Skip to content

fix(benchmarks): regenerate Harbor uv.lock against public PyPI#2305

Open
Bartok9 wants to merge 1 commit into
block:mainfrom
Bartok9:bartok9/harbor-uvlock-public-pypi
Open

fix(benchmarks): regenerate Harbor uv.lock against public PyPI#2305
Bartok9 wants to merge 1 commit into
block:mainfrom
Bartok9:bartok9/harbor-uvlock-public-pypi

Conversation

@Bartok9

@Bartok9 Bartok9 commented Jul 21, 2026

Copy link
Copy Markdown

Refs #2226

Problem

Both Harbor benchmark lockfiles pinned package sources and artifact URLs to Block's internal Artifactory mirror (global.block-artifacts.com) instead of public PyPI:

  • benchmarks/harbor-buzz-orchestra/uv.lock — 1,589 refs
  • benchmarks/harbor-buzz-orchestra/testbed/uv.lock — 1,645 refs

Neither adjacent pyproject.toml configures that index, so the lockfiles captured a developer-global uv config at generation time. Public clones can't resolve these lockfiles against a private, auth-gated mirror.

Fix

Regenerated both lockfiles against public PyPI:

UV_INDEX_URL=https://pypi.org/simple uv lock   # in harbor-buzz-orchestra/ and testbed/
  • Zero block-artifacts references remain; all sources now resolve to pypi.org / files.pythonhosted.org.
  • Dependency versions are unchanged — this is purely an index/URL swap (the resolver picked the same versions from the public index).

How to test

cd benchmarks/harbor-buzz-orchestra        && uv lock --check   # Resolved, no changes
cd benchmarks/harbor-buzz-orchestra/testbed && uv lock --check   # Resolved, no changes
grep -c block-artifacts uv.lock testbed/uv.lock                 # 0 / 0

Both pass uv lock --check (the repo's Check uv.lock CI gate) against public PyPI.

Signed-off-by DCO.

@Bartok9
Bartok9 requested a review from a team as a code owner July 21, 2026 22:46
Both Harbor benchmark lockfiles pinned package sources and artifact URLs to
Block's internal Artifactory mirror (global.block-artifacts.com) — 1,589
references in harbor-buzz-orchestra/uv.lock and 1,645 in testbed/uv.lock —
captured from a developer-global uv config at generation time. Neither
pyproject.toml configures that index, so public clones can't resolve these
lockfiles (block#2226).

Regenerated both against public PyPI (UV_INDEX_URL=https://pypi.org/simple);
all sources now resolve to pypi.org / files.pythonhosted.org with zero
block-artifacts references. Dependency versions are unchanged — only the
resolver index/URLs. `uv lock --check` passes for both.

Refs block#2226

Signed-off-by: Bartok9 <danielrpike9@gmail.com>
@Bartok9
Bartok9 force-pushed the bartok9/harbor-uvlock-public-pypi branch from 705e96a to 8625cc2 Compare July 22, 2026 14:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant