Files
unslothai--unsloth/tests/studio/test_sync_allow_scripts_pins.py
wehub-resource-sync e93507a09c
Lockfile supply-chain audit / lockfile supply-chain audit (push) Has been cancelled
Windows Studio GGUF CI / GPU prebuilt resolves without Visual Studio (push) Has been cancelled
Windows Studio GGUF CI / setup.ps1 unit tests (VS 2026 / CMake guard) (push) Has been cancelled
Windows Studio GGUF CI / real-VS detection (VS 2022) (push) Has been cancelled
Windows Studio GGUF CI / real-VS detection (VS 2026) (push) Has been cancelled
Windows Studio GGUF CI / VC++ runtime detect + install round-trip (windows-2025-vs2026) (push) Has been cancelled
Windows Studio GGUF CI / VC++ runtime detect + install round-trip (windows-latest) (push) Has been cancelled
Windows Studio Update CI / Studio Updating Tests (push) Has been cancelled
Wheel CI / Wheel build + content sanity + import smoke (push) Has been cancelled
Lint CI / Source lint (Python + shell + YAML + JSON + safety nets) (push) Has been cancelled
MLX CI on Mac M1 / dispatch (push) Has been cancelled
Security audit / advisory audit (pip + npm + cargo) (push) Has been cancelled
Security audit / pip scan-packages :: extras (push) Has been cancelled
Security audit / pip scan-packages :: studio (push) Has been cancelled
Security audit / pip scan-packages :: hf-stack (push) Has been cancelled
Security audit / npm scan-packages (Studio frontend tarballs) (push) Has been cancelled
Security audit / workflow-trigger lint (pull_request_target / cache-poisoning) (push) Has been cancelled
Security audit / pytest tests/security (push) Has been cancelled
Security audit / npm provenance + new install-script diff (push) Has been cancelled
Studio API CI / Studio API & Auth Tests (push) Has been cancelled
Backend CI / (Python 3.10) (push) Has been cancelled
Backend CI / (Python 3.11) (push) Has been cancelled
Backend CI / (Python 3.12) (push) Has been cancelled
Backend CI / (Python 3.13) (push) Has been cancelled
Backend CI / Repo tests (CPU) (push) Has been cancelled
Frontend CI / Frontend build + bundle sanity (push) Has been cancelled
Studio GGUF CI / OpenAI, Anthropic API tests (push) Has been cancelled
Studio GGUF CI / Tool calling Tests (push) Has been cancelled
Studio GGUF CI / JSON, images (push) Has been cancelled
Mac Studio GGUF CI / OpenAI, Anthropic API tests (push) Has been cancelled
Mac Studio GGUF CI / Tool calling Tests (push) Has been cancelled
Mac Studio GGUF CI / JSON, images (push) Has been cancelled
Mac Studio Install Matrix CI / Install + load (macos-14) (push) Has been cancelled
Mac Studio Install Matrix CI / Install + load (macos-15) (push) Has been cancelled
Mac Studio Install Matrix CI / Install + load (macos-26) (push) Has been cancelled
Mac Studio Install Matrix CI / Install + load (macos-15-intel) (push) Has been cancelled
Mac Studio API CI / Studio API & Auth Tests (push) Has been cancelled
Mac Studio Install Matrix CI / Install + load (macos-26-intel) (push) Has been cancelled
Mac Studio UI CI / Chat UI Tests (push) Has been cancelled
Studio Tauri CI / Tauri Linux debug build (no codesign) (push) Has been cancelled
Mac Studio Update CI / Studio Updating Tests (push) Has been cancelled
Studio UI CI / Chat UI Tests (push) Has been cancelled
Windows Studio API CI / Studio API & Auth Tests (push) Has been cancelled
Windows Studio UI CI / Chat UI Tests (push) Has been cancelled
Studio Update CI / Studio Updating Tests (push) Has been cancelled
Core / Core (HF=default + TRL=default) (push) Has been cancelled
Core / Core (HF=4.57.6 + TRL<1) (push) Has been cancelled
Core / Core (HF=latest + TRL=latest) (push) Has been cancelled
Core / llama.cpp build + smoke (push) Has been cancelled
Windows Studio GGUF CI / OpenAI, Anthropic API tests (push) Has been cancelled
Windows Studio GGUF CI / Tool calling Tests (push) Has been cancelled
Windows Studio GGUF CI / JSON, images (push) Has been cancelled
Windows Studio GGUF CI / Studio install + inference without Visual Studio (push) Has been cancelled
Studio export capability / capability (macos-latest) (push) Has been cancelled
Studio export capability / capability (ubuntu-latest) (push) Has been cancelled
Studio export capability / capability (windows-latest) (push) Has been cancelled
Cross-platform parity / parity (macos-latest) (push) Has been cancelled
Cross-platform parity / parity (windows-latest) (push) Has been cancelled
Scorecard supply-chain security / Scorecard analysis (push) Has been cancelled
Studio load-orchestrator CI / test (push) Has been cancelled
chore: import upstream snapshot with attribution
2026-07-13 12:59:56 +08:00

142 lines
4.4 KiB
Python

#!/usr/bin/env python3
"""Offline tests for scripts/sync_allow_scripts_pins.py."""
