chore: Add pre-commit as dependency (#85)

Fixes - #80

Resolution

* Move pre-commit to being a required dependency. This should force the
pip installation to pull that package down
* Updating the homebrew formula creation script to filter out packages
that are needed for pip but not the homebrew formula
* Updating lock file to reflect pre-commit being moved to a dependency

---------

Co-authored-by: Raul Centeno <raul.centeno@slalom.com>

pyproject.toml

@@ -28,6 +28,7 @@ pydantic = "^1.10.2"
 jinja2 = "^3.1.2"
 pathspec = "^0.10.1"
 cfgv = "^3.3.1"
+pre-commit = "^2.20.0"
 
 [tool.pytest.ini_options]
 addopts = "-p no:cacheprovider"
@@ -40,7 +41,6 @@ black = "^22.10.0"
 identify = "^2.5.7"
 poethepoet = "^0.16.4"
 python-semantic-release = "^7.33.1"
-pre-commit = "^2.20.0"
 
 [build-system]
 requires = ["poetry-core"]

scripts/get-secureli-dependencies.py

@@ -12,9 +12,21 @@
 secureliPackageUrl = f"https://github.com/slalombuild/secureli/releases/download/v{secureliVersion}/secureli-{secureliVersion}.tar.gz"
 secureliPackageDependencies = []
 secureliFormulaPath = "./homebrew-secureli/Formula"
-# Poetry does not do a good job of filtering out package sub-dependencies
-# As a result, we need to filter out the packages ourself that the Secureli Formula does not need
-packagesToRemoveFromFormula = ["colorama", "six", "shellingham"]
+# Filter out additional packages that are needed for the pip package, but not the homebrew formula
+packagesToRemoveFromFormula = [
+    "colorama",
+    "six",
+    "shellingham",
+    "distlib",
+    "filelock",
+    "identify",
+    "nodeenv",
+    "platformdirs",
+    "setuptools",
+    "virtualenv",
+    "cfgv",
+    "pre-commit",
+]
 
 secureliPackageNamesCmd = "poetry show --only main | awk '{print $1}'"
 secureliPackageVersionsCmd = "poetry show --only main | awk '{print $2}'"