Topic · Delivery & releases

Python dependencies & packaging for Django in production

Installing exactly the right packages everywhere: lock files, uv, Poetry, pip-tools, and upgrades.

the same install, every timerequirements.inwhat you choseLock fileexact + hashesCI and prodinstall exactlyUpdatesreviewed diffspip-tools, uv, and Poetry all follow this shape

Pinned dependencies make every install identical, from a laptop to CI to production. Without them, a release can change behaviour without a single line of your code changing.

The guides cover pip-tools with hashes, uv, Poetry, psycopg installation, and keeping dependencies updated without surprises.

4Set it up
2Run it well
2Check it
12Fix it

Set it up

Guides that take this from nothing to running in production.

  • Deploy Django with uv for Reproducible Installs

    Deploy Django reproducibly with uv: lockfiles, uv sync --locked without dev tools, managed Python, Docker layer caching, and CI checks.

  • Deploy Django with Poetry

    Deploy a Poetry-managed Django project: lock file checks, installing only main dependencies, in-project virtualenvs, multi-stage Docker builds without Poetry at runtime, and exporting requirements.

  • Pin Django Dependencies with pip-tools and Hashes

    Make Django installs reproducible and tamper-resistant with pip-tools: requirements.in, compiled pins with hashes, separate dev requirements, pip install --require-hashes, and safe upgrades.

  • uv vs Poetry vs pip for Django Deployments

    Compare uv, Poetry, and pip with pip-tools for managing Django dependencies in production: lock files, install speed in CI and Docker, reproducibility with hashes, Python version management, and migration paths between them.

Run it well

Tuning, reliability, and operations once it works.

Check it

Review lists to run before launch or after a change.

  • Django Version Upgrade Checklist for Production

    Upgrade Django in production safely: plan the target version, read release notes, fix deprecations, upgrade dependencies, test, deploy, and roll back if needed.

  • Django Dependency Security Checklist

    Secure the software supply chain of a Django app: supported Django versions, pinned and hashed dependencies, vulnerability scanning, private index safety, container image updates, CI action pinning, and SBOMs.

Fix it

Errors and symptoms, each traced to a cause and a fix.

Learning paths through this topic

Related topics