pg-maker 0.1.0__tar.gz → 0.2.0__tar.gz

{pg_maker-0.1.0 → pg_maker-0.2.0}/.gitignore

@@ -24,6 +24,8 @@ operations/
 /development/
 /work/
 /delivery/
+# Local project generated for the managed PostgreSQL / ICU build.
+/yc16/
 *.log
 .DS_Store
 Thumbs.db

pg_maker-0.2.0/CHANGELOG.md

@@ -0,0 +1,44 @@
+# Changelog
+
+## 0.2.0 — 2026-11-03
+
+- Select the requested architecture from Docker multi-platform image stores during
+  environment preparation, including amd64 builds under ARM emulation.
+- Configurable two-part PostgreSQL or three-part product versions; package revisions
+  remain independent.
+- Source-pinned libraries before PostgreSQL configure, exact private pkg-config checks,
+  runtime delivery and core/cache invalidation on library changes.
+- CMake components, locked auxiliary sources and installed extension-version checks.
+- Debian 13 PostgreSQL 16.15 / ICU 70.1 init profile with a complete 38-name managed
+  extension catalog, 34 selected SQL extensions from 26 recipes and four explicit
+  exclusions.
+- Upstream PostgreSQL 16 build fixes for jsquery and pg_cron without changing their
+  SQL versions, and the docutils build dependency required by spqrhash installation.
+- Public GitHub SSH submodules resolve over HTTPS within public HTTPS checkouts.
+- Installed-wheel coverage for the complete named profile, including source pins
+  and managed SQL versions. Local build inputs and outputs are excluded from Git.
+
+The amd64 server built under QEMU reports ICU collation version 153.112. The full
+extension set and final DEB installation are still being qualified; selected catalog
+entries retain their unverified status.
+
+## 0.1.0 — 2026-10-18
+
+Initial alpha of the PostgreSQL distribution controller:
+
+- Strict YAML configuration, pinned sources/environments, immutable locks and plans.
+- Isolated Docker builds, durable operations, events, cancellation, recovery and caches.
+- PostgreSQL 14–19 catalog; initial Debian 13 / x86_64 / DEB platform.
+- Default pg_stat_statements, pg_stat_kcache and pg_wait_sampling recipes with manuals.
+- Documentation-only and combined builds using DocBook/Sphinx, local assets, HTML/man/PDF
+  and explicit translation bundles.
+- Server/client/libpq/docs packaging, manifests, offline installation checks and exports.
+- Owned Git development sessions, patch import/refresh/pop/push/rebase, conflict recovery,
+  selected component rebuilds, debug commands and iteration retention.
+- Optional pg_play CLI/API/MCP integration and runtime image handoff.
+- English project documentation, distribution-content checks and a tag-triggered PyPI
+  Trusted Publishing workflow.
+
+Database suites are opt-in; quick/development builds remain unverified. RPM, additional
+platforms and PostgreSQL distribution repository publication remain future work.
+See the [roadmap](docs/roadmap.md) and dated validation reports for precise boundaries.

{pg_maker-0.1.0 → pg_maker-0.2.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: pg-maker
-Version: 0.1.0
+Version: 0.2.0
 Summary: Build PostgreSQL distributions, documentation and patches in isolated environments
 Author-email: O2eg <oleg.ispu@gmail.com>
 License-Expression: MIT
@@ -76,6 +76,11 @@ A built wheel can be installed with `python -m pip install /path/to/pg_maker-VER
 
 ## Build a distribution
 
+For PostgreSQL 16.15 with private ICU 70.1 and the managed extension catalog, use
+`pg-maker init example --profile yc-16.15-icu70`.
+See the [profile and version policy](docs/managed-16-icu70.md) for included recipes,
+explicit exclusions and qualification limits. The default init profile is unchanged.
+
 ```bash
 pg-maker init example
 pg-maker validate example/build.yaml

{pg_maker-0.1.0 → pg_maker-0.2.0}/README.md

@@ -39,6 +39,11 @@ A built wheel can be installed with `python -m pip install /path/to/pg_maker-VER
 
 ## Build a distribution
 
+For PostgreSQL 16.15 with private ICU 70.1 and the managed extension catalog, use
+`pg-maker init example --profile yc-16.15-icu70`.
+See the [profile and version policy](docs/managed-16-icu70.md) for included recipes,
+explicit exclusions and qualification limits. The default init profile is unchanged.
+
 ```bash
 pg-maker init example
 pg-maker validate example/build.yaml

{pg_maker-0.1.0 → pg_maker-0.2.0}/docs/interfaces/build.md

@@ -42,6 +42,28 @@ output/commands.
 
