python-poetry/poetry

{{% note %}} The group options determine which dependency groups are installed or synchronized in the environment. They do not limit resolution of the lock file: poetry.lock keeps one consistent solution for all declared groups, so packages that belong to an excluded group can still change. To restrict which packages Poetry updates, pass their names to the command. {{% /note %}}

The application ignores your library's lock file. It can use whatever dependency version meets the constraints in your pyproject.toml. The application will probably use the latest compatible dependency version. If your library's poetry.lock falls behind some new dependency version that breaks things for your users, you're likely to be the last to find out about it.

If you do not want to give up the reproducibility and performance benefits, consider a regular refresh of poetry.lock to stay up-to-date and reduce the risk of sudden breakage for users.