1959e2a6b6
Generalizes the huggingface-hub lockstep test (#72320) to the whole LAZY_DEPS surface: any package exact-pinned in LAZY_DEPS that the core lock also resolves must pin the SAME version, so hermes update's lazy refresh can never churn or downgrade a shared package out from under its other consumers (#60783 class, #31817 class). Together with the anchor-based activation gate (previous commit, salvaged from #27878 by @paralegalia), this closes both halves of #44404: features no longer false-activate from shared transitives, and even a feature that legitimately activates cannot move a shared package away from the locked version.
2 lines
12 B
Plaintext
2 lines
12 B
Plaintext
paralegalia
|