chore: isolate and update the locked semantic release tools - #54
Merged
Conversation
Bumps [python-semantic-release](https://github.com/python-semantic-release/python-semantic-release) from 10.6.1 to 10.6.2. - [Release notes](https://github.com/python-semantic-release/python-semantic-release/releases) - [Changelog](https://github.com/python-semantic-release/python-semantic-release/blob/master/CHANGELOG.rst) - [Commits](python-semantic-release/python-semantic-release@v10.6.1...v10.6.2) --- updated-dependencies: - dependency-name: python-semantic-release dependency-version: 10.6.2 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
Contributor
Author
LabelsThe following labels could not be found: Please fix the above issues or remove invalid values from |
abrichr
changed the title
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
PSR 10.6.2 requires Click below 8.2, while Tray requires Click 8.3.3 or later. The release workflow now runs PSR in a separate virtual uv project under
scripts/release, with its own committed lock and Python 3.12 pin. Tray keeps its application dependency floor.The release wrapper still refuses version drift. It now checks PSR 10.6.2, GitPython 3.1.59, and Click 8.1.8. UV and Hatchling retain their reviewed pins. CI installs the real release environment, exercises PSR with disposable Git history, then builds the wheel and source distribution with the locked backend. Dependabot covers both dependency files.
The smoke check verifies that a maintenance commit doesn't release or create a tag and that a synthetic feature commit calculates the next minor version. It uses a synthetic token and disables Git transports. Local validation passed: 257 tests, two platform skips, Ruff, both package builds, version consistency, and the public distribution boundary check.
The exact PSR
build_distributionssubprocess also passed in a disposable repository with a synthetic version change. It synchronized and staged only the root lock, validated that lock offline, and built both distributions through the inherited release environment. No package was published.