Skip to content

Stop internal PyPI proxy URLs from leaking into uv.lock - #5800

Merged
pietern merged 2 commits into
mainfrom
lint-internal-proxy-uv-lock
Jul 3, 2026
Merged

Stop internal PyPI proxy URLs from leaking into uv.lock#5800
pietern merged 2 commits into
mainfrom
lint-internal-proxy-uv-lock

Conversation

@pietern

Copy link
Copy Markdown
Contributor

When uv/pip points at the internal *.databricks.com PyPI proxy, pydabs-codegen's uv run rewrites source.registry in the lockfiles to the proxy instead of pypi.org. This churn has leaked into several SDK-bump PRs, each needing a manual revert.

pydabs-codegen now reverts the lockfiles after regenerating, and a new check-uv-lock (in task checks) backstops against a proxy URL reaching a committed lock any other way. The redundant checkout in push.yml is removed.

This pull request and its description were written by Isaac.

When uv/pip points at the internal *.databricks.com PyPI proxy,
pydabs-codegen's `uv run` rewrites `source.registry` in the lockfiles to
the proxy instead of pypi.org. This churn has leaked into several
SDK-bump PRs, each needing a manual revert.
pydabs-codegen now reverts the lockfiles after regenerating, and a new
`check-uv-lock` (in `task checks`) backstops against a proxy URL reaching
a committed lock any other way. The redundant checkout in push.yml is
removed.
Co-authored-by: Isaac
@pietern
pieterntemporarily deployed to test-trigger-is July 2, 2026 12:25 — with GitHub Actions Inactive
@pietern
pieterntemporarily deployed to test-trigger-is July 2, 2026 12:25 — with GitHub Actions Inactive
@pietern
pietern requested a review from simonfaltumJuly 2, 2026 12:28
@pietern
pietern enabled auto-merge July 2, 2026 12:37
@eng-dev-ecosystem-bot

