debug: change package installation mechanism

Signed-off-by: Cagri Yonca <cagri@ibm.com>

Author: CagriYonca

.circleci/pin_safe_versions.py

@@ -117,22 +117,34 @@ def main() -> None:
             continue
 
         installed_date = next((d for v, d in releases if v == installed_ver), None)
-        if installed_date is None or installed_date <= grace_cutoff:
-            continue
-
+        
+        # Get the safe version (passed grace period)
         safe_ver, safe_date = _get_safe_version(releases)
+        
+        # If no safe version exists, skip
         if safe_ver is None:
+            continue
+        
+        # If installed version is within grace period, downgrade to safe version
+        if installed_date is not None and installed_date > grace_cutoff:
             print(
-                f"[grace-period] {pkg}=={installed_ver} (released {installed_date}) "
-                f"is within grace period but no safe version exists — skipping"
+                f"[grace-period] {pkg}: {installed_ver} (released {installed_date}) "
+                f"→ pinning to {safe_ver} (released {safe_date})"
             )
-            continue
-
-        print(
-            f"[grace-period] {pkg}: {installed_ver} (released {installed_date}) "
-            f"→ pinning to {safe_ver} (released {safe_date})"
-        )
-        to_pin.append(f"{pkg}=={safe_ver}")
+            to_pin.append(f"{pkg}=={safe_ver}")
+        # If installed version is older than safe version, upgrade to safe version
+        elif installed_ver != safe_ver:
+            try:
+                from packaging.version import Version
+                if Version(installed_ver) < Version(safe_ver):
+                    print(
+                        f"[upgrade] {pkg}: {installed_ver} → {safe_ver} "
+                        f"(safe version available, grace period passed)"
+                    )
+                    to_pin.append(f"{pkg}=={safe_ver}")
+            except Exception:
+                # If version comparison fails, skip
+                pass
 
     if to_pin:
         print(f"\nPinning {len(to_pin)} package(s) to grace-period-safe versions...")