commit: 39d0e2368defe2de7e866504fe6f46b303e3c9b0
Author: Brian Harring <ferringb <AT> gmail <DOT> com>
AuthorDate: Sun Nov 9 12:57:09 2025 +0000
Commit: Brian Harring <ferringb <AT> gmail <DOT> com>
CommitDate: Sun Nov 9 12:57:09 2025 +0000
URL:
https://gitweb.gentoo.org/proj/pkgcore/pkgdev.git/commit/?id=39d0e236
chore: block VCS deps from usage in release
Signed-off-by: Brian Harring <ferringb <AT> gmail.com>
.github/workflows/release.yml | 11 +++++++++++
1 file changed, 11 insertions(+)
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index ffc56e7..989cb71 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -20,6 +20,17 @@ jobs:
- name: Checkout code
uses: actions/checkout@v4
+ - name: Reject any VCS dependencies
+ shell: python
+ run: |
+ import re, tomllib
+ manifest = tomllib.load(open('pyproject.toml', 'rb'))
+ deps = manifest['build-system']['requires']
+ deps.extend(manifest['project']['dependencies'])
+ if rejects := list(filter(re.compile(r'@[^+]+').search, deps)):
+ rejects = " \n".join(sorted(rejects))
+ raise Exception(f'VCS dependencies were detected in
[build-system]:\n {rejects}')
+
- name: Set up Python 3.13
uses: actions/setup-python@v5
with:
