Pipenv not able to resolve dependencies despite clear candidate.

[lbenezriravin]

Possibly related to #2235

I have a private dependency (A) that depends on a private subdependency (B >=1.6.3,<2.0). Another private subdependency (C) also depends on (B >=1.6.4,<2.0). Note the more recent version. When I install A, everything works fine, and it finds B==1.6.7. However, pipenv falls over when generating Pipfile.lock.

$ python -m pipenv.help output

Pipenv version: '11.10.1'

Pipenv location: '/home/user/.local/lib/python2.7/site-packages/pipenv'

Python location: '/usr/bin/python'

Other Python installations in PATH:

• 2.7: /usr/bin/python2.7

• 2.7: /usr/bin/python2.7

• 3.6: /usr/bin/python3.6m

• 3.6: /usr/bin/python3.6

• 2.7.15: /usr/bin/python

• 2.7.15: /usr/bin/python2

• 3.6.5: /usr/bin/python3

PEP 508 Information:

{'implementation_name': 'cpython',
 'implementation_version': '0',
 'os_name': 'posix',
 'platform_machine': 'x86_64',
 'platform_python_implementation': 'CPython',
 'platform_release': '4.15.17-300.fc27.x86_64',
 'platform_system': 'Linux',
 'platform_version': '#1 SMP Thu Apr 12 18:19:17 UTC 2018',
 'python_full_version': '2.7.15',
 'python_version': '2.7',
 'sys_platform': 'linux2'}

System environment variables:

• PYTHONDONTWRITEBYTECODE
• PIP_PROCESS_DEPENDENCY_LINKS
• PIP_PYTHON_PATH

Pipenv–specific environment variables:

Debug–specific environment variables:

• PATH: /usr/lib64/qt-3.3/bin:/usr/local/bin:/usr/local/sbin:/usr/bin:/usr/sbin:/home/user/.local/bin:/home/user/bin
• SHELL: /bin/bash
• LANG: en_US.UTF-8
• PWD: /home/user/test

---

Contents of Pipfile ('/home/user/test/Pipfile'):

[[source]]
url = "https://pypi.org/simple"
verify_ssl = true
name = "pypi"

[dev-packages]

[packages]
A = {ref = "master", git = "ssh://[email protected]/private/A.git", editable = true}

[requires]
python_version = "2.7"

---

Expected result

Lockfile should have been generated easily -- a correct version was already found and installed.

Actual result

INFO:notpip.req.req_set:Obtaining A from git+ssh://[email protected]/private/A.git@master#egg=A
INFO:pip9.vcs.git:Cloning ssh://[email protected]/private/A.git (to master) to /tmp/tmpEO7lslsource/A
/home/user/.local/lib/python2.7/site-packages/pipenv/patched/notpip/index.py:205: RemovedInPip10Warning: Dependency Links processing has been deprecated and will be removed in a future release.
  RemovedInPip10Warning,
Warning: Your dependencies could not be resolved. You likely have a mismatch in your sub-dependencies.
  You can use $ pipenv install --skip-lock to bypass this mechanism, then run $ pipenv graph to inspect the situation.Hint: try $ pipenv lock --pre if it is a pre-release dependency
Could not find a version that matches B<2.0,>=1.6.3,>=1.6.4
Tried: 1.6.3
There are incompatible versions in the resolved dependencies.
INFO:notpip.req.req_set:Obtaining A from git+ssh://[email protected]/private/A.git@master#egg=A
INFO:pip9.vcs.git:Cloning ssh://[email protected]/private/A.git (to master) to /tmp/tmpqQIHoRsource/A
Warning: Your dependencies could not be resolved. You likely have a mismatch in your sub-dependencies.
  You can use $ pipenv install --skip-lock to bypass this mechanism, then run $ pipenv graph to inspect the situation.Hint: try $ pipenv lock --pre if it is a pre-release dependency
Could not find a version that matches B<2.0,>=1.6.3,>=1.6.4
Tried: 1.6.3
There are incompatible versions in the resolved dependencies.

Steps to replicate

pipenv install -e 'git+ssh://[email protected]/private/A.git@master#egg=A'

[lbenezriravin]

On further inspection, this might be more related to #2209. Installing C directly doesn't work either, and lock fails with:

Collecting B==1.6.4  0/1 — 00:00:00

  Could not find a version that satisfies the requirement B==1.6.4 (from -r /tmp/pipenv-DiVtcn-requirements/pipenv-S9GsK9-requirement.txt (line 1)) (from versions: )
No matching distribution found for B==1.6.4 (from -r /tmp/pipenv-DiVtcn-requirements/pipenv-S9GsK9-requirement.txt (line 1))

Again, the actual installation worked, just the lock had trouble.

[kennethreitz]

closing, since #2209 is merged.