Skip to content

[proposal] New resolver configuration#938

Open
tiran wants to merge 1 commit intopython-wheel-build:mainfrom
tiran:proposal-new-resolver-config
Open

[proposal] New resolver configuration#938
tiran wants to merge 1 commit intopython-wheel-build:mainfrom
tiran:proposal-new-resolver-config

Conversation

@tiran
Copy link
Copy Markdown
Collaborator

@tiran tiran commented Feb 27, 2026

Add design proposal for new resolver configuration.

See: #937

@tiran tiran requested a review from a team as a code owner February 27, 2026 11:06
@mergify mergify bot added the ci label Feb 27, 2026
@tiran tiran force-pushed the proposal-new-resolver-config branch 3 times, most recently from ceb5b48 to 071d46c Compare March 3, 2026 14:21
@dhellmann dhellmann requested a review from shifa-khan March 3, 2026 22:30
@dhellmann
Copy link
Copy Markdown
Member

@shifa-khan has been looking at one of the other tickets related to similar work.

@tiran
Copy link
Copy Markdown
Collaborator Author

tiran commented Mar 4, 2026

I have inspect our downstream repo. Most prepare_source and download_source hooks can be replaced by the new resolver and download configuration. More than half of the plugins will no longer be necessary.

  • aiter: gitlab-git
  • amdsmi: special case to pin package
  • aotriton: special case
  • bitsandbytes: github-download
  • deep_ep: gitlab-download
  • deep_gemm: gitlab-git
  • detectron2: gitlab-download
  • faiis-cpu: pypi-git
  • flashinfer_python: pypi-git
  • flashinfer_jit_cache: gitlab-git
  • kubeflow: gitlab-download
  • litellm: gitlab-download
  • llama_stack: gitlab-download
  • mlflow: gitlab-download
  • mlflow_skinny: gitlab-download
  • mlflow_tracing: gitlab-download
  • mlserver: gitlab-download
  • mlserver_lightgbm: gitlab-download
  • mlserver_sklearn: gitlab-download
  • mlserver_xgboost: gitlab-download
  • nixl: gitlab-download
  • nvidia_cudnn_frontend: gitlab-download
  • nvidia_riva-python: pypi-git
  • opencv-python: gitlab-git
  • pplx_kernels: gitlab-download
  • submodlib_py: gitlab-clone (upstream has tags, version map is no longer necessary)
  • tacozip: pypi-git
  • tensorflow: github-git
  • tensorflow_rocm: special case
  • tilelang: gitlab-git
  • torchao: gitlab-git
  • tpu_info: special case, version map
  • tritonclient: gitlab-download
  • vllm: gitlab-download / special case?
  • vllm_bart_plugin: gitlab-download
  • vllm_neuron: gitlab-git

@tiran tiran requested a review from rd4398 March 16, 2026 16:10
@tiran tiran force-pushed the proposal-new-resolver-config branch from 071d46c to 3356160 Compare March 16, 2026 16:11
@shifa-khan
Copy link
Copy Markdown
Contributor

downstream has few plugins call ensure_pkg_info() in prepare_source as boilerplate. Git clones never have PKG-INFO, but build tools (like setuptools-scm) need it before building. Could the git-based providers (gitlab-git, github-git, pypi-git) handle this automatically?

Copy link
Copy Markdown
Collaborator Author

@tiran tiran left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

downstream has few plugins call ensure_pkg_info() in prepare_source as boilerplate. Git clones never have PKG-INFO, but build tools (like setuptools-scm) need it before building. Could the git-based providers (gitlab-git, github-git, pypi-git) handle this automatically?

Great point! Yes, this will be handled automatically in two ways:

  • Fromager already adds PKG-INFO to the final sdist. In some cases, the file is added too late for some PEP 517 hooks.
  • Fromager will add a .git_archival.txt file to clones. Lala is working on the feature in #961 / #962 . This works for all setuptools-scm cases.

I'll update the design with the PKG-INFO and .git_archival.txt details.

@tiran tiran force-pushed the proposal-new-resolver-config branch from 3356160 to 6559cd3 Compare March 20, 2026 11:00
@tiran
Copy link
Copy Markdown
Collaborator Author

tiran commented Mar 27, 2026

@Mergifyio rebase

@mergify
Copy link
Copy Markdown
Contributor

mergify bot commented Mar 27, 2026

rebase

✅ Branch has been successfully rebased

@tiran tiran force-pushed the proposal-new-resolver-config branch from 6559cd3 to 37d1bea Compare March 27, 2026 09:36
@coderabbitai
Copy link
Copy Markdown

coderabbitai bot commented Mar 27, 2026

📝 Walkthrough

Walkthrough

Added a "Fromager Enhancement Proposals" section to the Sphinx docs by creating docs/proposals/index.rst and adding it to the Development .. toctree:: in docs/index.rst. Introduced docs/proposals/new-resolver-config.md, a proposal that specifies a new top-level source configuration for resolver/downloader provider profiles (PyPI sdist/wheels, tarball downloads, git/VCS sources, GitHub/GitLab releases), matcher factory behavior, git cloning/archival rules, and mappings from prior configuration keys to the new provider parameters.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

🚥 Pre-merge checks | ✅ 2
✅ Passed checks (2 passed)
Check name Status Explanation
Title check ✅ Passed The title '[proposal] New resolver configuration' accurately reflects the main changeset, which adds a design proposal for a new resolver configuration system.
Description check ✅ Passed The description 'Add design proposal for new resolver configuration' clearly relates to the changeset, which introduces a new proposal document for resolver configuration.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.


