Pin backend dependencies using pip-compile

.github/workflows/ci.yml

@@ -1,11 +1,27 @@
-name: Dummy-CI
+name: CI
 
-on: [push]
+on:
+  push:
+    branches: [main]
+  pull_request:
 
 jobs:
-  build:
+  check-lockfile:
+    name: Check backend lockfile is up to date
+    if: github.event_name == 'pull_request'
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v1
-    - name: Pass
-      run: echo Success!
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - name: Ensure requirements.txt is updated when requirements.in changes
+        run: |
+          BASE=${{ github.event.pull_request.base.sha }}
+          HEAD=${{ github.event.pull_request.head.sha }}
+          CHANGED=$(git diff --name-only "$BASE" "$HEAD")
+          if echo "$CHANGED" | grep -q 'backend/requirements\.in'; then
+            if ! echo "$CHANGED" | grep -q 'backend/requirements\.txt'; then
+              echo "::error::backend/requirements.in was modified but backend/requirements.txt was not. Please run pip-compile to regenerate the lockfile."
+              exit 1
+            fi
+          fi

README.md

@@ -13,9 +13,8 @@ This project consists of three main components:
 ## Quick Start
 
 ### Prerequisites
-- Python 3.8+
-- Node.js 16+
-- CPython source repository (for benchmarking)
+- Docker Engine 20.10+ and Docker Compose 2.0+
+- CPython source repository (for benchmarking with the worker)
 
 ### Setup & Installation
 ```bash
@@ -58,6 +57,17 @@ make build                  # Build frontend for production
 make clean                  # Clean up generated files and caches
 ```
 
+### Updating Backend Dependencies
+```bash
+# Edit backend/requirements.in, then regenerate the lockfile:
+docker run --rm -v "$(pwd)/backend:/app" -w /app python:3.13-slim-bookworm \
+  sh -c "pip install --quiet pip-tools && pip-compile --strip-extras \
+  --generate-hashes --output-file requirements.txt requirements.in"
+
+# Rebuild the backend container:
+docker compose -f docker-compose.dev.yml up --build -d backend
+```
+
 ## Worker Setup
 
 ### Worker Usage

backend/Dockerfile.dev

@@ -1,4 +1,4 @@
-FROM python:3.11-slim
+FROM python:3.13-slim-bookworm
 
 WORKDIR /app
 

backend/requirements.in

@@ -0,0 +1,14 @@
+fastapi>=0.115.0
+uvicorn[standard]>=0.30.0
+pydantic
+pydantic-settings
+sqlalchemy
+aiosqlite
+asyncpg
+python-multipart
+python-dateutil
+pytest
+pytest-asyncio
+httpx
+authlib>=1.2.0
+sqlparse