Skip to content

build(deps): bootstrap hash-locked pip 26.2 #82

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
dependabot wants to merge 15 commits into from
Closed

build(deps): bootstrap hash-locked pip 26.2 #82

Show file tree
Hide file tree
Changes from 1 commit
Commits
Show all changes
15 commits
Select commit Hold shift + click to select a range
df888b8
build(deps): bump pip from 26.1.2 to 26.2
dependabot[bot] Aug 2, 2026
5086993
build(deps): declare pip 26.2 bootstrap input
seonghobae Aug 4, 2026
ff14f55
build(deps): add hash-locked pip 26.2 bootstrap
seonghobae Aug 4, 2026
adbd484
build(deps): use shared pip bootstrap for fuzzing
seonghobae Aug 4, 2026
037b967
build(deps): document shared pip bootstrap for security tools
seonghobae Aug 4, 2026
b2732fb
build(deps): bootstrap hash-locked pip 26.2 in security CI
seonghobae Aug 4, 2026
6f74014
build(deps): bootstrap hash-locked pip 26.2 in fuzz CI
seonghobae Aug 4, 2026
71105b1
test: verify hash-locked pip bootstrap
seonghobae Aug 4, 2026
1ae56ce
ci: verify exact pip bootstrap version
seonghobae Aug 4, 2026
87ab82f
ci: verify exact pip bootstrap version in fuzz jobs
seonghobae Aug 4, 2026
501cfea
test: require exact pip version verification
seonghobae Aug 4, 2026
0f7b33c
fix(fuzz): retain portable Atheris pins with pip bootstrap
seonghobae Aug 4, 2026
c38c043
fix(fuzz): preserve universal Atheris hash closure
seonghobae Aug 4, 2026
f56337f
fix(fuzz): align optional extra with universal Atheris lock
seonghobae Aug 4, 2026
9341bac
Merge PR #96 security boundary into pip bootstrap
seonghobae Aug 12, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 0 additions & 4 deletions fuzz/requirements-atheris.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,3 @@ atheris==3.0.0 \
--hash=sha256:8a5c8a781467c187da40fd29139784193e2647058831f837f675d0bb8cbd8746 \
--hash=sha256:a402cdca8a650d1371050b1f9552eb4cdc488d2db64950d603c4560318365eac
# via -r fuzz/requirements-atheris.in
pip==26.1.2 \
--hash=sha256:382ff9f685ee3bc25864f820aa50505825f10f5458ffff07e30a6d96e5715cab \
--hash=sha256:f49cd134c61cf2fd75e0ce2676db03e4054504a5a4986d00f8299ae632dc4605
# via -r fuzz/requirements-atheris.in
Loading
Loading