radar

ONE Sentinel

smart_toyAI/PROMPT ENGINEERING

What's new in pip 26.1 - lockfiles and dependency cooldowns!

sourceSimon Willison
calendar_todayApril 28, 2026
schedule1 min read
lightbulb

EXECUTIVE SUMMARY

Pip 26.1 Unveils Essential Upgrades for Python Dependency Management

Summary

Pip 26.1 introduces significant enhancements to Python's package management tool, including lockfiles and dependency cooldowns. The update drops support for Python 3.9, which reached end-of-life in October 2022.

Key Points

  • New version: Pip 26.1, released with key upgrades.
  • Drops support for Python 3.9, which has been EOL since October 2022.
  • Introduces lockfiles, allowing users to manage dependencies more effectively.
  • Example command: `pip lock datasette llm` generates a `pylock.toml` file with 519 lines of dependencies.
  • New feature: Dependency cooldowns using the `--uploaded-prior-to PXD` option, where X is the number of days.
  • Example command: `pip install llm --uploaded-prior-to P4D` to install versions at least 4 days old.
  • Latest version of LLM is 0.31, released three days prior to the article.

Analysis

The introduction of lockfiles and dependency cooldowns in Pip 26.1 is a significant advancement for Python developers, enhancing the management of package dependencies and improving security in supply chains. Dropping support for older Python versions ensures that developers can leverage the latest features and improvements.

Conclusion

IT professionals should adopt Pip 26.1 to take advantage of its new features for better dependency management. Transitioning away from Python 3.9 is also recommended to ensure compatibility and security in their projects.