mirror of
https://github.com/Heretek-AI/Strata.git
synced 2026-11-07 10:05:58 -10:00
Niko1221
c4aec611b2
Python's OpenSSL checks against certifi's roots and does not fetch a missing intermediate; Chrome and curl.exe use the Windows store (schannel), which also holds the roots antivirus HTTPS scanning, a company proxy or a preview build adds. strata_control/tls.py install() puts truststore (pinned in requirements.txt and the three runtime locks with hashes, CPython 3.12 in every archive) under every HTTPS connection of setup, Control's transfer and component download, serve and the fetch tools, with certifi as the fallback. A certificate failure is no longer the raw urlopen text and is not retried: it names the likely causes (antivirus web scanning, a company or school proxy), says what to try, and never offers to skip the check. The host: server/system-ca.mjs adds the system roots to Node's bundled list at start (Node 24.5+), and the agent process gets NODE_USE_SYSTEM_CA=1.
24 lines
811 B
Plaintext
24 lines
811 B
Plaintext
# Runtime Python packages setup.py installs into .venv, pinned so a checkout installs the same ones on any day (#214).
|
|
# CMake and Ninja are in requirements-build.txt and are installed only if a local build needs them.
|
|
# setup.py's pip step reads this file; an install from before it keeps the packages it has.
|
|
# Python 3.10+ (numpy's newest releases need a newer Python: one line per range).
|
|
numpy==2.5.3; python_version >= "3.12"
|
|
numpy==2.4.6; python_version == "3.11"
|
|
numpy==2.2.6; python_version < "3.11"
|
|
jinja2==3.1.6
|
|
regex==2026.9.10
|
|
pyyaml==6.0.3
|
|
tqdm==4.70.1
|
|
requests==2.34.2
|
|
pillow==12.3.0
|
|
psutil==7.2.2
|
|
|
|
# their dependencies
|
|
markupsafe==3.0.3
|
|
certifi==2026.10.19
|
|
truststore==0.10.5; python_version >= "3.10"
|
|
charset-normalizer==3.5.1
|
|
idna==3.20
|
|
urllib3==2.8.0
|
|
colorama==0.4.6; sys_platform == "win32"
|