From b29dcb6b2a6f928f1f0558dad0cca8ebd7757e53 Mon Sep 17 00:00:00 2001 From: Ned Batchelder Date: Sun, 26 Mar 2023 07:53:05 -0400 Subject: [PATCH] build: no longer use hashed pins #1592 --- .github/workflows/coverage.yml | 2 +- .github/workflows/kit.yml | 4 ++-- .github/workflows/python-nightly.yml | 2 +- .github/workflows/quality.yml | 4 ++-- .github/workflows/testsuite.yml | 2 +- CHANGES.rst | 3 +++ Makefile | 2 +- 7 files changed, 11 insertions(+), 8 deletions(-) diff --git a/.github/workflows/coverage.yml b/.github/workflows/coverage.yml index 6404a7c21..60e8d0a29 100644 --- a/.github/workflows/coverage.yml +++ b/.github/workflows/coverage.yml @@ -85,7 +85,7 @@ jobs: set -xe python -VV python -m site - python -m pip install --require-hashes -r requirements/tox.pip + python -m pip install -r requirements/tox.pip - name: "Run tox coverage for ${{ matrix.python-version }}" env: diff --git a/.github/workflows/kit.yml b/.github/workflows/kit.yml index ec3750e68..179f7a649 100644 --- a/.github/workflows/kit.yml +++ b/.github/workflows/kit.yml @@ -155,7 +155,7 @@ jobs: - name: "Install tools" run: | - python -m pip install --require-hashes -r requirements/kit.pip + python -m pip install -r requirements/kit.pip - name: "Build wheels" env: @@ -192,7 +192,7 @@ jobs: - name: "Install tools" run: | - python -m pip install --require-hashes -r requirements/kit.pip + python -m pip install -r requirements/kit.pip - name: "Build sdist" run: | diff --git a/.github/workflows/python-nightly.yml b/.github/workflows/python-nightly.yml index c2ba98e60..94a30ecc2 100644 --- a/.github/workflows/python-nightly.yml +++ b/.github/workflows/python-nightly.yml @@ -81,7 +81,7 @@ jobs: - name: "Install dependencies" run: | - python -m pip install --require-hashes -r requirements/tox.pip + python -m pip install -r requirements/tox.pip - name: "Run tox" run: | diff --git a/.github/workflows/quality.yml b/.github/workflows/quality.yml index 0901d5caa..9ee690df9 100644 --- a/.github/workflows/quality.yml +++ b/.github/workflows/quality.yml @@ -46,7 +46,7 @@ jobs: - name: "Install dependencies" run: | - python -m pip install --require-hashes -r requirements/tox.pip + python -m pip install -r requirements/tox.pip - name: "Tox lint" run: | @@ -97,7 +97,7 @@ jobs: set -xe python -VV python -m site - python -m pip install --require-hashes -r requirements/tox.pip + python -m pip install -r requirements/tox.pip - name: "Tox doc" run: | diff --git a/.github/workflows/testsuite.yml b/.github/workflows/testsuite.yml index e560325c8..b0f0ee6ca 100644 --- a/.github/workflows/testsuite.yml +++ b/.github/workflows/testsuite.yml @@ -73,7 +73,7 @@ jobs: set -xe python -VV python -m site - python -m pip install --require-hashes -r requirements/tox.pip + python -m pip install -r requirements/tox.pip # For extreme debugging: # python -c "import urllib.request as r; exec(r.urlopen('https://bit.ly/pydoctor').read())" diff --git a/CHANGES.rst b/CHANGES.rst index 51d6bead2..c7aca9073 100644 --- a/CHANGES.rst +++ b/CHANGES.rst @@ -25,8 +25,11 @@ Unreleased dramatically smaller. This closes `issue 1584`_ thanks to `Oleh Krehel `_. +- Development dependencies no longer use hashed pins, closing `issue 1592`_. + .. _issue 1584: https://github.com/nedbat/coveragepy/issues/1584 .. _pull 1587: https://github.com/nedbat/coveragepy/pull/1587 +.. _issue 1592: https://github.com/nedbat/coveragepy/issues/1592 .. scriv-start-here diff --git a/Makefile b/Makefile index 1adda37b8..ca33e6f8d 100644 --- a/Makefile +++ b/Makefile @@ -85,7 +85,7 @@ metasmoke: .PHONY: upgrade -PIP_COMPILE = pip-compile --upgrade --allow-unsafe --generate-hashes --resolver=backtracking +PIP_COMPILE = pip-compile --upgrade --allow-unsafe --resolver=backtracking upgrade: export CUSTOM_COMPILE_COMMAND=make upgrade upgrade: ## Update the *.pip files with the latest packages satisfying *.in files. pip install -q -r requirements/pip-tools.pip