Commit 64f96e4d authored by Konstantinos Togias's avatar Konstantinos Togias
Browse files

ci: resolve hashed locks across the full supported Python range

parent 8bc16609

ci/README.md

+1 −1
Changes for ci/README.md: 1 added line, 1 removed line.
Original line number Diff line number Diff line
@@ -11,7 +11,7 @@ distribution hashes and packaged chart renders are retained as CI artifacts. 
Helm 3.18.6 is downloaded with its official archive checksum. Python 3.10,

3.11 and 3.13 run in scheduled and release pipelines using digest-pinned images.

Update tools.in, requirements.lock, runtime.lock and toolchain.json together.

Locks were compiled with `uv pip compile pyproject.toml ci/tools.in --universal

Locks were compiled with `uv pip compile pyproject.toml ci/tools.in --universal --python-version 3.10

--generate-hashes` (omit ci/tools.in for runtime.lock). Review dependency updates.



`python ci/security.py secrets` rejects new findings. The reviewed fingerprint

ci/requirements.lock

+54 −6
Changes for ci/requirements.lock: 54 added lines, 6 removed lines.
Original line number Diff line number Diff line 
# This file was autogenerated by uv via the following command:

#    uv pip compile pyproject.toml ci/tools.in --universal --generate-hashes -o ci/requirements.lock

#    uv pip compile pyproject.toml ci/tools.in --universal --python-version 3.10 --generate-hashes -o ci/requirements.lock

annotated-types==0.8.0 \

    --hash=sha256:13b2beaad985e05e2d6407ee4c4f35590b11f8d693a258a561055cac8f64cab7 \

    --hash=sha256:f072f4d804ea359e4eaf198b1af7a8b0943881a87f31bb764f8bf219bb9419e0
@@ -7,6 +7,10 @@ annotated-types==0.8.0 \ 
auto-mix-prep==0.2.0 \

    --hash=sha256:5e7d9c6e3fd73c49bf22a216e04d7249d529d8822f5ee3d25f3dcf6c982a92d6

    # via openop-tfsdk (pyproject.toml)

backports-tarfile==1.2.0 ; python_full_version < '3.12' and platform_machine != 'ppc64le' and platform_machine != 's390x' \

    --hash=sha256:77e284d754527b01fb1e6fa8a1afe577858ebe4e9dad8919e34c862cb399bc34 \

    --hash=sha256:d75e02c268746e1b8144c278978b6e98e85de6ad16f8e4b0844a154557eca991

    # via jaraco-context

black==24.8.0 \

    --hash=sha256:09cdeb74d494ec023ded657f7092ba518e8cf78fa8386155e4a03fdcc44679e6 \

    --hash=sha256:1f13f7f386f86f8121d76599114bb8c17b69d962137fc70efe56137727c7047e \
@@ -538,7 +542,11 @@ detect-secrets==1.5.0 \ 
    --hash=sha256:6bb46dcc553c10df51475641bb30fd69d25645cc12339e46c824c1e0c388898a \

    --hash=sha256:e24e7b9b5a35048c313e983f76c4bd09dad89f045ff059e354f9943bf45aa060

    # via -r ci/tools.in

dnspython==2.9.0 \

dnspython==2.8.0 ; python_full_version < '3.11' \

    --hash=sha256:01d9bbc4a2d76bf0db7c1f729812ded6d912bd318d3b1cf81d30c0f845dbf3af \

    --hash=sha256:181d3c6996452cb1189c4046c61599b84a5a86e099562ffde77d26984ff26d0f

    # via pymongo

dnspython==2.9.0 ; python_full_version >= '3.11' \

    --hash=sha256:9a4aedb833c3c1b49214d04d44d3032ab7a9135f7c1d29a549b4ff78fd82fda9 \

    --hash=sha256:b44dc6b18f07a8b1c56676a19fbfdb5209415b046a9cece286baafa87ff3f7f1

    # via pymongo
@@ -550,7 +558,15 @@ durationpy==0.11 \ 
    --hash=sha256:181898e1ae282e288f0a2291829656bf1b6b3aadf30a97993b85db4943642905 \

    --hash=sha256:a739fe2b8972c250ff72f8e2c488d18cf25f7b852f49ee76048775d5171df30c

    # via kubernetes

filelock==4.2.4 \

exceptiongroup==1.3.1 ; python_full_version < '3.11' \

    --hash=sha256:8b412432c6055b0b7d14c310000ae93352ed6754f70fa8f7c34141f91c4e3219 \

    --hash=sha256:a7a39a3bd276781e98394987d3a5701d0c4edffb633bb7a5144577f82c773598

    # via pytest

filelock==4.1.0 ; python_full_version < '3.11' \

    --hash=sha256:2ce9818e3e2d8f284c1a964414447ef148d42a5fd5e2a477a7118e574b293ec1 \

    --hash=sha256:ad7f724afef953e731b1cc39bcd3a09166d72ed7fcdf29e6e88b1c3235c6715d

    # via cachecontrol

filelock==4.2.4 ; python_full_version >= '3.11' \

    --hash=sha256:301241438c57936ef93f4243a94f2559022268bfcf9b375a9a72eb0f8db8358e \

    --hash=sha256:c6d8663535e1650ee430507b4ffbac7b464dd64b7647ea0112a9f406499d163d

    # via cachecontrol
@@ -570,6 +586,12 @@ idna==3.20 \ 
    --hash=sha256:a7db850025b95ded1eae8a46181a1a6c56c92c96f0e2b005d9ff8dc0210cab44 \

