package.metadata.requires-dist in uv.lock is incomplete for last added packages.

[kabouzeid]

package.metadata.requires-dist in uv.lock isn't updated with the version specifier on add. only subsequent add, lock, or sync calls add it.

➜ uv --version
uv 0.3.3 (Homebrew 2024-08-23)

➜ uv add ruff
Using Python 3.12.5
Creating virtualenv at: .venv
Resolved 2 packages in 190ms
   Built project @ file:///private/tmp/project
Prepared 2 packages in 695ms
Installed 2 packages in 2ms
 + project==0.1.0 (from file:///private/tmp/project)
 + ruff==0.6.2

➜ cat uv.lock | grep requires-dist
requires-dist = [{ name = "ruff" }]

➜ uv add polars
Resolved 3 packages in 5ms
   Built project @ file:///private/tmp/project
Prepared 2 packages in 139ms
Uninstalled 1 package in 0.51ms
Installed 2 packages in 2ms
 + polars==1.5.0
 ~ project==0.1.0 (from file:///private/tmp/project)

➜ cat uv.lock | grep -A 3 requires-dist
requires-dist = [
    { name = "polars" },
    { name = "ruff", specifier = ">=0.6.2" },
]

➜ uv sync
Resolved 3 packages in 16ms
Audited 3 packages in 0.05ms

➜ cat uv.lock | grep -A 3 requires-dist
requires-dist = [
    { name = "polars", specifier = ">=1.5.0" },
    { name = "ruff", specifier = ">=0.6.2" },
]

[charliermarsh]

Thanks! Will take a look, looks wrong.

[charliermarsh]

Oh this actually does make sense (we update the pyproject.toml after the resolution, to set the lower-bound specifier). Difficult to fix but we definitely need to.