Pip does not seem to be handling deep requirements correctly

[lingrlongr]

• Pip version: pip 9.0.1
• Python version: 2.7.10
• Operating System: mac (el capitan)

Description:

Pip does not seem to be handling deep requirements correctly.

What I've run:

# requirements.txt
awscli<1.11.0
botocore<1.5.0
pipdeptree

The pinnings are set to allow for bug fixes but prevent new features.

pip install -r requirements.txt

pipdeptree
Warning!!! Possibly conflicting dependencies found:
* awscli==1.10.67
 - botocore [required: ==1.4.57, installed: 1.4.81]
------------------------------------------------------------------------
awscli==1.10.67
  - botocore [required: ==1.4.57, installed: 1.4.81]
    - docutils [required: >=0.10, installed: 0.12]
    - jmespath [required: <1.0.0,>=0.7.1, installed: 0.9.0]
    - python-dateutil [required: <3.0.0,>=2.1, installed: 2.6.0]
      - six [required: >=1.5, installed: 1.10.0]
  - colorama [required: >=0.2.5,<=0.3.7, installed: 0.3.7]
  - docutils [required: >=0.10, installed: 0.12]
  - rsa [required: >=3.1.2,<=3.5.0, installed: 3.4.2]
    - pyasn1 [required: >=0.1.3, installed: 0.1.9]
  - s3transfer [required: <0.2.0,>=0.1.0, installed: 0.1.9]
    - botocore [required: <2.0.0,>=1.3.0, installed: 1.4.81]
      - docutils [required: >=0.10, installed: 0.12]
      - jmespath [required: <1.0.0,>=0.7.1, installed: 0.9.0]
      - python-dateutil [required: <3.0.0,>=2.1, installed: 2.6.0]
        - six [required: >=1.5, installed: 1.10.0]
    - futures [required: <4.0.0,>=2.2.0, installed: 3.0.5]
libxml2-python==2.9.3
nose==1.3.7
nose-machineout2==0.5.1
pipdeptree==0.8.0
  - pip [required: >=6.0.0, installed: 9.0.1]
setuptools==3.6
yum-metadata-parser==1.1.4

I expected that pip would honor the pinning to botocore==1.4.57 since that's more restrictive, and within range, of <1.5.0.

[lingrlongr]

Hmph. This is expected behavior. :(

• https://pip.pypa.io/en/stable/user_guide/#requirements-files
• Issue pip needs a dependency resolver #988

[pradyunsg]

This is expected behavior.

This is a bug.

---

This issue is a duplicate of #775, which is tracked in #988. This issue may be closed as a duplicate of #988.

[dstufft]

Closing as a duplicate of #988.

[lock]

This thread has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.