Comment @coderabbitai help to get the list of available commands and usage tips.

Copy link
Copy Markdown

@coderabbitai coderabbitai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 3

🤖 Prompt for all review comments with AI agents
Verify each finding against the current code and only fix it if needed.

Inline comments:
In `@docs/proposals/new-resolver-config.md`:
- Line 9: Replace the incorrect verb in the sentence "This enhancement document
proposal a new approach to configure the package" by changing "proposal" to
"proposes" so the sentence reads "This enhancement document proposes a new
approach to configure the package"; update the single sentence in the
docs/proposals/new-resolver-config.md content where that exact phrase appears.
- Line 187: Replace the lowercase platform name "github" with the capitalized
"GitHub" in the phrase referring to the `release_artifact` parameter of the
`github` or `gitlab` provider so the documentation consistently uses the
official name; update the occurrence that mentions "github" (in the context of
`release_artifact` and provider descriptions) to "GitHub" while leaving code
identifiers/backticks intact if they must remain lowercase.
- Line 169: The comment contains a duplicated word "must" in the text "tag must
must v1.2+midstream.1.cpu"; edit that comment to remove the duplicate so it
reads "tag must v1.2+midstream.1.cpu" (preserve the rest of the comment and the
Version("1.2+midstream.1") example).
🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: 26a9cf54-1ff6-456b-89d4-e20a9f61d2f0

📥 Commits

Reviewing files that changed from the base of the PR and between 9b399c8 and 37d1bea.

📒 Files selected for processing (3)
  • docs/index.rst
  • docs/proposals/index.rst
  • docs/proposals/new-resolver-config.md

### Deprecations

- `download_source.url` is handled by `pypi-download` profile or
`release_artifact` parameter of `github` or `gitlab` provider
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor

Capitalize "GitHub" for consistency.

The official platform name should be capitalized as "GitHub" to match its usage elsewhere in the document.

📝 Proposed fix
-  `release_artifact` parameter of `github` or `gitlab` provider
+  `release_artifact` parameter of `GitHub` or `GitLab` provider
📝 Committable suggestion

‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.

Suggested change
`release_artifact` parameter of `github` or `gitlab` provider
`release_artifact` parameter of `GitHub` or `GitLab` provider
🧰 Tools
🪛 LanguageTool

[uncategorized] ~187-~187: The official name of this software platform is spelled with a capital “H”.
Context: ...le or release_artifact parameter of github or gitlab provider - `download_sourc...

(GITHUB)

🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.

In `@docs/proposals/new-resolver-config.md` at line 187, Replace the lowercase
platform name "github" with the capitalized "GitHub" in the phrase referring to
the `release_artifact` parameter of the `github` or `gitlab` provider so the
documentation consistently uses the official name; update the occurrence that
mentions "github" (in the context of `release_artifact` and provider
descriptions) to "GitHub" while leaving code identifiers/backticks intact if
they must remain lowercase.

The resolver and source downloader can be configuration for all variants of
a package as well as re-defined for each variant. A package can be configured
as prebuilt for all variants or a variant can have a different resolver and
sources than other.
Copy link
Copy Markdown
Member

@LalatenduMohanty LalatenduMohanty Apr 6, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggestion: global source_defaults in settings.yaml

There is a fair chance that a lot of the mirrors share the same base URL (https://<>/mirrors/github/...), consider adding a source_defaults key:

# settings.yaml                                                                                                                                 
source_defaults:                                                                                          
  gitlab_url: https://<>/mirrors/github

Per-package configs could then use a short project path instead of repeating the full URL:

Before

  source:                                                                                                   
    provider: gitlab-git
    url: https://<>/mirrors/github/ROCm/aiter

After

  source:
    provider: gitlab-git
    project: ROCm/aiter   # resolved against source_defaults.gitlab_url

This would reduce repetition across many package configs and avoid typo-induced breakage.
The settings file model already loads settings.yaml adding a source_defaults field is a small extension.
Full url would still work for projects outside the default base.

Copy link
Copy Markdown
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Counter argument: "explicit is better than implicit"

I prefer to have full URLs in config files. It makes it easier to understand and just copy 'n paste the URL into a browser.

source:
# resolve on PyPI, git clone, and build as tarball
provider: pypi-git
clone_url: https://git.example/viking/viking.git
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

What's the difference between url and clone_url? (gitlab-git uses url, pypi-git uses clone_url — why different names for the same concept?

Copy link
Copy Markdown
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I like self-documenting configuration. The fields contain different types of URLs with different meaning. The pypi-* provides use index_url instead of url, too. I'm going to rename the Gitlab url field to project_url.

