commit:     0452d1767c58f3c6522fadbb5dcdd6a4e8d4f70d
Author:     Brian Harring <ferringb <AT> gmail <DOT> com>
AuthorDate: Sun Nov  9 12:07:28 2025 +0000
Commit:     Brian Harring <ferringb <AT> gmail <DOT> com>
CommitDate: Sun Nov  9 12:35:15 2025 +0000
URL:        
https://gitweb.gentoo.org/proj/pkgcore/pkgcore.git/commit/?id=0452d176

chore: ensure releases never have a VCS dependency

Signed-off-by: Brian Harring <ferringb <AT> gmail.com>

 .github/workflows/release.yml | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 0578679b..70e5fd36 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -20,6 +20,15 @@ jobs:
     - name: Checkout code
       uses: actions/checkout@v4
 
+    - name: Reject any VCS dependencies
+      shell: python
+      run: |
+        import re, tomllib
+        deps = tomllib.load(open('pyproject.toml', 
'rb'))['build-system']['requires']
+        if rejects := list(filter(re.compile(r'@[^+]+').search, deps)):
+          rejects = "  \n".join(sorted(rejects))
+          raise Exception(f'VCS dependencies were detected in 
[build-system]:\n  {rejects}')
+
     - name: Set up Python 3.13
       uses: actions/setup-python@v5
       with:

Reply via email to