lambda functions built using pipenv now require >= 2022.8.13

docs/source/cfngin/hooks/aws_lambda.upload_lambda_functions.rst

@@ -30,6 +30,9 @@ This can be done by including the ``dockerize_pip`` configuration option which c
 
 Payloads are uploaded to either the |cfngin_bucket| or an explicitly specified bucket, with the object key containing it's checksum to allow repeated uploads to be skipped in subsequent runs.
 
+.. versionchanged:: 2.8.0
+  Use of pipenv now requires version ``>= 2022.8.13``.
+  This is the version that changed how ``requirements.txt`` files are generated.
 
 
 ****

docs/source/cfngin/hooks/awslambda.PythonFunction.rst

@@ -23,6 +23,10 @@ It also ensures that binary files built during the install process are compatibl
 
 .. versionadded:: 2.5.0
 
+.. versionchanged:: 2.8.0
+  Use of pipenv now requires version ``>= 2022.8.13``.
+  This is the version that changed how ``requirements.txt`` files are generated.
+
 
 
 ****

docs/source/cfngin/hooks/awslambda.PythonLayer.rst

@@ -21,6 +21,9 @@ It also ensures that binary files built during the install process are compatibl
 
 .. versionadded:: 2.5.0
 
+.. versionchanged:: 2.8.0
+  Use of pipenv now requires version ``>= 2022.8.13``.
+  This is the version that changed how ``requirements.txt`` files are generated.
 
 
 ****

pyproject.toml

@@ -45,7 +45,6 @@ gitpython = "*"
 igittigitt = ">=2.0.5"
 jinja2 = ">=2.7"  # used in runway.cfngin.blueprints.raw
 packaging = "*"  # component of setuptools needed for version compare
-pipenv = "2022.1.8"
 pyOpenSSL = "*"  # For embedded hook & associated script usage
 pydantic = "^2.8.0"
 pyhcl = "^0.4"  # does not support HCL2, possibly move to extras_require in the future
@@ -82,7 +81,7 @@ ruff = "^0.6.4"
 [tool.poetry.group.test.dependencies]
 coverage = {extras = ["toml"], version = "^7.6.1"}
 moto = {extras = ["ec2", "ecs", "iam", "s3", "ssm"], version = "^5.0.14"}
-pipenv = "^2022.1.8"  # only used in tests
+pipenv = "^2024.0.1"  # only used in tests
 pytest = "^8.3.3"
 pytest-cov = "^5.0.0"
 pytest-mock = "^3.14.0"

runway/cfngin/hooks/aws_lambda.py

@@ -354,14 +354,21 @@ def _handle_use_pipenv(
         sys.exit(1)
     LOGGER.info("creating requirements.txt from Pipfile...")
     req_path = os.path.join(dest_path, "requirements.txt")  # noqa: PTH118
-    cmd = ["pipenv", "lock", "--requirements", "--keep-outdated"]
+    cmd = ["pipenv", "requirements"]
+    environ = os.environ.copy()
+    environ["PIPENV_IGNORE_VIRTUALENVS"] = "1"
+
+    if not (Path(package_root) / "Pipfile.lock").is_file():
+        LOGGER.warning("Pipfile.lock does not exist! creating it...")
+        subprocess.check_call(["pipenv", "lock"], cwd=package_root, env=environ)
+
     if python_path:
         cmd.insert(0, python_path)
         cmd.insert(1, "-m")
     with (
         open(req_path, "w", encoding="utf-8") as requirements,  # noqa: PTH123
         subprocess.Popen(
-            cmd, cwd=package_root, stdout=requirements, stderr=subprocess.PIPE
+            cmd, cwd=package_root, env=environ, stdout=requirements, stderr=subprocess.PIPE
         ) as pipenv_process,
     ):
         _stdout, stderr = pipenv_process.communicate(timeout=timeout)

runway/dependency_managers/_pipenv.py

@@ -87,21 +87,23 @@ def export(self, *, dev: bool = False, output: StrPath) -> Path:
         """Export the lock file to other formats (requirements.txt only).
 
         The underlying command being executed by this method is
-        ``pipenv lock --requirements``.
+        ``pipenv requirements``.
 
         Args:
             dev: Include development dependencies.
             output: Path to the output file.
 
