Declare pycryptodome as a core dependency; release 0.48.2

catalog_attach imports vgi.query_execution, which imports vgi_rpc.crypto
(pycryptodome). vgi-rpc only installs pycryptodome under its http extra,
so any worker that installs vgi-python without extras failed at ATTACH
with ModuleNotFoundError: No module named 'Crypto' (since 0.48.0).

Add a bare-install CI job that imports the attach-path modules from the
wheel with no extras; every other job syncs --all-extras.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Author: rustyconover

.github/workflows/ci.yml

@@ -147,6 +147,26 @@ jobs:
       - name: Run hosted-protocols group (stdio, unix, http)
         run: scripts/hosted_protocols_conformance.sh
 
+  bare-install:
+    # Every other job syncs --all-extras, which hides a core-dependency gap: a
+    # worker that installs vgi-python with no extras must still import the
+    # modules catalog_attach reaches (0.48.0 shipped without pycryptodome).
+    name: Bare install (no extras)
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v7
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@v10.2.0
+
+      - name: Build wheel
+        run: uv build --wheel --out-dir dist .
+
+      - name: Import attach-path modules from the bare wheel
+        run: |
+          uv run --isolated --no-project --python 3.14 --with dist/*.whl \
+            python -c "import vgi, vgi.worker, vgi.query_execution; print('ok')"
+
   s3-offload-localstack:
     name: S3 Offload Tests (LocalStack)
     runs-on: ubuntu-latest

pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "vgi-python"
-version = "0.48.1"
+version = "0.48.2"
 description = "Vector Gateway Interface - Connect DuckDB to external programs via Apache Arrow"
 readme = "README.md"
 keywords = [
@@ -42,6 +42,10 @@ dependencies = [
     "platformdirs",
     "vgi-rpc>=0.52.3",
     "httpx2>=2.12.0",
+    # vgi.query_execution seals execution handles with vgi_rpc.crypto, which
+    # imports pycryptodome. vgi-rpc only pulls it in under its `http` extra, but
+    # catalog_attach reaches query_execution on every transport (stdio too).
+    "pycryptodome>=3.20",
 ]
 
 [project.optional-dependencies]