You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@tooling.apache.org by sb...@apache.org on 2025/07/09 14:56:58 UTC
(tooling-releases-client) branch main updated: Document the reproducible build process
This is an automated email from the ASF dual-hosted git repository.
sbp pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/tooling-releases-client.git
The following commit(s) were added to refs/heads/main by this push:
new 7580ab3 Document the reproducible build process
7580ab3 is described below
commit 7580ab3c49175853655868b8dd4d306ed11f1d9e
Author: Sean B. Palmer <se...@miscoranda.com>
AuthorDate: Wed Jul 9 15:56:42 2025 +0100
Document the reproducible build process
---
.gitignore | 2 ++
Makefile | 5 ++++-
pyproject.toml | 16 +++++++++++-----
uv.lock | 4 ++--
4 files changed, 19 insertions(+), 8 deletions(-)
diff --git a/.gitignore b/.gitignore
index 2a15272..6babe19 100644
--- a/.gitignore
+++ b/.gitignore
@@ -7,7 +7,9 @@ __pycache__/
.venv-poetry/
.venv-uv/
.vscode/
+*.egg-info/
*.pyc
dev/
+dist/
node_modules/
package-lock.json
diff --git a/Makefile b/Makefile
index ca6c3df..d6ff104 100644
--- a/Makefile
+++ b/Makefile
@@ -1,4 +1,7 @@
-.PHONY: sync
+.PHONY: build bump check commit install sync
+
+build:
+ uv build
bump: install
@# We install above to ensure that dev stamp is up to date
diff --git a/pyproject.toml b/pyproject.toml
index d0eaefa..a2eed91 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -1,19 +1,25 @@
+# "For legacy reasons, if a build system is not defined, then
+# setuptools.build_meta:__legacy__ is used to build the package."
+# https://docs.astral.sh/uv/concepts/projects/config/#build-systems
+
+# We use Hatchling for reproducible builds
+# The uv build backend, uv_build, still has reproducibility issues
+# E.g. https://github.com/astral-sh/uv/issues/13139
[build-system]
-requires = ["hatchling>=1.26"]
+requires = ["hatchling"]
build-backend = "hatchling.build"
[project]
name = "apache-trusted-releases"
-version = "0.20250709.1419"
+version = "0.20250709.1456"
description = "ATR CLI and Python API"
readme = "README.md"
requires-python = ">=3.13"
-license = {file = "LICENSE"}
+license = "Apache-2.0"
authors = [{name = "ASF Tooling", email = "dev@tooling.apache.org"}]
classifiers = [
"Programming Language :: Python :: 3 :: Only",
"Programming Language :: Python :: 3.13",
- "License :: OSI Approved :: Apache Software License",
"Operating System :: OS Independent",
]
@@ -41,4 +47,4 @@ atr = "atrclient.client:main"
packages = ["src/atrclient"]
[tool.uv]
-exclude-newer = "2025-07-09T14:19:00Z"
+exclude-newer = "2025-07-09T14:56:00Z"
diff --git a/uv.lock b/uv.lock
index e09cb20..0f2d037 100644
--- a/uv.lock
+++ b/uv.lock
@@ -2,7 +2,7 @@ version = 1
requires-python = ">=3.13"
[options]
-exclude-newer = "2025-07-09T14:19:00Z"
+exclude-newer = "2025-07-09T14:56:00Z"
[[package]]
name = "aiohappyeyeballs"
@@ -74,7 +74,7 @@ wheels = [
[[package]]
name = "apache-trusted-releases"
-version = "0.20250709.1419"
+version = "0.20250709.1456"
source = { editable = "." }
dependencies = [
{ name = "aiohttp" },
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@tooling.apache.org
For additional commands, e-mail: commits-help@tooling.apache.org