Bound the pdm e2e compat pins by release

The pdm bootstrap pinned `unearth<0.19` for every 2.x release and
`hishel<2` for every release from 2.26.1. pdm 2.29.4 moved to httpx2
and requires `unearth>=0.19`, and pdm 2.29.7 (2026-11-06) requires
`hishel>=2.0`, so pip refuses to resolve the bootstrap for any of
those releases: both pdm e2e cases fail before pdm runs.

The matrix still runs 2.29.2, so CI is green today, but the next bump
of the latest-pdm row (or a backtest of a current release) would go
red with ResolutionImpossible. Apply each pin only to the releases
that declare the unbounded requirement: `unearth<0.19` below 2.29.4,
`hishel<2` from 2.26.1 up to 2.29.7. Mirror the bounds in
scripts/backtest-pdm.py.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_011f9aeQMSUtsXXCdCmmVd9T

Author: claude

crates/socket-patch-cli/tests/e2e_vex_build/pdm.rs

@@ -136,21 +136,26 @@ fn pins_for(v: &str) -> Vec<String> {
         // 2.26.9+ require 1.x).
         if ((2, 21, 0)..(2, 26, 1)).contains(&t) {
             pins.push("hishel<1");
-        } else if t >= (2, 26, 1) {
-            // 2.26.9+ declare an unbounded `hishel>=1.0.0` (2.29.6:
+        } else if ((2, 26, 1)..(2, 29, 7)).contains(&t) {
+            // 2.26.9 - 2.29.6 declare an unbounded `hishel>=1.0.0` (2.29.4:
             // `>=1.4.0`), and hishel 2.0 (2026-11-05) dropped
             // `SyncSqliteStorage`, so every command dies with "module
             // 'hishel' has no attribute 'SyncSqliteStorage'". `<2`
             // resolves the 1.x line those releases shipped against (a
             // no-op for 2.26.1 - 2.26.8, which already bound `<1`).
+            // 2.29.7+ require `hishel>=2.0`, so the pin would make them
+            // uninstallable.
             pins.push("hishel<2");
         }
-        // 2.x declares an unbounded `unearth`, and unearth 0.19 (2026-10-27)
-        // moved to `httpx2`: PDM's PyPI client is no longer the `httpx`
-        // client unearth expects, so `pdm lock` dies with "PDMPyPIClient is
-        // not an instance or subtype of type (Client)" (seen on 2.29.2).
-        // `<0.19` resolves the 0.18 line every 2.x ran with before.
-        pins.push("unearth<0.19");
+        // 2.0 - 2.29.3 declare an unbounded `unearth`, and unearth 0.19
+        // (2026-10-27) moved to `httpx2`: PDM's PyPI client is no longer the
+        // `httpx` client unearth expects, so `pdm lock` dies with
+        // "PDMPyPIClient is not an instance or subtype of type (Client)"
+        // (seen on 2.29.2). `<0.19` resolves the 0.18 line they ran with.
+        // 2.29.4+ moved to httpx2 themselves and require `unearth>=0.19`.
+        if t < (2, 29, 4) {
+            pins.push("unearth<0.19");
+        }
     }
     let mut out = vec![format!("pdm=={v}")];
     out.extend(pins.into_iter().map(String::from));

scripts/backtest-pdm.py

@@ -204,17 +204,20 @@ def pins_for(version):
         # ModuleNotFoundError before locking.
         if (2, 21) <= v < (2, 26, 1):
             pins.append("hishel<1")
-        # 2.26.9+ declare an unbounded `hishel>=1.0.0` (2.29.6: `>=1.4.0`);
-        # hishel 2.0 (2026-11-05) dropped `SyncSqliteStorage` and every
-        # command dies with AttributeError. `<2` keeps the 1.x line (a
-        # no-op for 2.26.1 - 2.26.8, which already bound `<1`).
-        elif v >= (2, 26, 1):
+        # 2.26.9 - 2.29.6 declare an unbounded `hishel>=1.0.0` (2.29.4:
+        # `>=1.4.0`); hishel 2.0 (2026-11-05) dropped `SyncSqliteStorage`
+        # and every command dies with AttributeError. `<2` keeps the 1.x
+        # line (a no-op for 2.26.1 - 2.26.8, which already bound `<1`).
+        # 2.29.7+ require `hishel>=2.0`, so the pin would be unresolvable.
+        elif (2, 26, 1) <= v < (2, 29, 7):
             pins.append("hishel<2")
-        # 2.x declares an unbounded `unearth`; 0.19 (2026-10-27) moved to
-        # httpx2 and breaks PDM's PyPI client ("PDMPyPIClient is not an
-        # instance or subtype of type (Client)" on `pdm lock`, seen on
-        # 2.29.2). `<0.19` resolves the 0.18 line 2.x ran with before.
-        pins.append("unearth<0.19")
+        # 2.0 - 2.29.3 declare an unbounded `unearth`; 0.19 (2026-10-27)
+        # moved to httpx2 and breaks PDM's PyPI client ("PDMPyPIClient is
+        # not an instance or subtype of type (Client)" on `pdm lock`, seen
+        # on 2.29.2). `<0.19` resolves the 0.18 line they ran with. 2.29.4+
+        # moved to httpx2 themselves and require `unearth>=0.19`.
+        if v < (2, 29, 4):
+            pins.append("unearth<0.19")
     return pins