Add lockfile to MLServer

[adriangonz]

trafficstars

To better support use cases where mlserver is used as a library, we shouldn't restrict the dependencies versions too much. Instead, we should look into adding some sort of lockfile (e.g. through Poetry or Conda) that locks the versions in the Docker image (so that the "app-level" environment is kept consistent).

[PaulEdwardBrennan]

Hi Adrian. Can you please give some more detailed explanation on what's involved here. Thank you.

[adriangonz]

Hey @PaulEdwardBrennan ,

This would involve adding a lock file which specifies the exact deps and subdeps that are shipped within each MLServer image. This ensures reproducibility, as well as avoiding scenarios where a subdep of a subdep introduces a breaking change. To achieve this, we'll most likely leverage Poetry.

Do you have any particular questions around this one?

[RafalSkolasinski]

I am gonna look into this one in following days

[RafalSkolasinski]

@adriangonz should we pull it onto one of the projects? Like v1.1.x or v1.2.x?

[adriangonz]

Good point! Let me pull that into v1.1.x.