diff --git a/docs/standard.md b/docs/standard.md index 76628d3..9f20a7c 100644 --- a/docs/standard.md +++ b/docs/standard.md @@ -260,6 +260,14 @@ scheduled `pytest` already catches the newest releases, which are what users ins transitive dependencies at their newest exposes a pull request to an upstream release it did not cause, but `install` upgrades the lockfile ([JF1](#JF1)), so `pytest` carries the same exposure. +Before pushing a change that raises a dependency floor, the author SHOULD run both steps locally on +the floor Python and the newest. If the new floor needs a newer version of another direct dependency +than the repo declares, the compile step fails to resolve. Raise that dependency's floor to the +version required. + +*Why:* a new floor's own requirements can sit above another direct floor. `pytest` resolves every +dependency at its newest and never meets the conflict, so only this job catches it. + ### CI7 ยท `links` job { #CI7 } The `links` job MUST run [lychee](https://github.com/lycheeverse/lychee-action) with `--offline`,