliermarsh merged commit 28a8194 into main Dec 6, 2025
101 checks passed
@charliermarsh charliermarsh deleted the charlie/d branch December 6, 2025 14:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bug Something isn't working

Projects

None yet

Development

Successfully merging this pull request may close these issues.

UV Index with inline credentials breaks lock files

2 participants