From 515c6fd950e84d2378fc6ba14a5b1024f0625c62 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 15 Jun 2026 15:07:02 +0000 Subject: [PATCH 01/10] Bump pytest from 9.0.3 to 9.1.0 Bumps [pytest](https://github.com/pytest-dev/pytest) from 9.0.3 to 9.1.0. - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](https://github.com/pytest-dev/pytest/compare/9.0.3...9.1.0) --- updated-dependencies: - dependency-name: pytest dependency-version: 9.1.0 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- uv.lock | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/uv.lock b/uv.lock index 44c9a9e2..88dc4cac 100644 --- a/uv.lock +++ b/uv.lock @@ -1294,7 +1294,7 @@ wheels = [ [[package]] name = "pytest" -version = "9.0.3" +version = "9.1.0" source = { registry = "https://pypi.org/simple" } dependencies = [ { name = "colorama", marker = "sys_platform == 'win32'" }, @@ -1303,9 +1303,9 @@ dependencies = [ { name = "pluggy" }, { name = "pygments" }, ] -sdist = { url = "https://files.pythonhosted.org/packages/7d/0d/549bd94f1a0a402dc8cf64563a117c0f3765662e2e668477624baeec44d5/pytest-9.0.3.tar.gz", hash = "sha256:b86ada508af81d19edeb213c681b1d48246c1a91d304c6c81a427674c17eb91c", size = 1572165, upload-time = "2026-04-07T17:16:18.027Z" } +sdist = { url = "https://files.pythonhosted.org/packages/84/0e/b5858858d74958632c49b72cb25a3976ff9f632397626715be71c89d3971/pytest-9.1.0.tar.gz", hash = "sha256:41dd9148c08072446394cefd3d79701701335a9f4cae69ba92e39f6c7f5c061c", size = 1634181, upload-time = "2026-06-13T18:52:45.983Z" } wheels = [ - { url = "https://files.pythonhosted.org/packages/d4/24/a372aaf5c9b7208e7112038812994107bc65a84cd00e0354a88c2c77a617/pytest-9.0.3-py3-none-any.whl", hash = "sha256:2c5efc453d45394fdd706ade797c0a81091eccd1d6e4bccfcd476e2b8e0ab5d9", size = 375249, upload-time = "2026-04-07T17:16:16.13Z" }, + { url = "https://files.pythonhosted.org/packages/8b/5a/ba30a81239b909821b3153e303e7def45178bf353da4f72380e6c5e8793b/pytest-9.1.0-py3-none-any.whl", hash = "sha256:8ebb0e7888bdf2bdfc602ec51f8f62d50200af37356c74e503c79a94f5c81f32", size = 386453, upload-time = "2026-06-13T18:52:44.045Z" }, ] [[package]] From ec21dda102ed78139823c28c1a16a015dea0f7fc Mon Sep 17 00:00:00 2001 From: Vijay Sarvepalli Date: Wed, 17 Jun 2026 18:49:34 -0400 Subject: [PATCH 02/10] Added pypi publish workflow --- .github/workflows/pypi_publish.yml | 74 ++++++++++++++++++++++++++++++ 1 file changed, 74 insertions(+) create mode 100644 .github/workflows/pypi_publish.yml diff --git a/.github/workflows/pypi_publish.yml b/.github/workflows/pypi_publish.yml new file mode 100644 index 00000000..56396f31 --- /dev/null +++ b/.github/workflows/pypi_publish.yml @@ -0,0 +1,74 @@ +name: Build and Publish to PyPI + +on: + push: + tags: + - "20*" + +permissions: + contents: read + +jobs: + build: + name: Build distribution + runs-on: ubuntu-latest + + steps: + - name: Checkout source + uses: actions/checkout@v4 + with: + fetch-depth: 0 + + - name: Set up Python + uses: actions/setup-python@v5 + with: + python-version: "3.12" + + - name: Install uv + uses: astral-sh/setup-uv@v5 + + - name: Install build tooling + run: | + python -m pip install --upgrade pip build twine + + - name: Sync dependencies + run: uv sync --frozen + + - name: Build package + run: python -m build + + - name: Verify distributions + run: | + python -m pip install --upgrade twine + twine check dist/* + ls -lah dist/ + + - name: Upload distributions + uses: actions/upload-artifact@v4 + with: + name: dist + path: dist/* + publish: + name: Publish to PyPI + needs: build + runs-on: ubuntu-latest + + environment: + name: pypi + + permissions: + id-token: write + contents: read + + steps: + - name: Download distributions + uses: actions/download-artifact@v4 + with: + name: dist + path: dist/ + + - name: Publish package + uses: pypa/gh-action-pypi-publish@release/v1 + with: + verbose: true + From dcbaf2d9d516bb09d1bd80faeea4be1ef1018924 Mon Sep 17 00:00:00 2001 From: Vijay Sarvepalli Date: Wed, 17 Jun 2026 18:57:53 -0400 Subject: [PATCH 03/10] try publish --- .github/workflows/pypi_publish.yml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/.github/workflows/pypi_publish.yml b/.github/workflows/pypi_publish.yml index 56396f31..0b6aa2df 100644 --- a/.github/workflows/pypi_publish.yml +++ b/.github/workflows/pypi_publish.yml @@ -1,9 +1,12 @@ +--- name: Build and Publish to PyPI on: push: tags: - "20*" + branches: + - pypi permissions: contents: read @@ -71,4 +74,3 @@ jobs: uses: pypa/gh-action-pypi-publish@release/v1 with: verbose: true - From 616bfe62e6622e810b5750ae11cc0c2b56836698 Mon Sep 17 00:00:00 2001 From: Vijay Sarvepalli Date: Wed, 17 Jun 2026 20:18:26 -0400 Subject: [PATCH 04/10] Reduce duplicates --- .github/workflows/pypi_publish.yml | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/.github/workflows/pypi_publish.yml b/.github/workflows/pypi_publish.yml index 0b6aa2df..e58ea894 100644 --- a/.github/workflows/pypi_publish.yml +++ b/.github/workflows/pypi_publish.yml @@ -5,8 +5,7 @@ on: push: tags: - "20*" - branches: - - pypi + permissions: contents: read From 6b831ec7bacfc10ee2da155193ede7f97b293ec7 Mon Sep 17 00:00:00 2001 From: Vijay Sarvepalli Date: Wed, 17 Jun 2026 20:48:17 -0400 Subject: [PATCH 05/10] Fixed pyproject again --- pyproject.toml | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/pyproject.toml b/pyproject.toml index c608925a..97932787 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -62,8 +62,11 @@ ssvc_doctools="ssvc.doctools:main" "Project" = "https://github.com/CERTCC/SSVC" "Bug Tracker" = "https://github.com/CERTCC/SSVC/issues" +[tool.setuptools] +package-dir = {"" = "src"} + [tool.setuptools.packages.find] -where = ["."] # list of folders that contain the packages (["."] by default) +where = ["src"] # list of folders that contain the packages (["."] by default) include = ["ssvc*"] # package names should match these glob patterns (["*"] by default) exclude = ["test*"] # exclude packages matching these glob patterns (empty by default) #namespaces = false # to disable scanning PEP 420 namespaces (true by default) From 2697c8a2e27040e22f4fede0b852a017bb774c32 Mon Sep 17 00:00:00 2001 From: Vijay Sarvepalli Date: Mon, 22 Jun 2026 11:40:58 -0400 Subject: [PATCH 06/10] Potential fix for pull request finding no need uv steps here. Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> --- .github/workflows/pypi_publish.yml | 6 ------ 1 file changed, 6 deletions(-) diff --git a/.github/workflows/pypi_publish.yml b/.github/workflows/pypi_publish.yml index e58ea894..41869a22 100644 --- a/.github/workflows/pypi_publish.yml +++ b/.github/workflows/pypi_publish.yml @@ -26,16 +26,10 @@ jobs: with: python-version: "3.12" - - name: Install uv - uses: astral-sh/setup-uv@v5 - - name: Install build tooling run: | python -m pip install --upgrade pip build twine - - name: Sync dependencies - run: uv sync --frozen - - name: Build package run: python -m build From a547b00a8fa26c342d55fd1be1816c8ac37545a6 Mon Sep 17 00:00:00 2001 From: Vijay Sarvepalli Date: Mon, 22 Jun 2026 15:17:08 -0400 Subject: [PATCH 07/10] Move evertyhing to uv --- .github/workflows/pypi_publish.yml | 20 ++++++++------------ 1 file changed, 8 insertions(+), 12 deletions(-) diff --git a/.github/workflows/pypi_publish.yml b/.github/workflows/pypi_publish.yml index 41869a22..a3cd2703 100644 --- a/.github/workflows/pypi_publish.yml +++ b/.github/workflows/pypi_publish.yml @@ -1,4 +1,3 @@ ---- name: Build and Publish to PyPI on: @@ -6,13 +5,12 @@ on: tags: - "20*" - permissions: contents: read jobs: build: - name: Build distribution + name: Build distribution (uv) runs-on: ubuntu-latest steps: @@ -21,21 +19,18 @@ jobs: with: fetch-depth: 0 - - name: Set up Python - uses: actions/setup-python@v5 - with: - python-version: "3.12" + - name: Install uv + uses: astral-sh/setup-uv@v3 - - name: Install build tooling - run: | - python -m pip install --upgrade pip build twine + - name: Set up Python (via uv) + run: uv python install 3.12 - name: Build package - run: python -m build + run: uv build - name: Verify distributions run: | - python -m pip install --upgrade twine + uv pip install twine twine check dist/* ls -lah dist/ @@ -44,6 +39,7 @@ jobs: with: name: dist path: dist/* + publish: name: Publish to PyPI needs: build From c22d9c26ff00f7a606f3e453b4beab50c8e6443b Mon Sep 17 00:00:00 2001 From: Vijay Sarvepalli Date: Mon, 22 Jun 2026 15:24:12 -0400 Subject: [PATCH 08/10] Move from uv tool to pip for twine --- .github/workflows/pypi_publish.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/pypi_publish.yml b/.github/workflows/pypi_publish.yml index a3cd2703..7b640235 100644 --- a/.github/workflows/pypi_publish.yml +++ b/.github/workflows/pypi_publish.yml @@ -30,7 +30,7 @@ jobs: - name: Verify distributions run: | - uv pip install twine + pip install twine twine check dist/* ls -lah dist/ From 97c9217eebe3b149365761185b3932bc48fa6bbd Mon Sep 17 00:00:00 2001 From: Vijay Sarvepalli Date: Mon, 22 Jun 2026 15:41:37 -0400 Subject: [PATCH 09/10] Upgrade twine first --- .github/workflows/pypi_publish.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/pypi_publish.yml b/.github/workflows/pypi_publish.yml index 7b640235..1831fdb6 100644 --- a/.github/workflows/pypi_publish.yml +++ b/.github/workflows/pypi_publish.yml @@ -30,7 +30,7 @@ jobs: - name: Verify distributions run: | - pip install twine + pip install -U twine twine check dist/* ls -lah dist/ From 4ca4aaf99ef09ed80e2d8f296d105011cda1dfce Mon Sep 17 00:00:00 2001 From: Vijay Sarvepalli Date: Mon, 22 Jun 2026 15:53:36 -0400 Subject: [PATCH 10/10] Remove twine check redundant --- .github/workflows/pypi_publish.yml | 2 -- 1 file changed, 2 deletions(-) diff --git a/.github/workflows/pypi_publish.yml b/.github/workflows/pypi_publish.yml index 1831fdb6..fdc39b2a 100644 --- a/.github/workflows/pypi_publish.yml +++ b/.github/workflows/pypi_publish.yml @@ -30,8 +30,6 @@ jobs: - name: Verify distributions run: | - pip install -U twine - twine check dist/* ls -lah dist/ - name: Upload distributions