from __future__ import annotations
import json
import sys
import tempfile
from pathlib import Path
REPO_ROOT = Path(__file__).resolve().parents[2]
sys.path.insert(0, str(REPO_ROOT / "scripts"))
import sync_allow_scripts_pins as sync # noqa: E402
def write_fixture(tmp: Path, policy: dict, lock_packages: dict) -> None:
(tmp / "package.json").write_text(
json.dumps(
{
"name": "fixture",
"dependencies": {"a": "^1.0.0"},
"allowScripts": policy,
},
indent = 2,
)
+ "\n"
)
(tmp / "package-lock.json").write_text(
json.dumps(
{
"lockfileVersion": 3,
"packages": lock_packages,
}
)
+ "\n"
)
LOCK = {
"": {"name": "fixture"},
"node_modules/@biomejs/biome": {"version": "1.9.9", "hasInstallScript": True},
"node_modules/msw": {"version": "2.15.0", "hasInstallScript": True},
"node_modules/vite/node_modules/fsevents": {"version": "2.3.3", "hasInstallScript": True},
"node_modules/clean": {"version": "3.0.0"},
}
def test_split_spec():
assert sync.split_spec("fsevents") == ("fsevents", None)
assert sync.split_spec("@biomejs/biome") == ("@biomejs/biome", None)
assert sync.split_spec("@biomejs/biome@1.9.4") == ("@biomejs/biome", "1.9.4")
assert sync.split_spec("msw@2.14.3 || 2.15.0") == ("msw", "2.14.3 || 2.15.0")
def test_in_sync_is_clean():
with tempfile.TemporaryDirectory() as d:
tmp = Path(d)
write_fixture(
tmp,
{
"@biomejs/biome@1.9.9": True,
"msw@2.15.0": True,
"fsevents": True,
},
LOCK,
)
assert sync.main(["--check", "--dir", str(tmp)]) == 0
def test_stale_pin_fails_check_and_fix_repairs():
with tempfile.TemporaryDirectory() as d:
tmp = Path(d)
write_fixture(
tmp,
{
"@biomejs/biome@1.9.4": True, # stale, bumped to 1.9.9
"msw@2.14.3": False, # stale denial, bumped to 2.15.0
"fsevents": True, # bare: never stale
"ghost@9.9.9": True, # not in lockfile: left alone
"weird@*": True, # non-exact spec: left alone
},
LOCK,
)
assert sync.main(["--check", "--dir", str(tmp)]) == 1
assert sync.main(["--fix", "--dir", str(tmp)]) == 0
got = json.loads((tmp / "package.json").read_text())["allowScripts"]
assert got == {
"@biomejs/biome@1.9.9": True,
"msw@2.15.0": False, # value and key order preserved
"fsevents": True,
"ghost@9.9.9": True,
"weird@*": True,
}
assert list(got) == [
"@biomejs/biome@1.9.9",
"msw@2.15.0",
"fsevents",
"ghost@9.9.9",
"weird@*",
]
assert sync.main(["--check", "--dir", str(tmp)]) == 0
def test_multi_version_disjunction():
lock = dict(LOCK)
lock["node_modules/x/node_modules/msw"] = {"version": "2.14.3", "hasInstallScript": True}
with tempfile.TemporaryDirectory() as d:
tmp = Path(d)
write_fixture(tmp, {"msw@2.14.3": True}, lock)
assert sync.main(["--fix", "--dir", str(tmp)]) == 0
got = json.loads((tmp / "package.json").read_text())["allowScripts"]
assert got == {"msw@2.14.3 || 2.15.0": True}
def test_no_policy_is_noop():
with tempfile.TemporaryDirectory() as d:
tmp = Path(d)
(tmp / "package.json").write_text(json.dumps({"name": "fixture"}) + "\n")
(tmp / "package-lock.json").write_text(json.dumps({"packages": {}}) + "\n")
before = (tmp / "package.json").read_text()
assert sync.main(["--fix", "--dir", str(tmp)]) == 0
assert (tmp / "package.json").read_text() == before
def test_missing_files_is_noop():
with tempfile.TemporaryDirectory() as d:
assert sync.main(["--check", "--dir", d]) == 0
if __name__ == "__main__":
failures = 0
for name, fn in sorted(globals().items()):
if name.startswith("test_") and callable(fn):
try:
fn()
print(f"PASS {name}")
except AssertionError as e:
failures += 1
print(f"FAIL {name}: {e}")
sys.exit(1 if failures else 0)