From 4b11802058693628e42fe376d2d5a552a96dbb99 Mon Sep 17 00:00:00 2001
From: Sam Clegg <sbc@chromium.org>
Date: Fri, 10 Jul 2026 13:37:12 -0700
Subject: [PATCH] [CI] Add `--only-binary :all:` when running pip

This ensures pip doesn't try to build anything using the local
compiler.
---
 .circleci/config.yml                   | 4 +++-
 .github/workflows/ci.yml               | 2 +-
 .github/workflows/rebaseline-tests.yml | 2 +-
 .github/workflows/roll-emsdk.yml       | 2 +-
 .github/workflows/update-website.yml   | 2 +-
 requirements-dev.txt                   | 2 +-
 6 files changed, 8 insertions(+), 6 deletions(-)

diff --git a/.circleci/config.yml b/.circleci/config.yml
index 04d3e1fc24b31..5c009c86c4146 100644
--- a/.circleci/config.yml
+++ b/.circleci/config.yml
@@ -64,7 +64,9 @@ commands:
     steps:
       - run:
           name: pip install
-          command: << parameters.python >> -m pip install -r requirements-dev.txt
+          # The --only-binary :all: flag tells python not to ever build any
+          # extensio code locally, and instead only download pre-built wheels.
+          command: "<< parameters.python >> -m pip install --only-binary :all: -r requirements-dev.txt"
   install-rust:
     steps:
       - run:
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index a9b2d37002d0d..b40a7bd507cd6 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -54,7 +54,7 @@ jobs:
         run: |
           which python3
           python3 --version
-          python3 -m pip install -r requirements-dev.txt
+          python3 -m pip install --only-binary :all: -r requirements-dev.txt
       - name: Check test expectations on target branch
         # Skip this step for rebaseline PRs, since the target branch is expected
         # to be out of date in this case.
diff --git a/.github/workflows/rebaseline-tests.yml b/.github/workflows/rebaseline-tests.yml
index 94dbdf21079ca..dcb8b86345622 100644
--- a/.github/workflows/rebaseline-tests.yml
+++ b/.github/workflows/rebaseline-tests.yml
@@ -36,7 +36,7 @@ jobs:
         run: |
           which python3
           python3 --version
-          python3 -m pip install -r requirements-dev.txt
+          python3 -m pip install --only-binary :all: -r requirements-dev.txt
       - name: Rebaseline tests
         env:
           REF_NAME: ${{ github.ref_name }}
diff --git a/.github/workflows/roll-emsdk.yml b/.github/workflows/roll-emsdk.yml
index f0834e3044d50..2fa1b6e94b7c6 100644
--- a/.github/workflows/roll-emsdk.yml
+++ b/.github/workflows/roll-emsdk.yml
@@ -33,7 +33,7 @@ jobs:
         run: |
           which python3
           python3 --version
-          python3 -m pip install -r requirements-dev.txt
+          python3 -m pip install --only-binary :all: -r requirements-dev.txt
       - name: Roll emsdk and rebaseline tests
         env:
           REF_NAME: ${{ github.ref_name }}
diff --git a/.github/workflows/update-website.yml b/.github/workflows/update-website.yml
index 3882d3136a474..44ff6ee8334e7 100644
--- a/.github/workflows/update-website.yml
+++ b/.github/workflows/update-website.yml
@@ -31,7 +31,7 @@ jobs:
         run: |
           which python3
           python3 --version
-          python3 -m pip install -r requirements-dev.txt
+          python3 -m pip install --only-binary :all: -r requirements-dev.txt
       - name: Update docs
         run: |
           set -o errexit
diff --git a/requirements-dev.txt b/requirements-dev.txt
index 8c362e7347a7a..c8b6c0d91f2a7 100644
--- a/requirements-dev.txt
+++ b/requirements-dev.txt
@@ -4,7 +4,7 @@
 # the codebase and generate docs using Sphinx, not for users of emscripten.
 # Install with `pip3 install -r requirements-dev.txt`
 
-coverage[toml]==6.5
+coverage[toml]==7.15.0
 mypy==1.14
 psutil==7.0.0
 ruff==0.15.7