 ## Builders and components
 
+Components with `type: library` and `build_phase: before-postgresql` build before
+core configure. They require exact `pkg_config_versions`; both version and the
+resolved private `libdir` are checked before proceeding. `provides_options: [icu]`
+replaces direct platform build/runtime dependencies for that option in this feature.
+Other system dependencies may still pull their own ICU transitively. The private
+prefix is first in PKG_CONFIG_PATH and LD_LIBRARY_PATH; binaries/libraries receive
+its lib directory in RPATH. Source/recipe changes invalidate core and dependent caches.
+Library files are inventoried before core install and only declared runtime_files
+are packaged. This path supports quick builds; full library qualification is rejected
+explicitly until a test-evidence adapter is available.
+
+External library/utility components may select `build_system: cmake`. Configure uses
+an out-of-source directory, private install prefix and RPATH, then bounded parallel
+build and install. CMake database qualification is not implemented. Recipe
+`configure_args` accept `{prefix}` and `{source:NAME}` for a named `extra_sources`
+input. Extra sources use the same pinned resolver, offline store, locks, cache hashes
+and portable exports as primary sources; they never download during compilation.
+
+`sql_extension_versions: {vector: '0.8.2'}` verifies installed control files even in
+quick mode. It checks package contents, not ABI, index-format or query correctness.
+See [the managed profile](../managed-16-icu70.md).
+
 `builders.autotools` contains validate_build, extra_tests, expected_inventory,
 reconcile and required-test validation. Queries execute Make inside the container.
 A new backend needs a module, explicit dispatch, supported-settings schema and real

{pg_maker-0.1.0 → pg_maker-0.2.0}/docs/interfaces/configuration.md

@@ -49,6 +49,15 @@ custom value. Conflicting postconditions produce `validation_error`. Automatic
 baseline selection enables it for custom changes; explicit false is invalid when
 acceptance includes baseline expectations.
 
+## Product version format
+
+`spec.product.version_format` selects `three-part` (default, `16.15.0`) or
+`postgresql` (`16.15`). The latter requires `release: 0`; use `package_revision`
+for package rebuilds. DEB revisions/suffixes still apply, e.g. `16.15-1.deb13`.
+An explicit `product.version` must match the computed value. Prerelease identities
+retain Debian ordering (`19.0~rc1` with PostgreSQL format). Naming policy v3 is
+recorded in identities; server source/version strings are not rewritten.
+
 ## Previous releases
 
 `spec.previous_releases` optionally supplies packages for same-major upgrade checks.

pg_maker-0.2.0/docs/managed-16-icu70.md

@@ -0,0 +1,173 @@
+# PostgreSQL 16.15 with private ICU 70.1
+
+This profile targets Debian 13 / x86_64 / DEB. It builds upstream PostgreSQL 16.15
+with source-pinned ICU 70.1, installs the required ICU runtime libraries inside the
+product prefix and selects public-source extensions from the managed catalog.
+It does not reproduce Yandex patches or claim vendor binary compatibility.
+
+## Create and build
+
+```bash
+pg-maker init yc16 --profile yc-16.15-icu70
+pg-maker validate yc16/build.yaml
+pg-maker config show yc16/build.yaml --resolved
+pg-maker env prepare yc16/build.yaml --out yc16/environments.json --operations yc16/operations
+pg-maker resolve yc16/build.yaml --environments yc16/environments.json --out yc16/lock.json --input-store yc16/inputs --operations yc16/operations
+pg-maker plan yc16/lock.json --goal package --out yc16/plan.json
+pg-maker build yc16/lock.json --plan yc16/plan.json --operations yc16/operations --detach
+```
+
+Run as the non-root UID/GID in `config/defaults.yaml` (default `1000:1000`). All
+project files remain editable. The standard `init` still creates the 18.1 profile.
+Reserve substantially more than the configured 20 GiB minimum for the complete
+extension set, especially PostGIS/GDAL and PLV8/V8, inputs and checkpoints.
+No full amd64 distribution build has yet qualified this new profile. Each selected
+extension is marked `selected-unverified`, never implicitly certified by metadata.
+
+## Version policy
+
+The profile contains:
+
+```yaml
+postgresql:
+  version: '16.15'
+product:
+  release: 0
+  package_revision: 1
+  version_format: postgresql
+```
+
+Product version is `16.15`; the Debian package version remains `16.15-1.deb13`.
+The latter suffix is packaging metadata, not an extra PostgreSQL version component.
+Set `version_format: three-part` to get `16.15.0`; this remains the backward-compatible
+default when omitted. PostgreSQL format requires `release: 0`, avoiding silently
+discarded vendor release numbers. Increment package_revision for rebuilds.
+PostgreSQL's own `version()` and pg_config version are taken from upstream sources.
+
+## Pinned library mechanism
+
+`components/libraries/icu70.yaml` pins the upstream ICU 70.1 source archive by SHA256.
+The recipe is part of the selected feature and is resolved into the immutable lock.
+
+```yaml
+type: library
+build_phase: before-postgresql
+pkg_config_versions:
+  icu-i18n: '70.1'
+  icu-uc: '70.1'
+provides_options: [icu]
+```
+
+Execution builds/installs the library before PostgreSQL configure, checks exact
+pkg-config versions and private libdir, and records `library_versions` in the report.
+The core and every dependent component use the private library search paths.
+Changing library sources, version assertions or build options invalidates core reuse.
+System ICU is not downgraded: the feature removes the direct libicu-dev/libicu76
+requirements; other platform libraries may still need system ICU independently.
+
+The server DEB includes libicudata.so.70, libicuuc.so.70 and libicui18n.so.70 with
+their versioned targets. Development headers and unselected ICU tools are excluded.
+RPATH is checked by the existing ELF/package validator. Installing a package never
+initializes or starts a database automatically.
+
+The mechanism accepts other source-pinned Make/Autotools libraries with private
+pkg-config files. A provider must correspond to an enabled PostgreSQL option;
+multiple providers for the same option or dependencies on post-core components fail.
+It does not infer unspecified dependency versions or enable network access in builds.
+
+## Managed extension coverage
+
+The source inventory is the 2026-11-02 non-contrib catalog snapshot from
+`rc1d-kp80p78vpf7pi1pd.mdb.yandexcloud.net`, database `ad_analytics`.
+Only pg_repack was installed in that database; the list describes availability.
+The editable [catalog](../src/pg_maker/bundled/catalogs/yc-16.15-extensions.yaml)
+retains all 38 names, default/installed/catalog versions, source pins, selection and
+exclusion reasons. The profile selects 34 SQL extensions through 26 source recipes,
+plus contrib pg_stat_statements and ICU. No missing component is silently substituted.
+
+SQL extension versions are not necessarily project release versions. For example,
+pg_cron 1.5.2 plus upstream compiler fix `0cb8118` supplies SQL version 1.5;
+RUM 1.3.14 supplies 1.3; jsquery commit `40b1db5` includes its PostgreSQL 16
+compatibility fix and retains SQL version 1.1. AGE uses the PG16/v1.5.0-rc0
+source tag whose control file declares 1.5.0.
+Repositories without a release tag are pinned to a specific commit. These choices
+match control versions, not a proven managed implementation/patchset.
+
+PostGIS supplies seven catalog entries. pglogical also supplies pglogical_origin;
+h3 supplies h3_postgis. CMake recipes use explicit private pg_config paths. H3's
+core source is a separate hash-pinned input passed via FETCHCONTENT_SOURCE_DIR_H3,
+with FetchContent downloads disabled. Git submodules, including PLV8's inputs, are
+frozen by the existing resolver before compilation.
+
+Four entries require additional inputs:
+
+| Extension | Managed SQL version | Status and action |
+| --- | --- | --- |
+| anon | 1.3.2.1 | Exact vendor variant unconfirmed. Supply matching sources/recipe; do not relabel 1.3.2. |
+| lwaldump | 1.0 | Matching public source not located. Supply vendor sources. |
+| oracle_fdw | 1.2 | Pinned upstream recipe is provided but not selected. Provision Oracle Instant Client SDK/runtime, paths and runtime dependency policy before enabling it. |
+| pgvector | 0.8.2 | Managed alias has no separate upstream control/library in the vector release. Upstream vector 0.8.2 is selected. Do not fabricate an alias for physical catalog compatibility. |
+
+Additional patches/libraries needed by managed preloads such as repl_mon are outside
+this non-contrib SQL catalog; this profile is not a drop-in managed-server clone.
+
+## Acceptance before using physical data
+
+Source version pinning and control-file checks do not qualify physical replication.
+On an isolated fresh database initialized with ICU en-US, require:
+
+```sql
+SELECT datlocprovider, daticulocale, datcollversion AS stored,
+       pg_database_collation_actual_version(oid) AS actual
+FROM pg_database WHERE datname=current_database();
+-- Expected: i | en-US | 153.112 | 153.112
+SELECT 'O''Connor' < 'O’Brien';
+-- Expected: true
+```
+
+Check loaded libicu paths of the running postgres process, all used explicit
+collations, extension compatibility and index-versus-sequential query results on an
+isolated physical pair. Matching collation version alone does not establish identical
+ICU data or vendor patches. Do not use REFRESH COLLATION VERSION to hide a mismatch.
+Default LC_COLLATE/LC_CTYPE and any libc-based objects need separate compatibility
+checks when the OS differs. Physical PGDATA must never be initialized with initdb.
+
+PostgreSQL 16's full database-test evidence adapter remains unavailable, so the
+profile builds/packages in quick mode and reports unverified. Pre-core libraries and
+CMake components also reject full qualification rather than marking skipped tests
+as passed. Instructions to run the new profile are not evidence that all 34 extensions
+have compiled, loaded or passed application queries on this platform.
+
+Source references: [PostgreSQL 16.15](https://ftp.postgresql.org/pub/source/v16.15/),
+[ICU 70.1](https://github.com/unicode-org/icu/releases/tag/release-70-1),
+[PostGIS 3.4.0](https://download.osgeo.org/postgis/source/postgis-3.4.0.tar.gz),
+[h3-pg 4.1.3](https://github.com/postgis/h3-pg/tree/v4.1.3).
+Other per-extension source URLs and immutable refs are in the catalog.
+
+## Validation recorded on 2026-11-03
+
+- 288 unit/contract checks and one small native CMake integration check passed. These cover
+  both version formats, rejection of discarded release numbers, the complete
+  catalog, pre-configure ordering, cache invalidation, frozen auxiliary inputs,
+  private-library/version failures and extension control-version failures.
+- The real ICU 70.1 archive was compiled/installed by the component builder in an
+  isolated local directory. A linked ICU C probe using ucol_open("en-US") and
+  ucol_getVersion returned **153.112** on the aarch64 workstation. This verifies
+  the source/library path, not the target amd64 PostgreSQL executable or DEB.
+- After disk cleanup, Debian 13 amd64 compilation was started under QEMU on the
+  aarch64 workstation, with four build jobs and an 8 GiB memory limit. Environment
+  preparation took 6m28s, ICU build/install 11m23s, PostgreSQL configure 2m39s,
+  PostgreSQL core compilation 10m47s.
+- The resulting amd64 PostgreSQL 16.15 executable started successfully in an
+  isolated fresh ICU en-US database: both stored and actual collation versions
+  were **153.112**. This is a source-prefix smoke test, not DEB installation evidence.
+- Real extension compilation exposed old-source issues in jsquery and pg_cron.
+  Both recipes now pin upstream fixes while preserving the managed SQL versions.
+  The spqrhash recipe also declares python3-docutils, needed by its install target
+  to generate bundled HTML documentation with rst2html.
+  The complete extension set and DEB installation qualification remain pending;
+  no full package is certified by these partial results.
+- The installed-wheel smoke check creates this named profile, validates its
+  version/platform/private-ICU policy, checks all 38 catalog entries and the 34
+  selected SQL versions, and verifies source pins against the catalog. The same
+  check runs in the existing distribution CI job.

