0

If I have an Azure Function that transfers files from an SFTP server to Azure blob storage (including making some data transformations) would it then be best practice to specify the versions of the python packages in the requirements.txt file like this?

azure-functions == 1.11.2
azure-identity == 1.10.0
azure-keyvault-secrets == 4.5.1
azure-storage-blob == 12.13.1
fabric == 2.7.1
pandas == 1.4.3

Or should I rather remove the specific version from the file like this?

azure-functions
azure-identity
azure-keyvault-secrets
azure-storage-blob
fabric
pandas

On one hand I assume that I would have higher reliability of the Azure function by including the version number, but on the other hand I would not get important security updates in newer versions (if applicable) by maintaining an older version of the python package when redeploying the Azure Function. Any thoughts on the best practice regarding this?

  • You might want to checkout this answer - https://stackoverflow.com/questions/55052434/does-python-requirements-file-have-to-specify-version – Grant Culp Nov 17 '22 at 04:49

0 Answers0