tests.test_provenance module

Tests of the PEP 740 provenance lookup and of the review of a run’s bumps.

tests.test_provenance.test_release_provenance_reads_the_publisher_of_the_wheel(mock_files)

tests.test_provenance.test_release_provenance_tells_an_absence_from_a_failure(mock_files, error, expected)

Only a 404 of the integrity API says the release carries no provenance.

tests.test_provenance.test_release_provenance_without_files_is_unknown(files)

tests.test_provenance.test_is_regression(new, old, expected)

tests.test_provenance.test_provenance_cell(new, old, expected)

tests.test_provenance.test_review_holds_the_bumps_that_lost_provenance()

tests.test_provenance.test_tool_versions_withhold_a_pypi_tool_that_lost_provenance(monkeypatch)

The registry keeps the pin of a tool whose new release lost provenance.

A binary bump in the same run still lands, its cell naming the attestation the checksum recompute verifies.

tests.test_provenance.test_uv_lock_steps_back_a_package_that_lost_provenance(tmp_path, monkeypatch)

The lost bump is locked again at its previous version; the others stay.

tests.test_provenance.test_uv_lock_without_a_regression_keeps_the_upgrade(tmp_path, monkeypatch)

tests.test_provenance.test_diff_table_gains_a_provenance_column()

tests.test_provenance.test_diff_table_without_provenance_keeps_its_columns()

tests.test_provenance.test_provenance_holds_section()