dan/ScanSlicer
dan/ScanSlicer
1
0
Fork 0
Code Issues Pull requests Projects Releases 1 Packages Wiki Activity Actions

build: harden dependency supply chain

Browse source 
- Drop unused Pillow dependency
- Switch opencv-python to opencv-python-headless (~=4.13.0)
- Verify package hashes in the AppImage build (uv export hashes,
  pip install --require-hashes, separate --no-deps wheel install)
- Sync dependency docs and third-party notices
This commit is contained in:
dan 2026-09-11 23:07:30 +02:00
parent 607f5e0c57
commit 929c828438
8 changed files with 40 additions and 144 deletions
Download patch file Download diff file Expand all files Collapse all files

2
AGENTS.md
View file

@ -111,7 +111,7 @@ uv run scanslicer /path/to/scans # or: python -m scanslicer
- AppImage (preferred): `bash packaging/appimage/build-appimage.sh`
- AppImage via Docker: `bash packaging/appimage/build-appimage-docker.sh`
- Docker runtime: `docker compose up --build`
- Dependencies (from `pyproject.toml`): PySide6, opencv-python, numpy, Pillow.
- Dependencies (from `pyproject.toml`): PySide6, opencv-python-headless, numpy.
- Python >= 3.10; dev env is Python 3.12 in `.venv`.
### AppImage build: Docker context gotcha