vgi-python 0.48.1__tar.gz → 0.48.2__tar.gz

{vgi_python-0.48.1 → vgi_python-0.48.2}/.github/workflows/ci.yml

@@ -147,6 +147,26 @@ jobs:
       - name: Run hosted-protocols group (stdio, unix, http)
         run: scripts/hosted_protocols_conformance.sh
 
+  bare-install:
+    # Every other job syncs --all-extras, which hides a core-dependency gap: a
+    # worker that installs vgi-python with no extras must still import the
+    # modules catalog_attach reaches (0.48.0 shipped without pycryptodome).
+    name: Bare install (no extras)
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v7
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@v10.2.0
+
+      - name: Build wheel
+        run: uv build --wheel --out-dir dist .
+
+      - name: Import attach-path modules from the bare wheel
+        run: |
+          uv run --isolated --no-project --python 3.14 --with dist/*.whl \
+            python -c "import vgi, vgi.worker, vgi.query_execution; print('ok')"
+
   s3-offload-localstack:
     name: S3 Offload Tests (LocalStack)
     runs-on: ubuntu-latest

{vgi_python-0.48.1 → vgi_python-0.48.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: vgi-python
-Version: 0.48.1
+Version: 0.48.2
 Summary: Vector Gateway Interface - Connect DuckDB to external programs via Apache Arrow
 Project-URL: Homepage, https://query.farm
 Project-URL: Repository, https://github.com/Query-farm/vgi-python
@@ -161,6 +161,7 @@ Requires-Dist: click
 Requires-Dist: httpx2>=2.12.0
 Requires-Dist: platformdirs
 Requires-Dist: pyarrow
+Requires-Dist: pycryptodome>=3.20
 Requires-Dist: typer>=0.9
 Requires-Dist: vgi-rpc>=0.52.3
 Provides-Extra: azure

{vgi_python-0.48.1 → vgi_python-0.48.2}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "vgi-python"
-version = "0.48.1"
+version = "0.48.2"
 description = "Vector Gateway Interface - Connect DuckDB to external programs via Apache Arrow"
 readme = "README.md"
 keywords = [
@@ -42,6 +42,10 @@ dependencies = [
     "platformdirs",
     "vgi-rpc>=0.52.3",
     "httpx2>=2.12.0",
+    # vgi.query_execution seals execution handles with vgi_rpc.crypto, which
+    # imports pycryptodome. vgi-rpc only pulls it in under its `http` extra, but
+    # catalog_attach reaches query_execution on every transport (stdio too).
+    "pycryptodome>=3.20",
 ]
 
 [project.optional-dependencies]

{vgi_python-0.48.1 → vgi_python-0.48.2}/uv.lock

@@ -1,5 +1,5 @@
 version = 1
-revision = 5
+revision = 3
 requires-python = ">=3.13"
 resolution-markers = [
     "python_full_version >= '3.15'",
@@ -2749,13 +2749,14 @@ requires-dist = [
 
 [[package]]
 name = "vgi-python"
-version = "0.48.1"
+version = "0.48.2"
 source = { editable = "." }
 dependencies = [
     { name = "click" },
     { name = "httpx2" },
     { name = "platformdirs" },
     { name = "pyarrow" },
+    { name = "pycryptodome" },
     { name = "typer" },
     { name = "vgi-rpc" },
 ]
@@ -2859,6 +2860,7 @@ requires-dist = [
     { name = "platformdirs" },
     { name = "pyarrow" },
     { name = "pyarrow-stubs", marker = "extra == 'dev'" },
+    { name = "pycryptodome", specifier = ">=3.20" },
     { name = "pymssql", marker = "extra == 'azure'", specifier = ">=2.3.0" },
     { name = "pytest", marker = "extra == 'dev'" },
     { name = "pytest-cov", marker = "extra == 'dev'" },