dan/ScanSlicer
dan/ScanSlicer
1
0
Fork 0
Code Issues Pull requests Projects Releases 1 Packages Wiki Activity Actions

build: harden dependency supply chain

Browse source 
- Drop unused Pillow dependency
- Switch opencv-python to opencv-python-headless (~=4.13.0)
- Verify package hashes in the AppImage build (uv export hashes,
  pip install --require-hashes, separate --no-deps wheel install)
- Sync dependency docs and third-party notices
This commit is contained in:
dan 2026-09-11 23:07:30 +02:00
parent 607f5e0c57
commit 929c828438
8 changed files with 40 additions and 144 deletions
Download patch file Download diff file Expand all files Collapse all files

3
packaging/appimage/AppImageBuilder.yml
View file

@ -90,7 +90,8 @@ AppDir:
test -f "${APPDIR_PATH}/.DirIcon"
rm -rf "${APPDIR_PATH}/usr/lib/x86_64-linux-gnu/qt6"
rm -f "${APPDIR_PATH}"/usr/lib/x86_64-linux-gnu/libQt6*.so*
python3 -m pip install --no-cache-dir --upgrade --ignore-installed --prefix=/usr --root="${APPDIR_PATH}" -r "${SCANSLICER_REQUIREMENTS}"
python3 -m pip install --no-cache-dir --require-hashes --ignore-installed --prefix=/usr --root="${APPDIR_PATH}" -r "${SCANSLICER_REQUIREMENTS}"
python3 -m pip install --no-cache-dir --no-deps --ignore-installed --prefix=/usr --root="${APPDIR_PATH}" "${SCANSLICER_WHEEL}"
AppImage:
arch: x86_64