From 6f4700bfff302709429851232ef9d252aaaff8a1 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Simon=20B=C3=A4rlocher?= Date: Mon, 15 Jun 2026 23:12:16 +0200 Subject: [PATCH 1/2] chore(deps): pin Sphinx build dependencies to exact versions MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit requirements.txt used loose lower-bound specifiers for antsibull-docs, sphinxcontrib-mermaid, and sphinx-sitemap, so two checkouts could resolve different versions. Pin all build dependencies to exact versions for reproducible builds. Renovate keeps them current via the pip manager from the org renovate-base preset. Signed-off-by: Simon Bärlocher --- requirements.txt | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/requirements.txt b/requirements.txt index 3b682e1..32c5006 100644 --- a/requirements.txt +++ b/requirements.txt @@ -4,8 +4,10 @@ # Created with antsibull-docs 2.5.0.post0 -antsibull-docs >=2.24.0, <3.0.0 +# Exact pins for reproducible builds; Renovate (pip manager via the org +# renovate-base preset) bumps these as new releases land. +antsibull-docs==2.24.0 ansible-pygments==0.1.2 sphinx-ansible-theme==0.10.4 -sphinxcontrib-mermaid>=2.0.2 -sphinx-sitemap>=2.9.0 +sphinxcontrib-mermaid==2.0.2 +sphinx-sitemap==2.9.0 From 0e96e1198820a0fe6ee741e45991ec5604c39309 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Simon=20B=C3=A4rlocher?= Date: Mon, 15 Jun 2026 23:34:09 +0200 Subject: [PATCH 2/2] docs(deps): clarify pins cover direct deps only MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Address review feedback: the comment claimed 'reproducible builds', but only the direct dependencies are pinned — transitive deps still float. Reword to scope the claim to direct deps and note a pip-compile constraints file as the follow-up if the floating tree causes drift. Signed-off-by: Simon Bärlocher --- requirements.txt | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/requirements.txt b/requirements.txt index 32c5006..d1b7dbc 100644 --- a/requirements.txt +++ b/requirements.txt @@ -4,8 +4,11 @@ # Created with antsibull-docs 2.5.0.post0 -# Exact pins for reproducible builds; Renovate (pip manager via the org -# renovate-base preset) bumps these as new releases land. +# Exact pins for the direct build dependencies; Renovate (pip manager via the +# org renovate-base preset) bumps these as new releases land. Transitive deps +# (sphinx, antsibull-core, jinja2, ...) are intentionally not locked here — a +# full pip-compile constraints file would be the next step if the floating +# transitive tree ever causes drift. antsibull-docs==2.24.0 ansible-pygments==0.1.2 sphinx-ansible-theme==0.10.4