    --hash=sha256:ab7ae7122974553370f0bdb919e1a960b2cd1bc1ef0276416d896db81c14582c

    # via requests

importlib-metadata==9.0.1 ; (python_full_version < '3.10.2' and platform_machine == 'ppc64le') or (python_full_version < '3.10.2' and platform_machine == 's390x') or (python_full_version < '3.12' and platform_machine != 'ppc64le' and platform_machine != 's390x') \

    --hash=sha256:ab830580bc0ef3db61ce8fae716389e5462b67e033018bab6d8f80ef17172f99 \

    --hash=sha256:bba5600596a7e21f3eef53281cf28d6a5195634d2f2b78ff9501a3272c6eaab0

    # via

    #   build

    #   keyring

iniconfig==2.3.1 \

    --hash=sha256:67f4b9c50da0dedf52af349e7749a80a9057a5031199791b906c3bb3ae878960 \

    --hash=sha256:9121e2c1fdb355232495be3194c8dfe87ccc2d5dee45947b78e68f499790d7a7
@@ -759,7 +781,13 @@ mdurl==0.1.2 \ 
    --hash=sha256:84008a41e51615a49fc9966191ff91509e3c40b939176e643fd50a5c2196b8f8 \

    --hash=sha256:bb413d29f5eea38f31dd4754dd7377d4465116fb207585f97bf925588687c1ba

    # via markdown-it-py

more-itertools==11.2.1 ; platform_machine != 'ppc64le' and platform_machine != 's390x' \

more-itertools==11.1.0 ; python_full_version < '3.11' and platform_machine != 'ppc64le' and platform_machine != 's390x' \

    --hash=sha256:48e8f4d9e7e5878571ecf6f2b4e57634f93cd474cc8cfbd2376f2d11b396e30d \

    --hash=sha256:4b65538ae22f6fed0ce4874efd317463a7489796a0939fa66824dd542125a192

    # via

    #   jaraco-classes

    #   jaraco-functools

more-itertools==11.2.1 ; python_full_version >= '3.11' and platform_machine != 'ppc64le' and platform_machine != 's390x' \

    --hash=sha256:35a7377edd1dd6608dcb2cdf534ded55ea32d49448875ad042cd3f879fb1ded0 \

    --hash=sha256:cbf08fd0af284dc69718b9b76a8e6203df624d70209ea511e4219d350c856f63

    # via
@@ -976,7 +1004,13 @@ pip-requirements-parser==32.0.1 \ 
    --hash=sha256:4659bc2a667783e7a15d190f6fccf8b2486685b6dba4c19c3876314769c57526 \

    --hash=sha256:b4fa3a7a0be38243123cf9d1f3518da10c51bdb165a2b2985566247f9155a7d3

    # via pip-audit

platformdirs==4.13.5 \

platformdirs==4.12.4 ; python_full_version < '3.11' \

    --hash=sha256:63743c02414e755de4e31b8f68125c1407495b86c5a006e203c01ff8b9924250 \

    --hash=sha256:78bfb9db2a8471ed7eebe3c3c932da413911042994e699b384fbb4493fa872d7

    # via

    #   black

    #   pip-audit

platformdirs==4.13.5 ; python_full_version >= '3.11' \

    --hash=sha256:05831adf87d392760f4b5c3a0a95579ab5a10b18b9b9bd43680dcb47544788a0 \

    --hash=sha256:53d3ec4280b815c1e0b02edad7f9ee8fda1ba9c0865dd9c2e6e63849ce82fc1e

    # via
@@ -1430,7 +1464,13 @@ tomli==2.5.0 \ 
    --hash=sha256:f4b653094e18f9031102d3a1da5c729c8f222d85225b18037dac621695e46e1a \

    --hash=sha256:f79203b3965b4000e91808aaa7c040206093f2b8bf86f455982f2274c9ccf442 \

    --hash=sha256:fd4dc129784e0c5335bd4e61dfcc4487499a013419e655cf2da1d091b7e0efdc

    # via pip-audit

    # via

    #   black

    #   build

    #   coverage

    #   mypy

    #   pip-audit

    #   pytest

tomli-w==1.2.0 \

    --hash=sha256:188306098d013b691fcadc011abd66727d3c414c571bb01b1a174ba8c983cf90 \

    --hash=sha256:2dd14fac5a47c27be9cd4c976af5a12d87fb1f0b4512f81d69cce3b35ae25021
@@ -1443,10 +1483,14 @@ typing-extensions==4.16.0 \ 
    --hash=sha256:481caa481374e813c1b176ada14e97f1f67a4539ce9cfeb3f350d78d6370c2e8 \

