From 2f6e337eb1d4f2eee9fcc77978e8f5ee3da9cfc9 Mon Sep 17 00:00:00 2001 From: Jothi Mani Rajendran <250249270+jothimani-rajendran@users.noreply.github.com> Date: Fri, 16 Oct 2026 23:29:54 +0000 Subject: [PATCH] ci: install the tree with --no-deps -e in demo-gif and quickstart Scorecard's Pinned-Dependencies check flagged the three `pip install .` lines in demo-gif.yml and quickstart.yml as unpinned. agentseam declares no dependencies, so `pip install --no-deps -e .` installs the same tree without resolving anything; it is the form ci.yml and release.yml already use, and the one Scorecard accepts. Co-Authored-By: Claude Opus 5.5 Signed-off-by: Jothi Mani Rajendran <250249270+jothimani-rajendran@users.noreply.github.com> --- .github/workflows/demo-gif.yml | 7 ++++--- .github/workflows/quickstart.yml | 5 +++-- 2 files changed, 7 insertions(+), 5 deletions(-) diff --git a/.github/workflows/demo-gif.yml b/.github/workflows/demo-gif.yml index b8a2c9c..ec4d3ad 100644 --- a/.github/workflows/demo-gif.yml +++ b/.github/workflows/demo-gif.yml @@ -36,9 +36,10 @@ jobs: with: python-version: "3.12" - # The tape drives the real CLI; install the tree being rendered. + # The tape drives the real CLI; install the tree being rendered. --no-deps because + # the package declares none, so nothing unverified is resolved (same as ci.yml). - name: Install agentseam - run: pip install . + run: pip install --no-deps -e . - name: Render tape uses: charmbracelet/vhs-action@f6d7db07a432fcd3b06772628d36a57f96d95dcf # v2 @@ -67,7 +68,7 @@ jobs: python-version: "3.12" - name: Install agentseam - run: pip install . + run: pip install --no-deps -e . # The tape's hidden setup runs from /work/demo with HOME=/work/user, so the # frames show a fixed, neutral path instead of a runner-specific scratch dir. diff --git a/.github/workflows/quickstart.yml b/.github/workflows/quickstart.yml index 1c7bfa5..5a14f2c 100644 --- a/.github/workflows/quickstart.yml +++ b/.github/workflows/quickstart.yml @@ -28,10 +28,11 @@ jobs: with: python-version: "3.12" - # `pip install .` first so the block's own `pip install agentseam` is + # Install the tree first so the block's own `pip install agentseam` is # satisfied by the tree being tested instead of fetching a different release. + # --no-deps because the package declares none (same as ci.yml). - name: Install agentseam - run: pip install . + run: pip install --no-deps -e . - name: Check docs/quickstart.sh matches the README run: |