Mondo Diaz 3bdeade7ca Fix nested dependency depth tracking in PyPI cache worker ...

When the cache worker downloaded a package through the proxy, dependencies
were always queued with depth=0 instead of depth+1. This meant depth limits
weren't properly enforced for nested dependencies.

Changes:
- Add cache-depth query parameter to pypi_download_file endpoint
- Worker now passes its current depth when fetching packages
- Dependencies are queued at cache_depth+1 instead of hardcoded 0
- Add tests for depth tracking behavior

2026-02-02 13:47:22 -06:00

31 KiB

Raw Blame History

View Raw