#4019 closed defect (fixed)

The tox-based jobs that run on CircleCI don't hold their dependencies fixed

Reported by: exarkun Owned by: GitHub <noreply@…>
Priority: normal Milestone: undecided
Component: unknown Version: n/a
Keywords: Cc:
Launchpad Bug:

Description

For some jobs run on CircleCI, we build Docker images that have a snapshot of dependencies pre-installed. However, when it comes time to create the virtualenv, we don't force pip to limit itself to the contents of the Docker image.

There is a comment saying this is to support installing development versions of dependencies for "upcoming-deprecations". However, we no longer run such a job on our CI so we can stop pip from using an index now and make it use only the dependencies in the image.

This will increase build reproducibility.

Change History (3)

comment:1 Changed at 2023-05-01T16:47:03Z by GitHub <noreply@…>

  • Owner set to GitHub <noreply@…>
  • Resolution set to fixed
  • Status changed from new to closed

In 4edf98b/trunk:

Merge pull request #1295 from exarkun/restrict-ci-to-wheelhouse

Restrict ci to wheelhouse

Fixes ticket:4019
Fixes ticket:4020

comment:2 Changed at 2024-06-20T21:48:30Z by Florian Sesser <florian@…>

In 5f4d5de7/trunk:

Move GBS specification

... from 'docs/proposed' to 'docs/specification'.

Fixes ticket:4019

comment:3 Changed at 2024-06-21T13:48:12Z by hacklschorsch

Sorry for the noise, my PR had the wrong issue number :/ Moving the GBS spec closed ticket:4099.

Note: See TracTickets for help on using tickets.