Nightly CI failure — 2026-05-15 #55

Activity

1. github-actions

   added

   bugSomething isn't workingSomething isn't working

   nightly-failure

   on May 15, 2026
2. cemililik commented on May 15, 2026

   

   cemililik

   on May 15, 2026

   Collaborator

   More actions

   Fixed in PR #54 (commit 36200e0): requests_toolbelt dependency was added to pyproject.toml in v0.6.0 (SSRF DNS-rebinding fix, PR #52) but nightly.yml's test-latest-deps and test-min-deps jobs install ForgeLM with pip install -e . --no-deps after a manual pip install of the dependency list — so the manual list MUST mirror pyproject.toml dependencies, and requests-toolbelt was missing.

   Added to both job's install lines (test-latest-deps unconstrained; test-min-deps pinned to 1.0.0 as the documented lower bound) + a comment block spelling out the mirror contract so a future dependency addition can't recreate the gap. Verified by re-running the nightly workflow successfully. Closing.
3. cemililik

   closed this as completedon May 15, 2026