RHOAIENG-18714: chore(deps): keep requirements.txt in sync with Pipfi…

…le.lock

Makefile

@@ -542,6 +542,11 @@ refresh-pipfilelock-files:
 		fi
 	done
 
+	echo "Regenerating requirements.txt files"
+	pushd $(ROOT_DIR)
+		bash $(ROOT_DIR)/scripts/sync-requirements-txt.sh
+	popd
+
 # This is only for the workflow action
 # For running manually, set the required environment variables
 .PHONY: scan-image-vulnerabilities

base/c9s-python-3.11/requirements.txt

@@ -0,0 +1,12 @@
+# Generated by /scripts/sync-requirements-txt.sh from Pipfile.lock
+
+--index-url https://pypi.org/simple
+#
+# Default dependencies
+#
+setuptools==70.0.0; python_version >= '3.8' \
+    --hash=sha256:54faa7f2e8d2d11bcd2c07bed282eef1046b5c080d1c32add737d7b5817b1ad4 \
+    --hash=sha256:f211a66637b8fa059bb28183da127d4e86396c991a942b028c6650d4319c3fd0
+wheel==0.43.0; python_version >= '3.8' \
+    --hash=sha256:465ef92c69fa5c5da2d1cf8ac40559a8c940886afcef87dcf14b9470862f1d85 \
+    --hash=sha256:55c570405f142630c6b9f72fe09d9b67cf1477fcf543ae5b8dcb1f5b7377da81

base/ubi9-python-3.11/requirements.txt

@@ -0,0 +1,12 @@
+# Generated by /scripts/sync-requirements-txt.sh from Pipfile.lock
+
+--index-url https://pypi.org/simple
+#
+# Default dependencies
+#
+setuptools==74.1.3; python_version >= '3.8' \
+    --hash=sha256:1cfd66bfcf197bce344da024c8f5b35acc4dcb7ca5202246a75296b4883f6851 \
+    --hash=sha256:fbb126f14b0b9ffa54c4574a50ae60673bbe8ae0b1645889d10b3b14f5891d28
+wheel==0.44.0; python_version >= '3.8' \
+    --hash=sha256:2376a90c98cc337d18623527a97c31797bd02bad0033d41547043a1cbfbe448f \
+    --hash=sha256:a29c3f2817e95ab89aa4660681ad547c0e9547f20e75b0562fe7723c9a2a9d49

ci/generate_code.sh

@@ -2,3 +2,4 @@
 set -Eeuxo pipefail
 
 python3 ci/cached-builds/gen_gha_matrix_jobs.py
+bash scripts/sync-requirements-txt.sh

scripts/sync-requirements-txt.sh

@@ -0,0 +1,12 @@
+#!/usr/bin/env bash
+set -Eeuxo pipefail
+
+# Our build tooling depends on requirements.txt files with hashes
+# Namely, Konflux (https://konflux-ci.dev/), and Cachi2 (https://github.com/containerbuildsystem/cachi2).
+
+# The following will create an extra requirement.txt file for every Pipfile.lock we have.
+micropipenv --version || pip install micropipenv
+find . -name Pipfile.lock -execdir bash -c '
+  echo "# Generated by /scripts/sync-requirements-txt.sh from Pipfile.lock" > requirements.txt &&
+  echo >> requirements.txt &&
+  micropipenv requirements >> requirements.txt' \;