Frozen requirements for better reproducibility

🚀 Feature

It will be nice if In the napari repository (and sdist uploaded on pypi) there will be some requirements file with exactly pinned versions of all requirements (not only implicit, but also requirements of requirements).

Motivation

This simplify make reproducible environments if there is a need to setup old version of napari.

Pitch

Use pip-compile or another similar thing to freeze information about all required packages

Alternatives

Additional context

Something like: https://github.com/4DNucleome/PartSeg/blob/develop/requirements/requirements_pyinstaller.txt

[Czaki]

that is, napari can work with a ton of different library version combinations. how exactly do you propose we pick the versions in the lockfile

pip-compile when preparing a release.

[tlambert03]

I understand the point of a lockfile in general, what I’d like to know was:

can you clarify how we would determine this? would you want us to perhaps lock the CI environment that was tested on for that given release?

that is, napari can work with a ton of different library version combinations. how exactly do you propose we pick the versions in the lockfile