Skip to content

[pull] main from astral-sh:main - #252

Merged
pull[bot] merged 2 commits into
Moshbbab:mainfrom
astral-sh:main
Sep 20, 2026
Merged

pull[bot] merged 2 commits into
Moshbbab:mainfrom
astral-sh:main

Conversation

@pull

@pull pull Bot commented Sep 20, 2026

Copy link
Copy Markdown

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.4)

Can you help keep this open source service alive? 💖 Please sponsor : )

mmustafasenoglu and others added 2 commits September 19, 2026 15:41
Related to #20852 and follow-up to #21270.

The `trampoline_repro_changed` filter in `plan.yml` watches
`rust-toolchain.toml`, `.rs` sources and the prebuilt `trampolines/`
binaries, but not `crates/uv-trampoline/Dockerfile`. Since the
Dockerfile pins `RUST_NIGHTLY` (currently `nightly-2026-03-11`, matching
the toolchain file), a Dockerfile-only change would skip the
reproducibility check while altering the build environment. This adds
the Dockerfile to the filter so such changes trigger
`test_windows_trampoline_check_binary`.
When `dependency-metadata` adds dependencies to an already installed
package, we can incorrectly treat the environment as satisfied because
the install fast path reads the wheel's original metadata. For example,
requesting an extra added by configured metadata can succeed without
installing its dependencies. Removing published dependencies through
configured metadata can also cause repeated resolution of an otherwise
satisfied environment.

Use matching configured metadata when traversing installed dependencies,
falling back to the distribution's metadata when no entry matches. Pass
the metadata through the shared checks used by pip installs, project
environments, and tools. Extra markers, overrides, exclusions, and
`--no-deps` continue to apply to that traversal.
@pull pull Bot locked and limited conversation to collaborators Sep 20, 2026
@pull pull Bot added the ⤵️ pull label Sep 20, 2026
@pull
pull Bot merged commit 7b090fb into Moshbbab:main Sep 20, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants