remove lock headers, automate relock

dev-requirements.txt

@@ -1,4 +1,3 @@
--i https://pypi.org/simple
 aiohttp==3.9.3; python_version >= '3.8'
 aiosignal==1.3.1; python_version >= '3.7'
 annotated-types==0.6.0; python_version >= '3.8'

requirements.txt

@@ -1,4 +1,3 @@
--i https://pypi.org/simple
 aiohttp==3.9.3; python_version >= '3.8'
 aiosignal==1.3.1; python_version >= '3.7'
 async-timeout==4.0.3; python_version < '3.11'

scripts/relock_dependencies.sh

@@ -0,0 +1,43 @@
+#!/usr/bin/env bash
+
+# Parse optional flag -k, to be used when we want to base the process on an existing Pipfile.lock
+KEEP_LOCK=false
+OPTIND=1
+while getopts 'k' opt; do
+    case $opt in
+        k) KEEP_LOCK=true ;;
+        *) echo 'Error in command line parsing' >&2
+           exit 1
+    esac
+done
+shift "$(( OPTIND - 1 ))"
+
+# can change output file names with relock_dependencies.sh <prefix>
+PREFIX=${1:-requirements}
+
+# these steps might fail, but that's okay.
+if ! "$KEEP_LOCK"; then
+    echo "Removing existing Pipfile.lock file"
+    rm -f Pipfile.lock
+fi
+
+echo "Removing existing requirement files"
+pipenv --rm
+rm -f $PREFIX.txt
+rm -f dev-$PREFIX.txt
+
+echo "Removing pip cache"
+pip cache purge
+
+# start enforcing failures
+set -e
+
+echo "Building Development Requirements"
+pipenv --python 3.12 lock --clear --pre --dev-only
+pipenv requirements --dev-only > dev-$PREFIX.txt
+
+echo "Building Standard Requirements"
+pipenv --python 3.12 lock --clear --pre
+pipenv requirements > $PREFIX.txt
+
+echo "OK!"