eng-dev-ecosystem-bot commented Jul 2, 2026

Copy link
Copy Markdown
Collaborator

Integration test report

Commit: b68b3a0

Run: 28641545495

Env💚​RECOVERED🙈​SKIP✅​pass🙈​skipTime
💚​aws linux101323010414:56
💚​aws windows101323210394:01
💚​aws-ucws linux10133149594:54
💚​aws-ucws windows10133169574:06
💚​azure linux41523010404:37
💚​azure windows41523210383:58
💚​azure-ucws linux4153169569:59
💚​azure-ucws windows4153189544:47
💚​gcp linux41522910424:45
💚​gcp windows41523110403:54
23 interesting tests: 13 SKIP, 10 RECOVERED
Test Nameaws linuxaws windowsaws-ucws linuxaws-ucws windowsazure linuxazure windowsazure-ucws linuxazure-ucws windowsgcp linuxgcp windows
💚​TestAccept💚​R💚​R💚​R💚​R💚​R💚​R💚​R💚​R💚​R💚​R
🙈​TestAccept/bundle/invariant/no_drift🙈​S🙈​S🙈​S🙈​S🙈​S🙈​S🙈​S🙈​S🙈​S🙈​S
🙈​TestAccept/bundle/resources/permissions🙈​S🙈​S🙈​S🙈​S🙈​S🙈​S🙈​S🙈​S🙈​S🙈​S
💚​TestAccept/bundle/resources/permissions/jobs/destroy_without_mgmtperms/with_permissions💚​R💚​R💚​R💚​R🙈​S🙈​S🙈​S🙈​S🙈​S🙈​S
💚​TestAccept/bundle/resources/permissions/jobs/destroy_without_mgmtperms/with_permissions/DATABRICKS_BUNDLE_ENGINE=direct💚​R💚​R💚​R💚​R
💚​TestAccept/bundle/resources/permissions/jobs/destroy_without_mgmtperms/with_permissions/DATABRICKS_BUNDLE_ENGINE=terraform💚​R💚​R💚​R💚​R
💚​TestAccept/bundle/resources/permissions/jobs/destroy_without_mgmtperms/without_permissions💚​R💚​R💚​R💚​R🙈​S🙈​S🙈​S🙈​S🙈​S🙈​S
💚​TestAccept/bundle/resources/permissions/jobs/destroy_without_mgmtperms/without_permissions/DATABRICKS_BUNDLE_ENGINE=direct💚​R💚​R💚​R💚​R
💚​TestAccept/bundle/resources/permissions/jobs/destroy_without_mgmtperms/without_permissions/DATABRICKS_BUNDLE_ENGINE=terraform💚​R💚​R💚​R💚​R
🙈​TestAccept/bundle/resources/postgres_branches/basic🙈​S🙈​S🙈​S🙈​S🙈​S🙈​S🙈​S🙈​S🙈​S🙈​S
🙈​TestAccept/bundle/resources/postgres_branches/recreate🙈​S🙈​S🙈​S🙈​S🙈​S🙈​S🙈​S🙈​S🙈​S🙈​S
🙈​TestAccept/bundle/resources/postgres_branches/replace_existing🙈​S🙈​S🙈​S🙈​S🙈​S🙈​S🙈​S🙈​S🙈​S🙈​S
🙈​TestAccept/bundle/resources/postgres_branches/update_protected🙈​S🙈​S🙈​S🙈​S🙈​S🙈​S🙈​S🙈​S🙈​S🙈​S
🙈​TestAccept/bundle/resources/postgres_branches/without_branch_id🙈​S🙈​S🙈​S🙈​S🙈​S🙈​S🙈​S🙈​S🙈​S🙈​S
🙈​TestAccept/bundle/resources/postgres_endpoints/basic🙈​S🙈​S🙈​S🙈​S🙈​S🙈​S🙈​S🙈​S🙈​S🙈​S
🙈​TestAccept/bundle/resources/postgres_projects/update_display_name🙈​S🙈​S🙈​S🙈​S🙈​S🙈​S🙈​S🙈​S🙈​S🙈​S
🙈​TestAccept/bundle/resources/synced_database_tables/basic🙈​S🙈​S🙈​S🙈​S🙈​S🙈​S🙈​S🙈​S🙈​S🙈​S
🙈​TestAccept/bundle/resources/vector_search_endpoints/drift/recreated_same_name🙈​S🙈​S🙈​S🙈​S🙈​S🙈​S🙈​S🙈​S🙈​S🙈​S
🙈​TestAccept/bundle/resources/vector_search_indexes/recreate/embedding_dimension🙈​S🙈​S🙈​S🙈​S🙈​S🙈​S🙈​S🙈​S🙈​S🙈​S
🙈​TestAccept/ssh/connection🙈​S🙈​S🙈​S🙈​S🙈​S🙈​S🙈​S🙈​S🙈​S🙈​S
💚​TestFetchRepositoryInfoAPI_FromRepo💚​R💚​R💚​R💚​R💚​R💚​R💚​R💚​R💚​R💚​R
💚​TestFetchRepositoryInfoAPI_FromRepo/root💚​R💚​R💚​R💚​R💚​R💚​R💚​R💚​R💚​R💚​R
💚​TestFetchRepositoryInfoAPI_FromRepo/subdir💚​R💚​R💚​R💚​R💚​R💚​R💚​R💚​R💚​R💚​R
Top 6 slowest tests (at least 2 minutes):
durationenvtestname
5:05azure-ucws linuxTestSQLExecScalar
3:08azure windowsTestAccept
3:07gcp windowsTestAccept
2:59aws windowsTestAccept
2:57azure-ucws windowsTestAccept
2:54aws-ucws windowsTestAccept

@pietern
pieterntemporarily deployed to test-trigger-is July 3, 2026 05:55 — with GitHub Actions Inactive
@pietern
pieterntemporarily deployed to test-trigger-is July 3, 2026 05:55 — with GitHub Actions Inactive
@pietern
pietern added this pull request to the merge queueJul 3, 2026
Merged via the queue into main with commit 2dfbe40Jul 3, 2026
37 checks passed
@pietern
pietern deleted the lint-internal-proxy-uv-lock branch July 3, 2026 06:49
yansonggao-db pushed a commit to yansonggao-db/cli that referenced this pull request Jul 21, 2026
…ks#5994)
`generate-clijson` re-syncs the genkit tagging locks; in a
proxy-configured environment uv bakes the internal PyPI proxy URL into
them. databricks#5800 added the guard + pydabs revert for `*uv.lock`, but the
genkit `*.py.lock` files fell through and re-leaked into databricks#5982
(hand-scrubbed there). This closes the gap by scrubbing the proxy URL in
generate-clijson and widening check-uv-lock's glob to cover the genkit
locks.
This pull request and its description were written by Isaac.
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants

@pietern@eng-dev-ecosystem-bot@simonfaltum