         """
+        environ = self.ctx.env.vars.copy()
+        environ["PIPENV_IGNORE_VIRTUALENVS"] = "1"
         output = Path(output)
+        if not (self.cwd / "Pipfile.lock").is_file():
+            LOGGER.warning("Pipfile.lock does not exist! creating it...")
+            self._run_command(self.generate_command("lock"), env=environ)
         try:
             result = self._run_command(
-                self.generate_command(
-                    "lock",
-                    dev=dev,
-                    requirements=True,
-                ),
+                self.generate_command("requirements", dev=dev),
+                env=environ,
                 suppress_output=True,
             )
         except subprocess.CalledProcessError as exc:

tests/functional/cfngin/hooks/test_awslambda/sample_app/src/docker_mysql/Pipfile

@@ -4,6 +4,6 @@
 mysqlclient = "==2.1.1"
 
 [[source]]
-name = "pypi"
+name = "pip_conf_index_global"
 url = "https://pypi.org/simple"
-verify_ssl = true
+verify_ssl = false

tests/functional/cfngin/hooks/test_awslambda/test_runner.py

@@ -38,10 +38,11 @@
 
 ENV_VARS = {
     "CI": "1",
-    "PYTHON_RUNTIME": PYTHON_RUNTIME,
+    "PIPENV_IGNORE_VIRTUALENVS": "1",
     "PIPENV_VENV_IN_PROJECT": "1",
     "PIPENV_VERBOSITY": "-1",
     "POETRY_VIRTUALENVS_IN_PROJECT": "true",
+    "PYTHON_RUNTIME": PYTHON_RUNTIME,
     "PYXMLSEC_STATIC_DEPS": "1",
 }
 

tests/unit/cfngin/hooks/test_awslambda.py

@@ -694,8 +694,9 @@ class TestHandleRequirements:
     """Test handle_requirements."""
 
     PIPFILE = (
-        '[[source]]\nurl = "https://pypi.org/simple"\nverify_ssl = true\nname = "pypi"\n'
-        "[packages]\n[dev-packages]"
+        '[[source]]\nurl = "https://pypi.org/simple"\nverify_ssl = false\n'
+        'name = "pip_conf_index_global"\n'
+        '[packages]\nurllib3 = "~=2.2"\n[dev-packages]'
     )
     REQUIREMENTS = "-i https://pypi.org/simple\n\n"
 
@@ -733,22 +734,7 @@ def test_explicit_pipenv(self, tmp_path: Path) -> None:
         assert req_path == str(requirements_txt)
         assert (tmp_path / "Pipfile.lock").is_file()
 
-        expected_text = [
-            "#",
-            "# These requirements were autogenerated by pipenv",
-            "# To regenerate from the project's Pipfile, run:",
-            "#",
-            "#    pipenv lock --requirements",
-            "#",
-            "",
-            "-i https://pypi.org/simple",
-            "",
-        ]
-        if platform.system() == "Windows":
-            expected_text.append("")
-            assert requirements_txt.read_text() == "\n".join(expected_text)
-        else:
-            assert requirements_txt.read_text() == "\n".join(expected_text) + "\n"
+        assert "urllib3==" in requirements_txt.read_text()
 
     def test_frozen_pipenv(
         self, caplog: pytest.LogCaptureFixture, monkeypatch: pytest.MonkeyPatch, tmp_path: Path
@@ -785,22 +771,7 @@ def test_implicit_pipenv(self, tmp_path: Path) -> None:
         assert req_path == str(requirements_txt)
         assert (tmp_path / "Pipfile.lock").is_file()
 
-        expected_text = [
-            "#",
-            "# These requirements were autogenerated by pipenv",
-            "# To regenerate from the project's Pipfile, run:",
-            "#",
-            "#    pipenv lock --requirements",
-            "#",
-            "",
-            "-i https://pypi.org/simple",
-            "",
-        ]
-        if platform.system() == "Windows":
-            expected_text.append("")
-            assert requirements_txt.read_text() == "\n".join(expected_text)
-        else:
-            assert requirements_txt.read_text() == "\n".join(expected_text) + "\n"
+        assert "urllib3==" in requirements_txt.read_text()
 
     def test_raise_not_implimented(self) -> None:
         """Test NotImplimentedError is raised when no requirements file."""