    --hash=sha256:dc983d19a509c94dba722ee6abd33940f7c05a89e243c47e907eb4db6f1a43e5

    # via

    #   black

    #   cryptography

    #   exceptiongroup

    #   mypy

    #   pydantic

    #   pydantic-core

    #   pydantic-extra-types

    #   structlog

    #   typing-inspection

typing-inspection==0.4.4 \

    --hash=sha256:547274fa6b0a561ccf549cc9524b999a578e737d015d8709d021f9d0d13bea47 \
@@ -1468,3 +1512,7 @@ wheel==0.45.1 \ 
    --hash=sha256:661e1abd9198507b1409a20c02106d9670b2576e916d58f520316666abca6729 \

    --hash=sha256:708e7481cc80179af0e556bbf0cc00b8444c7321e2700b8d8580231d13017248

    # via -r ci/tools.in

zipp==4.1.1 ; (python_full_version < '3.10.2' and platform_machine == 'ppc64le') or (python_full_version < '3.10.2' and platform_machine == 's390x') or (python_full_version < '3.12' and platform_machine != 'ppc64le' and platform_machine != 's390x') \

    --hash=sha256:7ebb7a44c021b29fd8dbd7cce6812d0d7b5b454521f93cc71af6ccd155aaa70b \

    --hash=sha256:8979f52d874162f485ff2981e3891f3a3317b7a3dd43ff1e1775b9304f307a9c

    # via importlib-metadata

ci/runtime.lock

+8 −2
Changes for ci/runtime.lock: 8 added lines, 2 removed lines.
Original line number Diff line number Diff line 
# This file was autogenerated by uv via the following command:

#    uv pip compile pyproject.toml --universal --generate-hashes -o ci/runtime.lock

#    uv pip compile pyproject.toml --universal --python-version 3.10 --generate-hashes -o ci/runtime.lock

annotated-types==0.8.0 \

    --hash=sha256:13b2beaad985e05e2d6407ee4c4f35590b11f8d693a258a561055cac8f64cab7 \

    --hash=sha256:f072f4d804ea359e4eaf198b1af7a8b0943881a87f31bb764f8bf219bb9419e0
@@ -358,7 +358,11 @@ cryptography==50.0.2 \ 
    --hash=sha256:fa8f5efb344d6908a1ce62f4a24e2e5780f825d6f53f5f50ec5ffacac72936cb \

    --hash=sha256:fdd28f912fccfec1846a94e2e1e8f9b0012f557f0c46fe4f3eb0d7a87afcf90b

    # via google-auth

dnspython==2.9.0 \

dnspython==2.8.0 ; python_full_version < '3.11' \

    --hash=sha256:01d9bbc4a2d76bf0db7c1f729812ded6d912bd318d3b1cf81d30c0f845dbf3af \

    --hash=sha256:181d3c6996452cb1189c4046c61599b84a5a86e099562ffde77d26984ff26d0f

    # via pymongo

dnspython==2.9.0 ; python_full_version >= '3.11' \

    --hash=sha256:9a4aedb833c3c1b49214d04d44d3032ab7a9135f7c1d29a549b4ff78fd82fda9 \

    --hash=sha256:b44dc6b18f07a8b1c56676a19fbfdb5209415b046a9cece286baafa87ff3f7f1

    # via pymongo
@@ -690,9 +694,11 @@ typing-extensions==4.16.0 \ 
    --hash=sha256:481caa481374e813c1b176ada14e97f1f67a4539ce9cfeb3f350d78d6370c2e8 \

    --hash=sha256:dc983d19a509c94dba722ee6abd33940f7c05a89e243c47e907eb4db6f1a43e5

    # via

    #   cryptography

    #   pydantic

    #   pydantic-core

    #   pydantic-extra-types

    #   structlog

    #   typing-inspection

typing-inspection==0.4.4 \

    --hash=sha256:547274fa6b0a561ccf549cc9524b999a578e737d015d8709d021f9d0d13bea47 \

requirements.txt

+1 −1
Changes for requirements.txt: 1 added line, 1 removed line.
Original line number Diff line number Diff line
@@ -86,7 +86,7 @@ pyproject_hooks==1.2.0 
pytest==8.3.2

pytest-cov==6.0.0

python-dateutil==2.9.0.post0

PyYAML==6.0.2

PyYAML==6.0.3

pyzmq==26.4.0

readme_renderer==44.0

referencing==0.36.2