498d876627
* feat(build): add locked reproducible wheel gate Build independently in clean source trees and virtualenvs, compare wheel bytes, and stage only verified canonical distributions. Safely clean recognized prior outputs on repeat runs. Part of #701 * ci(release): verify wheel reproducibility before publishing Run the shared gate in PR and tag workflows, preserve failure diagnostics, and keep verification artifacts out of release checksums. Make Snap Store publication wait for the gate and reuse the canonical distributions for PyPI. Part of #701 * docs(release): document reproducible wheel validation Describe the locked toolchain, canonical publication boundary, same-platform scope, diagnostic outputs, and safe automatic cleanup. * chore(scripts): update executable permissions * fix(build): isolate release tooling and preserve cleanup retries Exclude host site-packages from build-only virtualenvs so unlocked setuptools plugins cannot affect verified distributions. Delete staged artifacts before canonical ownership evidence to recover safely from interrupted cleanup. Add regression tests and document the build-only environment exception. * fix(release): make reproducible builds retryable and refresh tools Regenerate release build exports from uv.lock. Hold a checkout lock through cleanup and staging, and atomically rename complete archives into dist. Cover interrupted staging, competing processes, and lock release with regression tests. --------- Co-authored-by: Kanishk Pachauri <itskanishkp.py@gmail.com> Co-authored-by: sesav <1636488+sesav@users.noreply.github.com>
51 lines
1.8 KiB
Python
Executable File
51 lines
1.8 KiB
Python
Executable File
#!/usr/bin/env python3
|
|
"""Select committed requirement blocks without changing pins, markers or hashes.
|
|
|
|
The installer uses complete exports for normal installs and just pywhispercpp's
|
|
block for backend rebuilds. Missing exports or packages are errors, never an
|
|
empty successful install. Only the standard library is needed before bootstrap.
|
|
"""
|
|
|
|
from __future__ import annotations
|
|
|
|
import argparse
|
|
import re
|
|
from pathlib import Path
|
|
|
|
|
|
def select_requirements(source: Path, package: str | None = None) -> str:
|
|
"""Return an export, optionally retaining only one distribution's blocks."""
|
|
text = source.read_text(encoding="utf-8")
|
|
blocks = re.split(r"(?=^[A-Za-z0-9_.-]+==)", text, flags=re.MULTILINE)
|
|
requirements = blocks[1:]
|
|
if not requirements:
|
|
raise ValueError(f"No pinned requirements in {source}")
|
|
if package is not None:
|
|
normalize = lambda name: re.sub(r"[-_.]+", "-", name).lower()
|
|
requirements = [
|
|
block
|
|
for block in requirements
|
|
if normalize(block.split("==", 1)[0]) == normalize(package)
|
|
]
|
|
if not requirements:
|
|
raise ValueError(f"No pin for {package} in {source}")
|
|
return blocks[0] + "".join(requirements)
|
|
|
|
|
|
def main() -> None:
|
|
"""Write the selected export to the installer's scratch directory."""
|
|
parser = argparse.ArgumentParser(description=__doc__)
|
|
parser.add_argument("source", type=Path)
|
|
parser.add_argument("destination", type=Path)
|
|
parser.add_argument("--package")
|
|
args = parser.parse_args()
|
|
try:
|
|
text = select_requirements(args.source, args.package)
|
|
except (OSError, ValueError) as error:
|
|
parser.exit(1, f"Cannot install pinned dependencies: {error}\n")
|
|
args.destination.write_text(text, encoding="utf-8")
|
|
|
|
|
|
if __name__ == "__main__":
|
|
main()
|