From 4d96b768380d53c796a63174ad225e558df3df74 Mon Sep 17 00:00:00 2001 From: Eyal Danieli Date: Tue, 18 Aug 2026 13:52:25 +0300 Subject: [PATCH] fix(marketplace): stop publishing requirements.txt in build (#991) --- cli/marketplace/build.py | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/cli/marketplace/build.py b/cli/marketplace/build.py index 206886631..bbfdd695b 100644 --- a/cli/marketplace/build.py +++ b/cli/marketplace/build.py @@ -411,8 +411,12 @@ def update_or_create_item( latest_static = target_latest / "static" version_static = target_version / "static" - shutil.copytree(item_dir, latest_src) - shutil.copytree(item_dir, version_src) + # requirements.txt is only used for local testing and is not consumed by the + # marketplace or by mlrun (deps live in function.yaml/item.yaml). Excluding it + # keeps unfixable dependency-scan manifests out of the published artifact. + ignore_published = shutil.ignore_patterns("requirements.txt") + shutil.copytree(item_dir, latest_src, ignore=ignore_published) + shutil.copytree(item_dir, version_src, ignore=ignore_published) latest_static.mkdir(parents=True, exist_ok=True) version_static.mkdir(parents=True, exist_ok=True)