Use hashed requirements lock

This commit is contained in:
thePR0M3TH3AN
2025-08-03 10:08:50 -04:00
parent c3ed4c08ee
commit 6f885bd65e
9 changed files with 2004 additions and 111 deletions

View File

@@ -249,7 +249,7 @@ if ($LASTEXITCODE -ne 0) {
Write-Error "Failed to upgrade pip"
}
& "$VenvDir\Scripts\python.exe" -m pip install -r "src\requirements.txt"
& "$VenvDir\Scripts\python.exe" -m pip install --require-hashes -r "requirements.lock"
if ($LASTEXITCODE -ne 0) {
Write-Warning "Failed to install Python dependencies. If errors mention C++, install Microsoft C++ Build Tools: https://visualstudio.microsoft.com/visual-cpp-build-tools/"
Write-Error "Dependency installation failed."

View File

@@ -140,9 +140,9 @@ main() {
source "$VENV_DIR/bin/activate"
# 6. Install/Update Python dependencies
print_info "Installing/updating Python dependencies from src/requirements.txt..."
print_info "Installing/updating Python dependencies from requirements.lock..."
pip install --upgrade pip
pip install -r src/requirements.txt
pip install --require-hashes -r requirements.lock
pip install -e .
print_info "Installing platform-specific Toga backend..."
if [ "$OS_NAME" = "Linux" ]; then