fix: pin click below 8.5.0 to avoid bogus --no-index in pip-compile

Click 8.5.0 leaves is_flag options without an explicit default as
an internal sentinel instead of False. pip-tools 7.6.1 compares
that sentinel against the option's value to decide whether to
record it in the regenerated file's header, and for a flag with no
negative counterpart (like --no-index) it falls back to always
emitting the flag name regardless of the actual value. Every fresh
install of pip-tools pulls in the latest click and hits this,
poisoning the lockfile header with a --no-index that was never
requested.

Signed-off-by: Marco Nenciarini <marco.nenciarini@enterprisedb.com>
This commit is contained in:
Marco Nenciarini 2026-09-02 16:39:02 +02:00
parent ff09703fed
commit 4a66d24dc7
No known key found for this signature in database
GPG Key ID: 589F03F01BA55038

View File

@ -76,7 +76,7 @@ tasks:
with-env-variable --name=DEBIAN_FRONTEND --value=noninteractive
with-exec --args="apt-get,update,-qq"
with-exec --args="apt-get,install,-y,-qq,python3,python3-venv,python3-pip,gcc,libpq-dev"
with-exec --args="pip,install,--quiet,--break-system-packages,pip-tools"
with-exec --args="pip,install,--quiet,--break-system-packages,pip-tools,click<8.5.0"
with-directory --path=/work --source=containers
with-workdir --path=/work
with-exec --args="pip-compile,--allow-unsafe,--generate-hashes,--output-file=sidecar-requirements.txt,--strip-extras,sidecar-requirements.in"