Fix nondeterministic workflow catalog ZIP fixture

[KSchlobohm]

Description

Make the ZIP fixture in tests/specify_cli/workflows/test_catalog_versions.py independent of the clock.

_entry() hashes an archive that the mock HTTP response later regenerates. Passing a filename to ZipFile.writestr() inserts the current time; crossing a two-second ZIP timestamp boundary changes the bytes and digest even when the YAML is identical. This caused test_exact_add_uses_historical_url_digest_and_requirements to fail with an integrity-check error in the public fork's Windows/Python 3.13 CI job. A rerun can hide the timing dependency without fixing it.

Use ZipInfo with a fixed timestamp of (1980, 1, 1, 0, 0, 0). The member name, YAML serialization, single-member layout, and ZIP_STORED compression stay unchanged. Add a regression that mocks the clock across a two-second boundary, checks identical inputs produce identical bytes, and checks changed versions or requirements still produce different bytes.

This is the test-only delta from KSchlobohm/spec-kit#57: one file, 22 insertions and one deletion. No production or workflow configuration changes.

Testing

• Tested locally with uv run specify --help
• Ran existing tests with uv sync && uv run pytest
• Tested with a sample project (if applicable)

Automated validation used this worktree's own .venv\Scripts\python.exe on Windows, Python 3.11.5, against upstream baseline de0cbd762e2d0b30f90d3ffcbe2ee9d7167f4eda (including merged #4829).

Command / check	Result
uv sync --extra test	Passed; restored the missing worktree virtualenv.
Isolated copy of the baseline module plus the new regression, run with the same interpreter via -m pytest -c <worktree>\pyproject.toml <baseline-copy>::test_archive_is_deterministic_across_clock_changes -q	Failed as expected: one failure, archive bytes differ at index 10. The working patch was not reverted.
.venv\Scripts\python.exe -m pytest tests\specify_cli\workflows\test_catalog_versions.py::test_archive_is_deterministic_across_clock_changes -q	Passed: 1 test.
.venv\Scripts\python.exe -m pytest tests\specify_cli\workflows\test_catalog_versions.py -q	Passed: 43 tests.
git diff --check and git diff --cached --check	Passed.

The template's literal uv sync && uv run pytest command was not used; the targeted tests above ran through the worktree interpreter to avoid cross-worktree editable-install resolution. CLI help and sample-project tests were not run because this changes only a test fixture. The full suite and local Python 3.13 were not run, and no hosted CI run was created. Later green fork CI does not establish isolated upstream CI results for this patch.

AI Disclosure

• I did not use AI assistance for this contribution
• I did use AI assistance (fill in the disclosure below)

AI disclosure: GitHub Copilot App using GPT-6.1 Sol authored the original fixture fix and regression autonomously, with runtime-default reasoning effort and human publication approval. GitHub Copilot App using GPT-6.1 Sol (model ID gpt-6.1-sol) prepared this upstream patch, ran automated validation, and drafted this body in autonomous/autopilot mode. Preparation reasoning effort was runtime-selected, not explicitly overridden; its exact level was not exposed. This preparation does not claim human line-by-line review or human-run testing. Publication was approved by the contributor.

[Copilot]

Copilot review overview

🟢 Approval recommended

The focused test-only fix addresses the reproduced failure and includes appropriate regression coverage.

Review effort: Balanced
Findings: None

What changed in this PR

Makes the workflow catalog ZIP fixture deterministic by removing clock-derived timestamps.

Changes:

• Uses a fixed ZipInfo timestamp.
• Adds regression coverage for clock boundaries and changed content.

File	Description
tests/​specify_cli/​workflows/​test_catalog_versions.py	Stabilizes ZIP bytes and tests determinism.

---

💡 Configure MCP servers for context-aware, tailored reviews. Learn more in the docs.