Skip to content

DO NOT MERGE: prove python-pins goes red - #11

Closed
aaronelliotross wants to merge 2 commits into
mainfrom
python-pins-redcase
Closed

DO NOT MERGE: prove python-pins goes red#11
aaronelliotross wants to merge 2 commits into
mainfrom
python-pins-redcase

Conversation

@aaronelliotross

Copy link
Copy Markdown
Collaborator

Throwaway branch, closed unmerged once it goes red.

Adds a Dockerfile on python:3.14-slim against a manifest that resolves to 3.11 — the exact shape of the drift that walked seven repos onto 3.14 with green builds. Demonstrates that ci actually fails on a disagreement rather than passing everything.

Expected: ci red with Python version disagrees: 3.11 in pyproject.toml (requires-python), uv.lock (uv.lock); 3.14 in Dockerfile (dockerfile).

requires-python stays ">=3.11" on purpose. Six repos import this library from an
unpinned git URL and they span 3.11 to 3.14, so no single ==X.Y.* satisfies all
of them: ==3.11.* would break every 3.14 consumer's lock and ==3.14.* would break
fundraiser-api's. The `library` role opts out of the ==X.Y.* form rule only --
the values still have to agree with each other.

Adds a ci.yml as well; this repo had no PR gate at all.

The action ref is pinned to a ci-workflows commit rather than @v14 because v14
has not been moved yet -- this PR is the first real-repo trial of the check.
Switch to @v14 before merge.

See docs/python-pins.md in WeMoveEU/dependency-policy.
Do not merge. A Dockerfile on python:3.14 against a manifest resolving to 3.11 --
the exact shape of the drift that hit seven repos. This branch exists only to
show that ci fails on it, and gets closed unmerged.
@aaronelliotross

Copy link
Copy Markdown
Collaborator Author

Proved what it set out to prove: ci went red in 6s with Python version disagrees: 3.11 in pyproject.toml (requires-python), uv.lock (uv.lock); 3.14 in Dockerfile (dockerfile). Closing unmerged.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant