From 90d2681e3429372b2f2401fc4613946c40a57ae8 Mon Sep 17 00:00:00 2001 From: openhands Date: Mon, 16 Mar 2026 19:18:46 +0000 Subject: [PATCH] fix: handle git-based SDK deps in enterprise Docker build Strip git-based openhands SDK dependencies from the exported requirements.txt in the enterprise Dockerfile. These packages are already installed via the base app image and cannot have their hashes verified by pip when using git branch references. Co-authored-by: openhands --- enterprise/Dockerfile | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/enterprise/Dockerfile b/enterprise/Dockerfile index 56e4ff2124..436a36e76c 100644 --- a/enterprise/Dockerfile +++ b/enterprise/Dockerfile @@ -33,7 +33,8 @@ RUN cd /tmp/enterprise && \ # Export only main dependencies with hashes for supply chain security /app/.venv/bin/poetry export --only main -o requirements.txt && \ # Remove the local path dependency (openhands-ai is already in base image) - sed -i '/^-e /d; /openhands-ai/d' requirements.txt && \ + # and git-based SDK dependencies (already installed via the base app image) + sed -i '/^-e /d; /openhands-ai/d; /^openhands-.*@ git+/d' requirements.txt && \ # Install pinned dependencies from lock file /app/.venv/bin/pip install -r requirements.txt && \ # Cleanup - return to /app before removing /tmp/enterprise