How PEP 440 Local Versions Can Quietly Break Your == Dependency Pins

Why your exact package versions aren’t as safe as you think — and how modern tools like uv change the rules.