Skip to content

fix(deps): add release dependency e2e gate - #1168

Merged
yaozheng-fang merged 1 commit into
volcengine:mainfrom
xgtcode:fix/dependency-e2e-release-gate
Oct 14, 2026
Merged

yaozheng-fang merged 1 commit into
volcengine:mainfrom
xgtcode:fix/dependency-e2e-release-gate

Conversation

@xgtcode

@xgtcode xgtcode commented Oct 14, 2026

Copy link
Copy Markdown
Collaborator

Summary

Add a release-time dependency E2E gate to prevent publishing VeADK wheels with dependency metadata that cannot be resolved by users.

Changes

  • Add scripts/check_dependency_e2e.py with:
    • runtime dependency policy check
    • clean wheel install check
    • high-risk dependency upgrade check against current runtime pins
  • Wire the checks into publish-tag-to-pypi.yaml
    • lightweight policy runs on normal pushes
    • clean install and high-risk upgrade checks run only for tag releases or manual dispatch
  • Tighten known incompatible dependency ranges:
    • opentelemetry-exporter-otlp>=1.37.0,<1.43
    • opentelemetry-instrumentation-logging>=0.56b0,<0.64
    • fastmcp>=2.12.3,<4
    • tos>=2.8.4,<2.9
    • jsonschema>=4.23,<4.24
  • Add tests and bilingual PRD for the release gate.

Validation

  • uv run --extra dev pytest tests/test_dependency_e2e.py
  • uv run python scripts/check_dependency_e2e.py policy
  • uv run --extra dev pre-commit run --all-files

@xgtcode
xgtcode force-pushed the fix/dependency-e2e-release-gate branch 2 times, most recently from 5644415 to c029a49 Compare October 14, 2026 06:19
@xgtcode
xgtcode force-pushed the fix/dependency-e2e-release-gate branch from c029a49 to 9cb9077 Compare October 14, 2026 06:45
@yaozheng-fang
yaozheng-fang merged commit d55fe8f into volcengine:main Oct 14, 2026
17 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants