mirrors/hermes-agent
1
0
Fork 0
mirror of https://github.com/NousResearch/hermes-agent.git synced 2026-04-25 00:51:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

chore: regenerate uv.lock with hashes, use lockfile in setup (#2812)

Browse source 
- Regenerate uv.lock with sha256 hashes for all 2965 package artifacts
- Add python_version marker to yc-bench (requires >=3.12)
- Update setup-hermes.sh to prefer 'uv sync --locked' for hash-verified
  installs, with fallback to 'uv pip install' when lockfile is stale

This completes the supply chain hardening: pyproject.toml bounds the
version ranges, and uv.lock pins exact versions with cryptographic
hashes so tampered packages are rejected at install time.
This commit is contained in:
Teknium 2026-03-24 08:42:45 -07:00 • committed by GitHub
parent 177e43259f
commit 624e4a8e7a
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
3 changed files with 2509 additions and 455 deletions
Download patch file Download diff file Expand all files Collapse all files

2
pyproject.toml
View file

@ -64,7 +64,7 @@ rl = [
"uvicorn[standard]>=0.24.0,<1",
"wandb>=0.15.0,<1",
]
yc-bench = ["yc-bench @ git+https://github.com/collinear-ai/yc-bench.git"]
yc-bench = ["yc-bench @ git+https://github.com/collinear-ai/yc-bench.git ; python_version >= '3.12'"]
all = [
"hermes-agent[modal]",
"hermes-agent[daytona]",