inventree/InvenTree
2
0
Fork 0
mirror of https://github.com/inventree/InvenTree.git synced 2025-06-13 18:45:40 +00:00
Code Activity

Pin hashes in requirements (#7081)

Browse Source 
* use global pin for requests

* unify on yaml for workflo files

* format workflow files

* pin action versions

* fix pinned version

* use system venv

* switch args

* remove uv for now and add setting for pyyaml

* use requirements file

* also switch on docker flow

* generate hashes

* added hashes to reqs

* add hashes for CI too

* add hash checking

* require hashes everywhere possible

* require hashes where possible in docker
This commit is contained in:
Matthias Mair
2024-04-23 09:15:52 +02:00
committed by GitHub
parent 3e52e5fd69
commit 938c724395
14 changed files with 1952 additions and 198 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
tasks.py
View File

@ -237,12 +237,12 @@ def install(c, uv=False):
c.run('pip3 install --upgrade pip')
c.run('pip3 install --upgrade setuptools')
c.run(
'pip3 install --no-cache-dir --disable-pip-version-check -U -r src/backend/requirements.txt'
'pip3 install --no-cache-dir --disable-pip-version-check -U --require-hashes -r src/backend/requirements.txt'
)
else:
c.run('pip3 install --upgrade uv')
c.run('uv pip install --upgrade setuptools')
c.run('uv pip install -U -r src/backend/requirements.txt')
c.run('uv pip install -U --require-hashes -r src/backend/requirements.txt')
# Run plugins install
plugins(c, uv=uv)
@ -260,7 +260,7 @@ def setup_dev(c, tests=False):
print("Installing required python packages from 'src/backend/requirements-dev.txt'")
# Install required Python packages with PIP
c.run('pip3 install -U -r src/backend/requirements-dev.txt')
c.run('pip3 install -U --require-hashes -r src/backend/requirements-dev.txt')
# Install pre-commit hook
print('Installing pre-commit for checks before git commits...')