fix(pipstar): handle a corner case for compatible version evaluation (#3583)

It seems that there was one corner case that was left unhandled.
In theory we should also handle `3 ~= 3.0.0`, but the fix for that may
be a little more involved and I want to leave it for later. However,
that case is unlikely to occur in reality because `LHS` for our cases
will most likely have 2 components.

Whilst at it prepare for the patch release (#3584).

Fixes #3580

(cherry picked from commit a32c744)

Author: aignas

CHANGELOG.md

@@ -47,6 +47,17 @@ BEGIN_UNRELEASED_TEMPLATE
 END_UNRELEASED_TEMPLATE
 -->
 
+{#v1-8-4}
+## [1.8.4] - 2026-02-10
+
+### Fixed
+* (pipstar): A corner case of evaluation of version specifiers (`"1.2" ~= "1.2.0"`)
+  has been fixed improving compatibility with the PEP440 standard.
+  Fixes [#3580](https://github.com/bazel-contrib/rules_python/issues/3580).
+* (pipstar): We now add read permissions after extracting wheels for the cases
+  where the `whl` file is missing them.
+  Fixes [#3554](https://github.com/bazel-contrib/rules_python/issues/3554).
+
 {#v1-8-3}
 ## [1.8.3] - 2026-01-27
 

python/private/version.bzl

@@ -719,12 +719,9 @@ def _version_eeq(left, right):
 
 def _version_eq(left, right):
     """== operator"""
-    if left.is_prefix and right.is_prefix:
-        fail("Invalid comparison: both versions cannot be prefix matching")
-    if left.is_prefix:
-        return right.string.startswith("{}.".format(left.string))
-    if right.is_prefix:
-        return left.string.startswith("{}.".format(right.string))
+    is_prefix = _is_prefix(left, right)
+    if is_prefix != None:
+        return is_prefix
 
     if left.epoch != right.epoch:
         return False
@@ -743,6 +740,27 @@ def _version_eq(left, right):
         # local is ignored for == checks
     )
 
+def _is_prefix(left, right):
+    if left.is_prefix and right.is_prefix:
+        fail("Invalid comparison: both versions cannot be prefix matching")
+    if left.is_prefix:
+        return _left_is_prefix(left, right)
+    if right.is_prefix:
+        return _left_is_prefix(right, left)
+
+    return None
+
+def _left_is_prefix(left, right):
+    if right.string.startswith("{}.".format(left.string)):
+        return True
+
+    # There is a chance that we are comparing 1.3 ~= 1.3.0
+    #
+    # In that case the logic would be to normalize 1.3 to 1.3.0 and then
+    # the above would work, but we end up comparing 1.3 with 1.3. above
+    # and it fails.
+    return _version_key(left) == _version_key(right)
+
 def _version_compatible(left, right):
     """~= operator"""
     if left.is_prefix or right.is_prefix:
@@ -754,11 +772,11 @@ def _version_compatible(left, right):
 
     right_star = ".".join([str(d) for d in right.release[:-1]])
     if right.epoch:
-        right_star = "{}!{}.".format(right.epoch, right_star)
+        right_star = "{}!{}.*".format(right.epoch, right_star)
     else:
-        right_star = "{}.".format(right_star)
+        right_star = "{}.*".format(right_star)
 
-    return _version_ge(left, right) and left.string.startswith(right_star)
+    return _version_ge(left, right) and _is_prefix(left, parse(right_star, strict = False))
 
 def _version_ne(left, right):
     """!= operator"""

tests/pypi/pep508/deps_tests.bzl

@@ -198,6 +198,26 @@ def test_extra_with_conditional_and_unconditional_markers(env):
 
 _tests.append(test_extra_with_conditional_and_unconditional_markers)
 
+def test_span_all_python_versions(env):
+    requires_dist = [
+        "bar>=0.4.0; python_version >= \"3.13.0\"",
+        "bar>=0.3.0; python_version ~= \"3.12.0\"",
+        "bar>=0.2.0; python_version ~= \"3.11.0\"",
+        "bar>=0.1.0; python_version < \"3.11\"",
+    ]
+
+    got = deps(
+        "foo",
+        requires_dist = requires_dist,
+    )
+
+    env.expect.that_collection(got.deps).contains_exactly([])
+    env.expect.that_dict(got.deps_select).contains_exactly({
+        "bar": "(python_version < \"3.11\") or (python_version >= \"3.13.0\") or (python_version ~= \"3.11.0\") or (python_version ~= \"3.12.0\")",
+    })
+
+_tests.append(test_span_all_python_versions)
+
 def deps_test_suite(name):  # buildifier: disable=function-docstring
     test_suite(
         name = name,

tests/pypi/pep508/evaluate_tests.bzl

@@ -312,9 +312,10 @@ _MISC_EXPRESSIONS = [
     # https://packaging.python.org/en/latest/specifications/version-specifiers/#compatible-release
     _expr_case('python_version ~= "2.2"', True, {"python_version": "2.3"}),
     _expr_case('python_version ~= "2.2"', False, {"python_version": "2.1"}),
+    _expr_case('python_version ~= "2.2.0"', True, {"python_version": "2.2"}),
     _expr_case('python_version ~= "2.2.post3"', False, {"python_version": "2.2"}),
-    _expr_case('python_version ~= "2.2.post3"', True, {"python_version": "2.3"}),
     _expr_case('python_version ~= "2.2.post3"', False, {"python_version": "3.0"}),
+    _expr_case('python_version ~= "2.2.post3"', True, {"python_version": "2.3"}),
     _expr_case('python_version ~= "1!2.2"', False, {"python_version": "2.7"}),
     _expr_case('python_version ~= "0!2.2"', True, {"python_version": "2.7"}),
     _expr_case('python_version ~= "1!2.2"', True, {"python_version": "1!2.7"}),