mirror of
https://github.com/DeusData/codebase-memory-mcp.git
synced 2026-11-04 10:48:20 +00:00
The license gate installed `scancode-toolkit` unpinned. pluggy 1.7.0 (uploaded to PyPI 2026-10-15 09:50 UTC) no longer finds the hookspecs that plugincode 32.0.0 declares on a class (`@pre_scan_spec class PreScanPlugin`), so scancode crashes at import with "ValueError: did not find any 'pre_scan' hooks" and `security / license-gate` fails on every run, whatever the tree. The last green gate started at 09:50:14 UTC; every run since is red. `ci-ok` and the release `verify` job both need the security workflow, so this blocks every PR and the release. Install exactly scancode-toolkit 32.5.0 (the version every green run used) with pluggy constrained to 1.6.0 through PIP_CONSTRAINT, which the pip that pipx runs reads. The local hint in license-gate.sh names the same command. Signed-off-by: Martin Vogel <martin.vogel.tech@gmail.com>
6 lines
288 B
Plaintext
6 lines
288 B
Plaintext
# Constraints for the ScanCode install of the license gate (PIP_CONSTRAINT).
|
|
# pluggy 1.7.0 (2026-10-15) no longer finds plugincode 32.0.0's class-level
|
|
# hookspecs: scancode then crashes at import with "did not find any
|
|
# 'pre_scan' hooks" and the gate fails on every run.
|
|
pluggy==1.6.0
|