{pg_maker-0.1.0 → pg_maker-0.2.0}/docs/releasing.md

@@ -38,11 +38,11 @@ ruff check .
 ruff format --check .
 python tools/generate_planning_schemas.py
 git diff --exit-code -- src/pg_maker/schemas
-python tools/check_release.py --tag v0.1.0
+python tools/check_release.py --tag v0.2.0
 python -m pytest -q tests/unit tests/contracts
 python -m build
 python -m twine check --strict dist/*
-python tools/check_release.py --dist dist --tag v0.1.0
+python tools/check_release.py --dist dist --tag v0.2.0
 python tools/smoke_wheel.py dist/*.whl
 ```
 
@@ -83,8 +83,8 @@ version tag matching the package:
 ```bash
 git remote add origin git@github.com:O2eg/pg_maker.git  # Only if origin is not configured.
 git push -u origin main
-git tag -a v0.1.0 -m "pg_maker 0.1.0"
-git push origin v0.1.0
+git tag -a v0.2.0 -m "pg_maker 0.2.0"
+git push origin v0.2.0
 ```
 
 publish.yml calls the same tests workflow on the tag. The distribution job validates

{pg_maker-0.1.0 → pg_maker-0.2.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "pg-maker"
-version = "0.1.0"
+version = "0.2.0"
 description = "Build PostgreSQL distributions, documentation and patches in isolated environments"
 readme = "README.md"
 requires-python = ">=3.10"
@@ -59,6 +59,8 @@ pg_maker = [
   "bundled/*.yaml", "bundled/config/*.yaml", "bundled/config/features/*.yaml",
   "bundled/patches/*.patch", "recipes/platforms/*.yaml",
   "bundled/components/*.yaml", "bundled/documentation/*.yaml",
+  "bundled/components/managed/*.yaml", "bundled/components/libraries/*.yaml",
+  "bundled/catalogs/*.yaml", "bundled/profiles/*.yaml",
   "bundled/documentation/*.sgml", "bundled/documentation/*.md",
   "packaging/templates/*.in",
   "documentation/theme/_templates/*.html", "documentation/theme/_static/*.css",

{pg_maker-0.1.0 → pg_maker-0.2.0}/src/pg_maker/__init__.py

@@ -1,3 +1,3 @@
 """PostgreSQL distribution maker. Public services live in pg_maker.api."""
 
-__version__ = "0.1.0"
+__version__ = "0.2.0"

{pg_maker-0.1.0 → pg_maker-0.2.0}/src/pg_maker/artifacts/manifest.py

@@ -270,6 +270,12 @@ def export_operation(directory: Path, destination: Path, *, include_inputs=False
                 for c in f["spec"]["components"]
                 if "source" in c["spec"]
             )
+            trees.update(
+                source["source_hash"]
+                for f in config["features"]
+                for c in f["spec"]["components"]
+                for source in c["spec"].get("extra_sources", {}).values()
+            )
             destination_store = InputStore(staging / "inputs")
             for digest in trees:
                 destination_store.put_tree(store.tree(digest))

{pg_maker-0.1.0 → pg_maker-0.2.0}/src/pg_maker/assets.py

@@ -8,12 +8,22 @@ from pg_maker.storage import ensure_directory, write_text
 
 
 def initialize_project(
-    directory: Path, *, with_doc=None, doc_languages=None, features=None, build_mode=None
+    directory: Path,
+    *,
+    with_doc=None,
+    doc_languages=None,
+    features=None,
+    build_mode=None,
+    profile=None,
 ) -> dict:
     ensure_directory(directory)
     assets = {"README.md": files("pg_maker").joinpath("bundled", "PROJECT.md").read_text()}
     bundled = files("pg_maker").joinpath("bundled")
     assets["build.yaml"] = bundled.joinpath("build.yaml").read_text()
+    if profile is not None:
+        if profile != "yc-16.15-icu70":
+            raise ValidationError("unknown build profile")
+        assets["build.yaml"] = bundled.joinpath("profiles", profile + ".yaml").read_text()
     for item in bundled.joinpath("config").iterdir():
         if item.name.endswith(".yaml"):
             assets[f"config/{item.name}"] = item.read_text()
@@ -32,7 +42,7 @@ def initialize_project(
             else:
                 assets[name] = item.read_text()
 
-    for directory_name in ("components", "documentation"):
+    for directory_name in ("components", "documentation", "catalogs"):
         collect(bundled.joinpath(directory_name), directory_name)
     for item in files("pg_maker").joinpath("schemas").iterdir():
         if item.name.endswith(".json"):

{pg_maker-0.1.0 → pg_maker-0.2.0}/src/pg_maker/builders/autotools.py

@@ -162,6 +162,12 @@ def validate_build(config: dict, goal: str, *, run_db_tests: bool = True) -> Non
     for feature in config["features"]:
         for component in feature["spec"]["components"]:
             spec = component["spec"]
+            if run_db_tests and spec.get("build_system") == "cmake":
+                raise UnsupportedError("CMake component DB-test evidence is not implemented")
+            if run_db_tests and spec.get("build_phase") == "before-postgresql":
+                raise UnsupportedError(
