[CI] use pinned dependencies

.github/workflows/build.yml

@@ -51,6 +51,7 @@ jobs:
             yum install aria2 -y
             rm -f /usr/bin/python /bin/python
             ln -s ${{ matrix.python-exec }} /usr/bin/python
+            python -m pip install -r requirements.txt
             /work/tools/Linux/dist_script.sh
       - uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3
         with:
@@ -130,6 +131,7 @@ jobs:
       - uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 # v4.7.1
         with:
           python-version: ${{ matrix.python-version }}
+      - run: python -m pip install -r .\\..\..\requirements.txt
       - run: dist_script_native.cmd
       - uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3
         with:
@@ -156,6 +158,7 @@ jobs:
 
       - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0
       - run: update_dev_environment.cmd
+      - run: python -m pip install -r .\\..\..\requirements.txt
       - run: dist_script.cmd
       - uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3
         with:
@@ -210,24 +213,24 @@ jobs:
       - uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 # v4.7.1
         with:
           python-version: '3.12'
-      - run: python -m pip install patchelf auditwheel
+      - run: python -m pip install -r dev-requirements.txt
       - run: python ./tools/auditwheel_.py repair --plat manylinux_2_28_x86_64 linux_3.12/dist/stlib-*cp312*.whl
       - uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 # v4.7.1
         with:
           python-version: '3.11'
-      - run: python -m pip install patchelf auditwheel
+      - run: python -m pip install -r dev-requirements.txt
       - run: python ./tools/auditwheel_.py repair --plat manylinux_2_28_x86_64 linux_3.11/dist/stlib-*cp311*.whl
       - uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 # v4.7.1
         with:
           python-version: '3.10'
-      - run: python -m pip install patchelf auditwheel
+      - run: python -m pip install -r dev-requirements.txt
       - run: python ./tools/auditwheel_.py repair --plat manylinux_2_28_x86_64 linux_3.10/dist/stlib-*cp310*.whl
       #- run: python ./tools/auditwheel_.py repair --plat manylinux2014_armv7l rpi_armv7/dist/stlib-*cp310*.whl
       #- run: python ./tools/auditwheel_.py repair --plat manylinux2014_aarch64 rpi_aarch64/dist/stlib-*cp310*.whl
       - uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 # v4.7.1
         with:
           python-version: '3.9'
-      - run: python -m pip install patchelf auditwheel
+      - run: python -m pip install -r dev-requirements.txt
       - run: python ./tools/auditwheel_.py repair --plat manylinux_2_28_x86_64 linux_3.9/dist/stlib-*cp39*.whl
       - run: mv windows_3.9/dist/stlib-*win_amd64.whl wheelhouse/
       - run: mv windows_3.10/dist/stlib-*win_amd64.whl wheelhouse/

.github/workflows/codeql.yml

@@ -58,7 +58,7 @@ jobs:
           # Prefix the list here with "+" to use these queries and those in the config file.
 
       - run: |
-         python -m pip install build
+         python -m pip install -r dev-requirements.txt
          ./tools/Linux/dist_script.sh
 
       - name: Perform CodeQL Analysis

.github/workflows/coverage.yml

@@ -29,7 +29,7 @@ jobs:
           python-version: ${{ matrix.python-version }}
       - run: ./tools/Linux/dist_script.sh
       - run: python -m pip install dist/*.whl -v
-      - run: python -m pip install -r requirements_dev.txt
+      - run: python -m pip install -r dev-requirements.txt
       - name: Prevent exceeding steam rate limits (waiting 30s)
         run: sleep 30s
       - run: pytest --cov=stlib --cov-report=xml

requirements_dev.txt → dev-requirements.txt

@@ -5,4 +5,3 @@ pdoc~=14.1
 pytest~=7.4
 pytest-asyncio~=0.21
 pytest-cov~=4.1
-build~=1.0

requirements.txt

@@ -2,3 +2,4 @@ aiohttp~=3.8
 beautifulsoup4~=4.12
 rsa==4.9
 setuptools~=68.2
+build~=1.0

tools/Linux/dist_script.sh

@@ -27,7 +27,6 @@ unzip -o steamworks-sdk.zip || exit 1
 popd || exit 1
 
 # build project
-python -m pip install build || exit 1
 python -m build --sdist --wheel || exit 1
 pushd build || exit 1
 mv "lib.linux-x86_64-$PYTHON_VERSION" "$RELEASE_NAME" || exit 1

tools/MSYS/dist_script.sh

@@ -27,7 +27,6 @@ unzip -o steamworks-sdk.zip || exit 1
 popd || exit 1
 
 # build project
-python -m pip install build || exit 1
 python -m build --sdist --wheel --no-isolation || exit 1
 pushd build || exit 1
 mv "lib.mingw_x86_64-$PYTHON_VERSION" "$RELEASE_NAME" || exit 1