GoogleCloudPlatform / GoogleCloudPlatform/BigQuery-Agent-Analytics-SDK

Producers CI red on main: hash-lock drift after PyPI yanked build 1.5.1

Open Beginner friendly
#368 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Python
Stars
47
Forks
21
Avg merge
2d 13h
Merged PRs (30d)
33

Description

## Problem

**Producers CI fails on `main` since `d7b41e3`** (the 0.2.0 release commit) — job "Hash-lock drift check", step "Locks must match the reviewed files (all three)". Upstream run at 2026-07-15T08:47Z failed; fork mirrors fail identically on sync, so this is deterministic, not environmental.

## Root cause

The checked-in locks pin `build==1.5.1`, but PyPI has **yanked** that release (yank reason: *"Considers breaking changes, will discuss re-releasing as a new major version"* — verify at https://pypi.org/pypi/build/json). A fresh `regen-locks.sh` run therefore resolves `build==1.5.0`, and the drift gate correctly reports that the checked-in locks no longer match a clean regeneration:

```text
-build==1.5.1 \
+build==1.5.0 \
```

(The drift check is doing its job — the locks reference an artifact pip will no longer select.)

## Suggested fix

Run `bash deploy/otlp_receiver/regen-locks.sh`, review the diff (expected: `build` 1.5.1 → 1.5.0 with hash updates in `pip-tools.lock` / `requirements.lock` / `producers/build-requirements.lock`), and commit the regenerated locks. Optionally add `build!=1.5.1` to `pip-tools.in` as a guard in case the yank is reverted, and drop it when build ships its next release.

Not related to PR #351 (touches only `examples/`, `scripts/`, `tests/`; its checks passed on head `a7de311`).

Contributor guide

Open the contributing guide

Research direction

Start by running bash deploy/otlp_receiver/regen-locks.sh and review the resulting diff. Check pip-tools.lock, requirements.lock, and producers/build-requirements.lock for the expected build 1.5.1 to 1.5.0 changes and hash updates; done means the regenerated locks are committed and the Hash-lock drift check passes.

Written by the indexing model from the issue text.

Assessment

Tech stack
python, shell
Domain
build-system, ci-cd
Issue type
Bug
Difficulty
2/5
Estimated time
Half a day
Activity status
Quiet
Clarity
Clearly specified
Newbie friendliness
76/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.