From 4bb50bed5810453a0e191d6cdf7facafe252cc01 Mon Sep 17 00:00:00 2001 From: emil Date: Sun, 28 Jun 2026 14:55:03 +0000 Subject: [PATCH] DEVX-97: fix: pin all dependencies to exact versions for reproducibility --- pyproject.toml | 2 ++ src/devx/tools/generate_badges.py | 2 +- 2 files changed, 3 insertions(+), 1 deletion(-) diff --git a/pyproject.toml b/pyproject.toml index 73d412c..fd2d0d8 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -13,6 +13,8 @@ classifiers = [ "Programming Language :: Python :: 3", "License :: OSI Approved :: GNU General Public License v3 (GPLv3)", ] +# All dependencies are pinned to exact versions for full reproducibility. +# Update pinned versions in a dedicated PR with verification. dependencies = [ "requests==2.34.2", "python-dotenv==1.2.2", diff --git a/src/devx/tools/generate_badges.py b/src/devx/tools/generate_badges.py index a4ef4dc..ff1f89c 100644 --- a/src/devx/tools/generate_badges.py +++ b/src/devx/tools/generate_badges.py @@ -348,7 +348,7 @@ def collect_quality(repo_root: Path) -> dict[str, str | int]: ([sys.executable, "-m", "pyright"], "pyright"), ([sys.executable, "-m", "bandit", "-r", "src/"], "bandit"), ]: - rc, _, stderr = run_command(cmd, cwd=repo_root) + rc, _stdout, stderr = run_command(cmd, cwd=repo_root) if rc == 0: results.append(True) tool_names.append(f"{name}: pass")