Skip to content

Validate pylock package index URLs#1189

Open
Sean-Kenneth-Doherty wants to merge 1 commit into
pypa:mainfrom
Sean-Kenneth-Doherty:codex/validate-pylock-index-url
Open

Validate pylock package index URLs#1189
Sean-Kenneth-Doherty wants to merge 1 commit into
pypa:mainfrom
Sean-Kenneth-Doherty:codex/validate-pylock-index-url

Conversation

@Sean-Kenneth-Doherty
Copy link
Copy Markdown

@Sean-Kenneth-Doherty Sean-Kenneth-Doherty commented May 17, 2026

Fixes #1185.

Summary

  • Validate packages.index as an absolute URL while parsing pylock package entries.
  • Reject HTTP(S) index URLs that omit a host.
  • Add regression coverage for the reported invalid alias-style value while preserving file:// index URLs.

Test plan

  • uv run --group test pytest tests/test_pylock.py -q
  • uvx nox -s lint
  • git diff origin/main...HEAD --check

Assisted by OpenAI Codex; I reviewed the patch and local test results before opening this PR.

@Sean-Kenneth-Doherty

This comment was marked as low quality.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Validate packages.index is a URL in pylock.toml

1 participant