KaifAhmad1 5ed98cefbd fix(ci): hash-pin PEP 517 build isolation deps (setuptools, wheel) ...

Qodo review on this PR: `pip install --no-deps -e .` / `pip install
--no-deps .` still leaves PEP 517 build isolation on by default, which
fetches [build-system] requires (setuptools==84.0.0, wheel==0.48.0)
completely outside any hash checking - the --require-hashes installs
right next to it didn't cover this at all.

Adds .github/requirements/pep517-build.txt, hash-locked to the exact
pyproject.toml [build-system] requires, and installs it before every
local-source install (Dockerfile, ci.yml, benchmark.yml) with
--no-build-isolation so pip reuses those hash-verified copies instead
of fetching its own.

2026-08-31 15:43:59 +05:30

..

actions/setup-semantica

ci: reusable install action, install-matrix, and release hardening (#1266)

2026-08-30 17:30:21 +05:00

codeql

security: fix 12 vulnerabilities across CRITICAL→LOW severity

2026-04-12 13:41:31 +05:30

DISCUSSION_TEMPLATE

docs: add citation section and fix stale org references

2026-08-24 16:07:22 +05:30

ISSUE_TEMPLATE

docs: add citation section and fix stale org references

2026-08-24 16:07:22 +05:30

requirements

fix(ci): hash-pin PEP 517 build isolation deps (setuptools, wheel)

2026-08-31 15:43:59 +05:30

scripts

security: SHA-pin all Actions, harden release pipeline, add pin verification (#824)

2026-08-03 19:17:10 +05:30

workflows

fix(ci): hash-pin PEP 517 build isolation deps (setuptools, wheel)

2026-08-31 15:43:59 +05:30

dependabot.yml

ci: add npm Dependabot ecosystem and container image scanning (#1286)

2026-08-30 21:39:30 +05:30

FUNDING.yml

docs: add citation section and fix stale org references

2026-08-24 16:07:22 +05:30

pull_request_template.md

docs: formalize issue assignment and duplicate-PR triage workflow (#1030)

2026-08-16 15:18:55 +05:30

SUPPORT.md

docs: add citation section and fix stale org references

2026-08-24 16:07:22 +05:30