The pantsbuild/pants repo (rather than consumers) has unpinned deps

[stuhood]

The pants script in the pantsbuild/pants repo builds a venv directly from an unpinned requirements.txt file: this means that it can bootstrap non-deterministically.

As an example: strawberry transitively depends on pydantic, which depends on typing-extensions. One of those dependency edges floats, which recently caused the 2.13.x branch to fail to bootstrap with:

ERROR: pydantic 1.10.2 has requirement typing-extensions>=4.1.0, but you'll have typing-extensions 4.0.1 which is incompatible.

[stuhood]

One way to resolve this might be to create the venv that we use directly from the 3rdparty/python/user_reqs.lock lockfile, via PEX.