[Backport 7.80.x] Move macOS PBS pins into builder inputs

[Kyle-Neale]

What does this PR do?

Backport of #24015 to 7.80.x. Moves the macOS Python Build Standalone (PBS) pins (PYTHON_PATCH, PBS_RELEASE, PBS_SHA256__aarch64, PBS_SHA256__x86_64) from the inline env: block in .github/workflows/resolve-build-deps.yaml into a new .builders/images/macos/pbs.env file, sourced by the workflow at runtime. Updates ddev meta scripts upgrade-python-version (and its tests) to write the new file.

Motivation

The previous inline env: lived outside .builders/, so it was not covered by the per-target images/<target>/**/* hash computed in .builders/inputs_hash.py. A PBS pin bump (e.g. 3.13.13 → 3.13.14) therefore did not invalidate the ~/builder_root cache on macOS, so the cached virtualenv kept pointing at the previously installed PBS Python. Co-locating the pins under .builders/images/macos/ puts them inside the hash domain and makes the cache key flip on every bump.

Manual backport because dd-backport[bot] did not file one automatically. The cherry-pick was clean except for .deps/ lockfile artifacts, which were resolved to the 7.80.x versions; the dependency-resolution workflow regenerates them on this branch.

Review checklist (to be filled by reviewers)

• Feature or bugfix MUST have appropriate tests (unit, integration, e2e)
• Add the qa/skip-qa label if the PR doesn't need to be tested during QA.
• If you need to backport this PR to another branch, you can add the backport/<branch-name> label to the PR and it will automatically open a backport PR once this one is merged

[datadog-datadog-prod-us1]

 

✨ Fix all issues with BitsAI

⚠️ Warnings

🚦 9 Pipeline jobs failed

PR | test / test (linux, ubuntu-22.04, ddev, ddev on Linux) / ddev on Linux     

PR | test / test (windows, windows-2022, ddev, ddev on Windows) / ddev on Windows     

PR | test / test-minimum-base-package (linux, ubuntu-22.04, ddev, ddev on Linux) / minimum-base-package-ddev on Linux     

View all 9 failed jobs.

🧪 20 Tests failed in 1 job

PR All | run  

test_e2e_cisco_legacy_wlc from test_e2e_core.py   (Fix with Cursor)

Needed at least 1 candidates for 'snmp.device.reachable', got 0
Expected:
        MetricStub(name='snmp.device.reachable', type=0, value=1, tags=['agent_host:runnervmqtt2i', 'device_hostname:DDOGWLC', 'device_id:default:172.18.0.2', 'device_ip:172.18.0.2', 'device_namespace:default', 'device_vendor:cisco', 'snmp_device:172.18.0.2', 'snmp_host:DDOGWLC', 'snmp_profile:cisco-legacy-wlc'], hostname=None, device=None, flush_first_value=None)
Difference to closest:
        Expected tag agent_host:runnervmqtt2i
        Found agent_host:None
        Expected tag device_hostname:DDOGWLC
        Found device_hostname:None
        Expected tag device_id:default:172.18.0.2
        Found device_id:None
...

test_e2e_cisco_nexus from test_e2e_core.py   (Fix with Cursor)

Needed at least 1 candidates for 'snmp.device.reachable', got 0
Expected:
        MetricStub(name='snmp.device.reachable', type=0, value=1, tags=['agent_host:runnervmqtt2i', 'device_hostname:Nexus-eu1.companyname.managed', 'device_id:default:172.18.0.2', 'device_ip:172.18.0.2', 'device_namespace:default', 'device_vendor:cisco', 'snmp_device:172.18.0.2', 'snmp_host:Nexus-eu1.companyname.managed', 'snmp_profile:cisco-nexus'], hostname=None, device=None, flush_first_value=None)
Difference to closest:
        Expected tag agent_host:runnervmqtt2i
        Found agent_host:None
        Expected tag device_hostname:Nexus-eu1.companyname.managed
        Found device_hostname:None
        Expected tag device_id:default:172.18.0.2
        Found device_id:None
...

View all 20 test failures

ℹ️ Info

No other issues found (see more)

❄️ No new flaky tests detected

🎯 Code Coverage (details)
• Patch Coverage: 100.00%
• Overall Coverage: 88.08%

Useful? React with 👍 / 👎

_{This comment will be updated automatically if new data arrives.
🔗 Commit SHA: 359ab0a | Docs | Datadog PR Page | Give us feedback!}

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
⚠️ Please upload report for BASE (7.80.x@ccbeb65). Learn more about missing BASE report.

Additional details and impacted files

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[dd-octo-sts]

Validation Report

Validation	Description	Status
license-headers	Validate Python files have proper license headers	❌

Run ddev validate all changed --fix to attempt to auto-fix supported validations.

Passed validations (19)

Validation	Description	Status
agent-reqs	Verify check versions match the Agent requirements file	✅
ci	Validate CI configuration and Codecov settings	✅
codeowners	Validate every integration has a CODEOWNERS entry	✅
config	Validate default configuration files against spec.yaml	✅
dep	Verify dependency pins are consistent and Agent-compatible	✅
http	Validate integrations use the HTTP wrapper correctly	✅
imports	Validate check imports do not use deprecated modules	✅
integration-style	Validate check code style conventions	✅
jmx-metrics	Validate JMX metrics definition files and config	✅
labeler	Validate PR labeler config matches integration directories	✅
legacy-signature	Validate no integration uses the legacy Agent check signature	✅
licenses	Validate third-party license attribution list	✅
metadata	Validate metadata.csv metric definitions	✅
models	Validate configuration data models match spec.yaml	✅
openmetrics	Validate OpenMetrics integrations disable the metric limit	✅
package	Validate Python package metadata and naming	✅
readmes	Validate README files have required sections	✅
saved-views	Validate saved view JSON file structure and fields	✅
version	Validate version consistency between package and changelog	✅

View full run

[github-actions]

Wheels promoted to stable storage for commit 359ab0a39c257e1ecd96819e6c07c1d4731c57c1 by @Kyle-Neale.
Workflow run: https://github.com/DataDog/integrations-core/actions/runs/27367227224