build: no longer use hashed pins #1592

nedbat · Mar 26, 2023 · b29dcb6 · b29dcb6
1 parent 01a4743
commit b29dcb6
Show file tree

Hide file tree

Showing 7 changed files with 11 additions and 8 deletions.
diff --git a/.github/workflows/coverage.yml b/.github/workflows/coverage.yml
@@ -85,7  85,7 @@ jobs:
           set -xe
           python -VV
           python -m site
-          python -m pip install --require-hashes -r requirements/tox.pip
           python -m pip install -r requirements/tox.pip
 
       - name: "Run tox coverage for ${{ matrix.python-version }}"
         env:

diff --git a/.github/workflows/kit.yml b/.github/workflows/kit.yml
@@ -155,7  155,7 @@ jobs:
 
       - name: "Install tools"
         run: |
-          python -m pip install --require-hashes -r requirements/kit.pip
           python -m pip install -r requirements/kit.pip
 
       - name: "Build wheels"
         env:
@@ -192,7  192,7 @@ jobs:
 
       - name: "Install tools"
         run: |
-          python -m pip install --require-hashes -r requirements/kit.pip
           python -m pip install -r requirements/kit.pip
 
       - name: "Build sdist"
         run: |

diff --git a/.github/workflows/python-nightly.yml b/.github/workflows/python-nightly.yml
@@ -81,7  81,7 @@ jobs:
 
       - name: "Install dependencies"
         run: |
-          python -m pip install --require-hashes -r requirements/tox.pip
           python -m pip install -r requirements/tox.pip
 
       - name: "Run tox"
         run: |

diff --git a/.github/workflows/quality.yml b/.github/workflows/quality.yml
@@ -46,7  46,7 @@ jobs:
 
       - name: "Install dependencies"
         run: |
-          python -m pip install --require-hashes -r requirements/tox.pip
           python -m pip install -r requirements/tox.pip
 
       - name: "Tox lint"
         run: |
@@ -97,7  97,7 @@ jobs:
           set -xe
           python -VV
           python -m site
-          python -m pip install --require-hashes -r requirements/tox.pip
           python -m pip install -r requirements/tox.pip
 
       - name: "Tox doc"
         run: |

diff --git a/.github/workflows/testsuite.yml b/.github/workflows/testsuite.yml
@@ -73,7  73,7 @@ jobs:
           set -xe
           python -VV
           python -m site
-          python -m pip install --require-hashes -r requirements/tox.pip
           python -m pip install -r requirements/tox.pip
           # For extreme debugging:
           # python -c "import urllib.request as r; exec(r.urlopen('https://bit.ly/pydoctor').read())"
 

diff --git a/CHANGES.rst b/CHANGES.rst
@@ -25,8  25,11 @@ Unreleased
   dramatically smaller. This closes `issue 1584`_ thanks to `Oleh Krehel
   <pull 1587_>`_.
 
 - Development dependencies no longer use hashed pins, closing `issue 1592`_.
 
 .. _issue 1584: https://github.com/nedbat/coveragepy/issues/1584
 .. _pull 1587: https://github.com/nedbat/coveragepy/pull/1587
 .. _issue 1592: https://github.com/nedbat/coveragepy/issues/1592
 
 
 .. scriv-start-here

diff --git a/Makefile b/Makefile
@@ -85,7  85,7 @@ metasmoke:
 
 .PHONY: upgrade
 
-PIP_COMPILE = pip-compile --upgrade --allow-unsafe --generate-hashes --resolver=backtracking
 PIP_COMPILE = pip-compile --upgrade --allow-unsafe --resolver=backtracking
 upgrade: export CUSTOM_COMPILE_COMMAND=make upgrade
 upgrade: 				## Update the *.pip files with the latest packages satisfying *.in files.
 	pip install -q -r requirements/pip-tools.pip