Bound Gitea CI dependency resolution

2026-08-05 15:16:09 +08:00
parent 8174edc10d
commit c1543bdb5c
2 changed files with 16 additions and 1 deletions
@@ -160,7 +160,13 @@ jobs:
          python3 -m venv .venv
          export PATH="$PWD/.venv/bin:$PATH"
          python -m pip install --upgrade pip
-          python -m pip install -r requirements.txt -r requirements-dev.txt playwright
+          python -m pip install \
+            "mcp==1.28.1" \
+            "pydantic==2.13.4" \
+            "numpy==2.5.1" \
+            "pandas==2.3.3" \
+            "timezonefinder==8.2.5" \
+            -r requirements.txt -r requirements-dev.txt playwright
          python -m playwright install --with-deps chromium
          npm ci --prefix frontend

@@ -130,6 +130,15 @@ test("Gitea quality gate validates before publishing an immutable ACR manifest",
  assert.equal((workflow.match(/git clean -ffdx/g) ?? []).length, 2);
  assert.equal((workflow.match(/git status --porcelain --untracked-files=all/g) ?? []).length, 2);
  assert.match(workflow, /python3 -m venv \.venv/);
+  for (const constraint of [
+    'mcp==1.28.1',
+    'pydantic==2.13.4',
+    'numpy==2.5.1',
+    'pandas==2.3.3',
+    'timezonefinder==8.2.5',
+  ]) {
+    assert.match(workflow, new RegExp(`"${constraint.replaceAll(".", "\\.")}"`));
+  }
  assert.match(workflow, /python -m playwright install --with-deps chromium/);
  assert.equal((workflow.match(/Acquire::https::Timeout=30 update/g) ?? []).length, 1);
  assert.match(workflow, /packages\+=\(docker-compose-v2\)/);