Have a way to pin pip versions

[twz123]

Description:
Pip is currently always updated to the latest version. This happens somewhere in the setup scripts in actions/python-versions. As far as I can tell, there's no way to skip that, or even better, pin pip to a specific version. Albeit one can downgrade pip again in a subsequent step, this seems like something to have as a proper feature: It would be cool if there's some means of doing this, e.g. via a new optional input parameter, or an OS environment variable.

Justification:
The recent pip 22.3 update from 2022-10-15 broke some builds. A manual downgrade to pip 22.2.2 solved it. Upgrading pip via separate PRs seems desirable for some folks (e.g. for me 🙂).

Are you willing to submit a PR?
Yes.

[dmitry-shibanov]

Hello @twz123. Thank you for your feature request. We'll investigate it.

[asottile-sentry]

one way to do this is to use the PIP_CONSTRAINT environment variable

[aparnajyothi-y]

Hello @twz123, Thank you for your feature request. After careful consideration, An option to set a specific pip version can be implemented as part of the future enhancements, but it will be an opt-in feature. However, we will not allow users to completely prevent pip from updating. By default, we will always support the latest version of pip. If users choose to use an older version, they will be responsible for any breaking changes or security issues that may arise, and we will make this clear in our documentation.

We hope this solution strikes a balance between offering flexibility and maintaining the stability of workflows. We appreciate your understanding and encourage you to reach out if you have any further questions!

[aparnajyothi-y]

Hello @twz123, Please let us know if you have any concerns/clarifications on the above

[aparnajyothi-y]

Hello @twz123, Please let us know if you have any concerns/clarifications on the above

[aparnajyothi-y]

Hello @twz123, We are proceeding to close the issue as we didn't hear anything from a long time. Please feel free to reach us in case of any concerns/clarifications :)