Skip to content

Use HTTPS for OGB-LSC git dependencies - #757

Open
sylvesterkaczmarek wants to merge 1 commit into
google-deepmind:masterfrom
sylvesterkaczmarek:fix/ogb-lsc-https-git-dependencies
Open

sylvesterkaczmarek wants to merge 1 commit into
google-deepmind:masterfrom
sylvesterkaczmarek:fix/ogb-lsc-https-git-dependencies

Conversation

@sylvesterkaczmarek

Copy link
Copy Markdown

Summary

Fix OGB-LSC MAG dependency installation where the requirements file still uses the unauthenticated git:// transport for Graph Nets and Jraph.

The failing path reported in #392 comes from pip invoking git clone through git://github.com/.... The repositories are available through HTTPS and have since moved to the google-deepmind organization.

This change:

  • replaces the Graph Nets git:// URL with its canonical HTTPS clone URL
  • replaces the Jraph git:// URL with its canonical HTTPS clone URL
  • preserves both exact pinned commit SHAs
  • leaves all package versions and other dependencies unchanged

Fixes #392.

Validation

Verified that both canonical repositories exist and that the pinned commits are present:

  • Graph Nets: 64771dff0d74ca8e77b1f1dcd5a7d26634356d61
  • Jraph: 80d2f9e4d82f841a71d56ba44fa9e8781e93ae1f

A full legacy OGB-LSC environment installation was not run, so no full installation pass is claimed.

The final branch is based directly on current upstream master, contains one commit (edb99101ea40ebbcf9270d1f6e6b26b9473ac68f), and changes only two lines in ogb_lsc/mag/requirements.txt.

@polarbe

polarbe commented Aug 23, 2026 via email

Copy link
Copy Markdown

@sylvesterkaczmarek

Copy link
Copy Markdown
Author

Could a maintainer review the HTTPS URLs for OGB-LSC Git dependencies and arrange a fresh approved workflow run? The previous security run ended with no jobs after 30 days, which looks like expired approval.

@polarbe

polarbe commented Oct 7, 2026 via email

Copy link
Copy Markdown

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Cannot install these packages of MAG of ogb_lsc

2 participants