Ability to set desired version of pip, or to not update it at all

[bodgit]

Description:

It would be useful if there was a way to either set the desired version of pip, or to stop it from being updated to the latest version.

Justification:

I need to make use of the PIP_USE_FEATURE=truststore ability which is currently broken in the latest version 24.1 of pip, but worked fine in 24.0 and earlier.

My Python workflows are now broken until a new version of pip is made available as I can't seemingly stop this action from always updating pip to the latest version.

Are you willing to submit a PR?

Yes.

[bodgit]

pypa/pip#12779 for the pip bug affecting 24.1.

[aparnajyothi-y]

Hello @bodgit, Thank you for creating this issue and we will look into it :)

[rafal-pomocnik-captivateiq]

+1 for the need, currently overcoming by having pip install --upgrade pip==24.0 right after python setup action

[aparnajyothi-y]

Hello Everyone, Thank you for your feature request. After careful consideration, An option to set a specific pip version can be implemented as part of the future enhancements, but it will be an opt-in feature. However, we will not allow users to completely prevent pip from updating. By default, we will always support the latest version of pip. If users choose to use an older version, they will be responsible for any breaking changes or security issues that may arise, and we will make this clear in our documentation.

We hope this solution strikes a balance between offering flexibility and maintaining the stability of workflows. We appreciate your understanding and encourage you to reach out if you have any further questions!

[aparnajyothi-y]

Hello @bodgit, Please let us know in case of any concerns/clarifications on the above.

[aparnajyothi-y]

Hello @bodgit, Please let us know in case of any concerns/clarifications on the above.