ci(conda): nothing retires a PLATFORM_PINS entry once upstream ships the wheel again #1851
Description
util/conda_vendor.py:99 pins cryptography to 48.0.1 on osx-64 (#1827), because 49.0.0 and later ship no Intel or universal2 macOS wheel. Checked against PyPI: 48.0.1 resolves to cp311-abi3-macosx_10_9_universal2, and the later releases resolve to nothing.
--check flags only a pin that no build vendors. The script reads installed metadata and is offline by design, so nothing notices when a later release ships an Intel wheel again. osx-64 would then stay on 48.0.1 indefinitely.
Options:
- Have the weekly
conda-updatejob, which has network access, query PyPI for a newer wheel matching each pinned platform, and warn. - Give each pin a review-by date that
--checkenforces. - Keep it manual, and say so beside the table.
Activity
JarryShaw commentedon Oct 16, 2026
take a mix of 1 and 2 -
cron-updatecan update the pinned version to newer wheels and also add a review-by date so it's easier to track.JarryShaw commentedon Oct 16, 2026
Recorded: a mix of options 1 and 2. The weekly conda-update job checks PyPI for a newer wheel matching each pinned platform and moves the pin up when one exists. Each pin also carries a review-by date, so a pin that nothing has moved is easy to spot.
Blocked until #1852 merges, since its fix rewrites
util/conda_vendor.py's parser, and until the PR for #1849/#1854/#1855 merges, since that one editscron-conda.yml.JarryShaw commentedon Oct 17, 2026
Unblocked: #1865 (#1852) and #1868 have both merged. A worker is now implementing the ruling on top of
main. The weekly conda update job checks PyPI for a newer wheel for each pinned platform and moves the pin up, and each pin carries a review-by date that the offline--checkenforces.ci(conda): move platform pins up and give them a review-by date (#1851)
ci(conda): move platform pins up and give them a review-by date (#1851)
ci(conda): move platform pins up and give them a review-by date (#1851)…
test(project): keep the #1851 and #1878 tests green on the KTLO legs (#…