+                    "pre-PostgreSQL library test qualification is not implemented"
+                )
             if (
                 run_db_tests
                 and spec["type"] in {"pgxs", "utility", "library"}

{pg_maker-0.1.0 → pg_maker-0.2.0}/src/pg_maker/builders/components.py

@@ -96,6 +96,26 @@ def cluster(branch, name, *, database="postgres", preload=()):
                     raise
 
 
+def verify_extension_versions(branch, spec):
+    """Check delivered control files even in quick mode; this is not database qualification."""
+    for name, expected in spec.get("sql_extension_versions", {}).items():
+        control = branch.root / "prefix/share/postgresql/extension" / (name + ".control")
+        if not control.is_file():
+            raise PreconditionError(
+                "extension control file is missing", details={"extension": name}
+            )
+        found = re.search(r"^\s*default_version\s*=\s*'([^']+)'", control.read_text(), re.M)
+        if not found or found[1] != expected:
+            raise PreconditionError(
+                "extension version differs from recipe",
+                details={
+                    "extension": name,
+                    "expected": expected,
+                    "actual": found[1] if found else None,
+                },
+            )
+
+
 def build_components(branch, components, *, run_tests=True):
     reports = []
     for component in components:
@@ -120,11 +140,61 @@ def build_components(branch, components, *, run_tests=True):
                 cwd += "/" + spec["source_directory"]
                 path /= spec["source_directory"]
             component_source, container_source = path, cwd
+            configure_args = [
+                arg.replace("{prefix}", branch.prefix) for arg in spec.get("configure_args", [])
+            ]
+            for name, source in spec.get("extra_sources", {}).items():
+                extra_path = branch.root / "extra-sources" / identifier / name
+                if not extra_path.exists():
+                    shutil.copytree(
+                        branch.inputs.tree(source["source_hash"]), extra_path, symlinks=True
+                    )
+                extra_container = (
+                    branch.container_root + "/extra-sources/" + identifier + "/" + name
+                )
+                configure_args = [
+                    arg.replace("{source:" + name + "}", extra_container) for arg in configure_args
+                ]
+            if spec.get("build_system") == "cmake":
+                build_path = cwd + "/pg-maker-build"
+                branch.command(
+                    [
+                        "cmake",
+                        "-S",
+                        cwd,
+                        "-B",
+                        build_path,
+                        "-DCMAKE_INSTALL_PREFIX=" + branch.prefix,
+                        "-DCMAKE_INSTALL_RPATH=" + branch.prefix + "/lib",
+                        *configure_args,
+                    ],
+                    cwd=cwd,
+                )
+                branch.command(
+                    [
+                        "cmake",
+                        "--build",
+                        build_path,
+                        "--parallel",
+                        str(branch.variant["build"]["jobs"]),
+                    ],
+                    cwd=cwd,
+                )
+                branch.command(["cmake", "--install", build_path], cwd=cwd)
+                verify_extension_versions(branch, spec)
+                reports.append(
+                    {"id": identifier, "built": True, "native_targets": [], "tests": "skipped"}
+                )
+                continue
             if spec.get("configure_args") or (
                 kind in {"utility", "library"} and (path / "configure").is_file()
             ):
                 branch.command(
-                    ["./configure", "--prefix=" + branch.prefix, *spec.get("configure_args", [])],
+                    [
+                        "./configure",
+                        "--prefix=" + branch.prefix,
+                        *configure_args,
+                    ],
                     cwd=cwd,
                 )
         make = ["make", "--output-sync=target", "-j", str(branch.variant["build"]["jobs"])]
@@ -137,6 +207,7 @@ def build_components(branch, components, *, run_tests=True):
         for targets in (spec["make_targets"], spec["install_targets"]):
             if targets:
                 branch.command([*make, *targets], cwd=cwd)
+        verify_extension_versions(branch, spec)
         if not run_tests:
             reports.append(
                 {"id": identifier, "built": True, "native_targets": [], "tests": "skipped"}