- The `gitlab-download` and `github-download` are similar to `gitlab-git` and
`github-git` profiles. Instead of cloning a git repository, they download
a git tarball or an release artifact.

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I am wondering if we should defines what fields each profile accepts. Without a schema,
there's no validation. A user could put clone_url on a pypi-sdist profile and get no error until runtime

Copy link
Copy Markdown
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

See "How" section of the proposal:

Each use case is handled a provider profile. The profile name acts as a tag (discriminated union). Each use case has a well-defined set of mandatory and optional arguments.


The new system will use a new top-level configuration key `source`. The old
`download_source` and `resolver_dist` settings will stay supported for a
while. Eventually the old options will be deprecated and removed.
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We need to clarify where source config enters the dispatch chain. For example
If someone adds to the YAML:

source:                                                                                                                                         
  provider: gitlab-git                                                                                                                          
  url: https://gitlab.com/.../detectron2                                                                                                        

But forgets to delete detectron2.py. Now what?

  • Does the plugin win? (User thinks they migrated but the old code still runs silently)
  • Does source config win? (Plugin is ignored without warning )
  • Is it an error?

Copy link
Copy Markdown
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

That's TBD. What do you recommend?

The default matcher factory parsed the tag with `packaging.version.Version`
and ignores any error. Fromager will provide additional matcher factories for
common tag patterns like `v1.2`, `1.2`, and `v1.2-stable`.

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We shuld add a short list of built-in factories with their import strings and what they match:

For example:

fromager.matchers:pep440 (default) — parses any PEP 440 version
fromager.matchers:v_prefix — matches v1.2.3, strips the v
fromager.matchers:v_prefix_stable — matches v1.2.3-stable, strips v and -stable

Copy link
Copy Markdown
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

FYI, v1.2.3 is a valid PEP 440 version number.

@LalatenduMohanty
Copy link
Copy Markdown
Member

@tiran The proposal looks good. We should merge it asap.

@tiran tiran force-pushed the proposal-new-resolver-config branch from 37d1bea to b32d482 Compare April 7, 2026 10:12
Add design proposal for new resolver configuration.

See: python-wheel-build#937
Signed-off-by: Christian Heimes <cheimes@redhat.com>
@tiran tiran force-pushed the proposal-new-resolver-config branch from b32d482 to 45fd388 Compare April 7, 2026 13:09
Copy link
Copy Markdown

@coderabbitai coderabbitai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents
Verify each finding against the current code and only fix it if needed.

Inline comments:
In `@docs/proposals/new-resolver-config.md`:
- Around line 49-50: The doc currently contradicts itself by saying "Provide SSH
transport for git" is out of scope while elsewhere stating git profiles clone
over `https` or `ssh`; update both occurrences (the "Provide SSH transport for
git" sentence and the phrase "git profiles clone over `https` or `ssh`") to be
consistent: either explicitly state SSH is out of scope everywhere (e.g.,
replace "`ssh`" with "`https`" and add a note that SSH support is future work)
or explicitly include SSH as supported and remove the out-of-scope sentence;
ensure the same wording appears at both the earlier mention and the later lines
currently referencing `https` or `ssh`.
🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: a3439f13-0234-4da4-b356-bffb61612fd1

📥 Commits

Reviewing files that changed from the base of the PR and between b32d482 and 45fd388.

📒 Files selected for processing (3)
  • docs/index.rst
  • docs/proposals/index.rst
  • docs/proposals/new-resolver-config.md
✅ Files skipped from review due to trivial changes (2)
  • docs/index.rst
  • docs/proposals/index.rst

Comment on lines +49 to +50
- Provide SSH transport for git. The feature can be added at a later point
when it's needed.
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟠 Major

Resolve contradiction on SSH support in git profiles

The proposal currently says SSH transport is out of scope, but later says git profiles clone over https or ssh. Please make these sections consistent.

Suggested doc fix
-- The `gitlab-tag-git` and `github-tag-git` profiles use the
-  `GitLabTagProvider` or `GitHubTagProvider` to resolve versions. The
-  profiles git clone a project over `https` or `ssh` protocol.
+- The `gitlab-tag-git` and `github-tag-git` profiles use the
+  `GitLabTagProvider` or `GitHubTagProvider` to resolve versions. The
+  profiles git clone a project over `https` protocol.

As per coding guidelines "**/*.md: Only comment on factual errors or broken links."

Also applies to: 138-140

🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.

In `@docs/proposals/new-resolver-config.md` around lines 49 - 50, The doc
currently contradicts itself by saying "Provide SSH transport for git" is out of
scope while elsewhere stating git profiles clone over `https` or `ssh`; update
both occurrences (the "Provide SSH transport for git" sentence and the phrase
"git profiles clone over `https` or `ssh`") to be consistent: either explicitly
state SSH is out of scope everywhere (e.g., replace "`ssh`" with "`https`" and
add a note that SSH support is future work) or explicitly include SSH as
supported and remove the out-of-scope sentence; ensure the same wording appears
at both the earlier mention and the later lines currently referencing `https` or
`ssh`.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants