assertpy2 2.1.1__tar.gz → 2.1.3__tar.gz

assertpy2-2.1.3/.github/dependabot.yml

@@ -0,0 +1,15 @@
+version: 2
+updates:
+  - package-ecosystem: "pip"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    commit-message:
+      prefix: "chore"
+
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    commit-message:
+      prefix: "ci"

{assertpy2-2.1.1 → assertpy2-2.1.3}/.github/workflows/ci.yml

@@ -6,6 +6,9 @@ on:
   pull_request:
     branches: [main]
 
+permissions:
+  contents: read
+
 jobs:
   test:
     runs-on: ubuntu-latest
@@ -13,13 +16,13 @@ jobs:
       matrix:
         python-version: ["3.10", "3.11", "3.12", "3.13", "3.14", "3.15"]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Install uv
-        uses: astral-sh/setup-uv@v6
+        uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
 
       - name: Set up Python ${{ matrix.python-version }}
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
         with:
           python-version: ${{ matrix.python-version }}
           allow-prereleases: true
@@ -35,7 +38,7 @@ jobs:
 
       - name: Upload coverage to Codecov
         if: matrix.python-version == '3.14'
-        uses: codecov/codecov-action@v6
+        uses: codecov/codecov-action@cddd853df119a48c5be31a973f8cd97e12e35e16 # v6.0.1
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
           files: coverage.xml
@@ -43,13 +46,13 @@ jobs:
   lint:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Install uv
-        uses: astral-sh/setup-uv@v6
+        uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
 
       - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
         with:
           python-version: "3.14"
 

assertpy2-2.1.3/.github/workflows/codeql.yml

@@ -0,0 +1,24 @@
+name: CodeQL
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+  schedule:
+    - cron: "0 3 * * 1"
+
+permissions:
+  contents: read
+
+jobs:
+  analyze:
+    runs-on: ubuntu-latest
+    permissions:
+      security-events: write
+    steps:
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: github/codeql-action/init@f52b05f4acaaa234e44466e66d29050e135ea9ef # v4.36.0
+        with:
+          languages: python
+      - uses: github/codeql-action/analyze@f52b05f4acaaa234e44466e66d29050e135ea9ef # v4.36.0

assertpy2-2.1.3/.github/workflows/publish.yml

@@ -0,0 +1,44 @@
+name: Publish to PyPI
+
+on:
+  release:
+    types: [published]
+
+permissions:
+  contents: read
+
+jobs:
+  publish:
+    runs-on: ubuntu-latest
+    environment: pypi
+    permissions:
+      id-token: write
+      contents: write
+      attestations: write
+    steps:
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
+
+      - name: Set up Python
+        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
+        with:
+          python-version: "3.15"
+          allow-prereleases: true
+
+      - name: Build
+        run: uv build
+
+      - name: Attest build provenance
+        uses: actions/attest-build-provenance@a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32 # v4.1.0
+        with:
+          subject-path: dist/*
+
+      - name: Publish to PyPI
+        uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b # v1.14.0
+
+      - name: Upload to GitHub Release
+        run: gh release upload "${{ github.event.release.tag_name }}" dist/*
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}

assertpy2-2.1.3/.github/workflows/scorecard.yml

@@ -0,0 +1,34 @@
+name: Scorecard
+
+on:
+  push:
+    branches: [main]
+  workflow_dispatch:
+  schedule:
+    - cron: "30 1 * * 6"
+
+permissions: read-all
+
+jobs:
+  analysis:
+    runs-on: ubuntu-latest
+    permissions:
+      security-events: write
+      id-token: write
+    steps:
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        with:
+          persist-credentials: false
+      - uses: ossf/scorecard-action@4eaacf0543bb3f2c246792bd56e8cdeffafb205a # v2.4.3
+        with:
+          results_file: results.sarif
+          results_format: sarif
+          publish_results: true
+      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        with:
+          name: SARIF file
+          path: results.sarif
+          retention-days: 5
+      - uses: github/codeql-action/upload-sarif@e46ed2cbd01164d986452f91f178727624ae40d7 # v4.35.3
+        with:
+          sarif_file: results.sarif

{assertpy2-2.1.1 → assertpy2-2.1.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: assertpy2
-Version: 2.1.1
+Version: 2.1.3
 Summary: Fluent assertion library for Python with full type safety and soft assertions
 Project-URL: Homepage, https://github.com/Solganis/assertpy2
 Project-URL: Repository, https://github.com/Solganis/assertpy2
@@ -50,6 +50,9 @@ Description-Content-Type: text/markdown
   <a href="https://codecov.io/gh/Solganis/assertpy2"><img src="https://codecov.io/gh/Solganis/assertpy2/graph/badge.svg" alt="Coverage"></a>
   <a href="https://github.com/Solganis/assertpy2/blob/main/LICENSE"><img src="https://img.shields.io/github/license/Solganis/assertpy2" alt="License"></a>
   <a href="https://docs.astral.sh/ruff/"><img src="https://img.shields.io/endpoint?url=https://raw.githubusercontent.com/astral-sh/ruff/main/assets/badge/v2.json" alt="Ruff"></a>
+  <a href="https://github.com/astral-sh/uv"><img src="https://img.shields.io/endpoint?url=https://raw.githubusercontent.com/astral-sh/uv/main/assets/badge/v0.json" alt="uv"></a>
+  <a href="https://scorecard.dev/viewer/?uri=github.com/Solganis/assertpy2"><img src="https://api.scorecard.dev/projects/github.com/Solganis/assertpy2/badge" alt="OpenSSF Scorecard"></a>
+  <a href="https://www.bestpractices.dev/projects/12990"><img src="https://www.bestpractices.dev/projects/12990/badge" alt="OpenSSF Best Practices"></a>
 </p>
 
 
@@ -109,6 +112,25 @@ FAILED test_example.py::test_comparison
 ```
 
 
+## Comparison
+
+<div align="center">
+
+|  | pytest assert | PyHamcrest | assertpy | **assertpy2** |
+|---|:---:|:---:|:---:|:---:|
+| **Type safety** | Partial (mypy plugin) | No | No | **py.typed, @overload, Self** |
+| **IDE autocomplete** | Generic | Generic | Generic | **Type-specific per value** |
+| **Fluent chaining** | No | No | Yes | **Yes** |
+| **Composable matchers** | No | Yes (functions) | No | **Yes (`&` `\|` `~` operators)** |
+| **Structural matching** | No | Flat (has_entries) | No | **Recursive with matchers** |
+| **Async assertions** | No | No | No | **eventually() with polling** |
+| **Soft assertions** | No | No | Yes (not thread-safe) | **Yes (thread-safe, async-safe)** |
+| **Structured errors** | Rewrite only | Mismatch string | String only | **.actual .expected .diff** |
+| **Maintained** | N/A | Minimal | 2020 | **Active (2026)** |
+
+</div>
+
+
 ## Why fluent assertions?
 
 ```py
@@ -350,24 +372,7 @@ from assertpy import assert_that, soft_assertions
 from assertpy2 import assert_that, soft_assertions
 ```
 
-<div align="center">
-
-|  | assertpy | assertpy2 |
-|---|---|---|
-| Maintained | Last release 2020 | Active |
-| Python | 2.7+ | 3.10-3.15 |
-| Type safety | No annotations | `Self` return types, `py.typed`, typed `@overload` on `assert_that()` |
-| IDE support | No type info | Full autocomplete, type-specific method suggestions |
-| Matchers | None | Composable matchers with `&` `\|` `~` operators |
-| Structural matching | None | `matches_structure()` with recursive dict validation |
-| Async | None | `eventually()` with polling/retry |
-| Error reporting | Flat strings | `AssertionFailure` with `.actual`, `.expected`, `.diff` |
-| Pytest integration | None | Rich diff sections in failure reports |
-| Soft assertions | Global state, not thread-safe | `contextvars`, thread-safe and async-safe |
-| Security | [CVE in snapshots](https://github.com/assertpy/assertpy/issues/156) | Fixed |
-| Open bugs | 15+ unresolved | All resolved |
-
-</div>
+See the [comparison table](#comparison) above for feature differences with other libraries.
 
 
 ## Contributing

{assertpy2-2.1.1 → assertpy2-2.1.3}/README.md

@@ -19,6 +19,9 @@
   <a href="https://codecov.io/gh/Solganis/assertpy2"><img src="https://codecov.io/gh/Solganis/assertpy2/graph/badge.svg" alt="Coverage"></a>
   <a href="https://github.com/Solganis/assertpy2/blob/main/LICENSE"><img src="https://img.shields.io/github/license/Solganis/assertpy2" alt="License"></a>
   <a href="https://docs.astral.sh/ruff/"><img src="https://img.shields.io/endpoint?url=https://raw.githubusercontent.com/astral-sh/ruff/main/assets/badge/v2.json" alt="Ruff"></a>
+  <a href="https://github.com/astral-sh/uv"><img src="https://img.shields.io/endpoint?url=https://raw.githubusercontent.com/astral-sh/uv/main/assets/badge/v0.json" alt="uv"></a>
+  <a href="https://scorecard.dev/viewer/?uri=github.com/Solganis/assertpy2"><img src="https://api.scorecard.dev/projects/github.com/Solganis/assertpy2/badge" alt="OpenSSF Scorecard"></a>
+  <a href="https://www.bestpractices.dev/projects/12990"><img src="https://www.bestpractices.dev/projects/12990/badge" alt="OpenSSF Best Practices"></a>
 </p>
 
 
@@ -78,6 +81,25 @@ FAILED test_example.py::test_comparison
 ```
 
 
+## Comparison
+
+<div align="center">
+
+|  | pytest assert | PyHamcrest | assertpy | **assertpy2** |
+|---|:---:|:---:|:---:|:---:|
+| **Type safety** | Partial (mypy plugin) | No | No | **py.typed, @overload, Self** |
+| **IDE autocomplete** | Generic | Generic | Generic | **Type-specific per value** |
+| **Fluent chaining** | No | No | Yes | **Yes** |
+| **Composable matchers** | No | Yes (functions) | No | **Yes (`&` `\|` `~` operators)** |
+| **Structural matching** | No | Flat (has_entries) | No | **Recursive with matchers** |
+| **Async assertions** | No | No | No | **eventually() with polling** |
+| **Soft assertions** | No | No | Yes (not thread-safe) | **Yes (thread-safe, async-safe)** |
+| **Structured errors** | Rewrite only | Mismatch string | String only | **.actual .expected .diff** |
+| **Maintained** | N/A | Minimal | 2020 | **Active (2026)** |
+
+</div>
+
+
 ## Why fluent assertions?
 
 ```py
@@ -319,24 +341,7 @@ from assertpy import assert_that, soft_assertions
 from assertpy2 import assert_that, soft_assertions
 ```
 
-<div align="center">
-
-|  | assertpy | assertpy2 |
-|---|---|---|
-| Maintained | Last release 2020 | Active |
-| Python | 2.7+ | 3.10-3.15 |
-| Type safety | No annotations | `Self` return types, `py.typed`, typed `@overload` on `assert_that()` |
-| IDE support | No type info | Full autocomplete, type-specific method suggestions |
-| Matchers | None | Composable matchers with `&` `\|` `~` operators |
-| Structural matching | None | `matches_structure()` with recursive dict validation |
-| Async | None | `eventually()` with polling/retry |
-| Error reporting | Flat strings | `AssertionFailure` with `.actual`, `.expected`, `.diff` |
-| Pytest integration | None | Rich diff sections in failure reports |
-| Soft assertions | Global state, not thread-safe | `contextvars`, thread-safe and async-safe |
-| Security | [CVE in snapshots](https://github.com/assertpy/assertpy/issues/156) | Fixed |
-| Open bugs | 15+ unresolved | All resolved |
-
-</div>
+See the [comparison table](#comparison) above for feature differences with other libraries.
 
 
 ## Contributing

assertpy2-2.1.3/SECURITY.md

@@ -0,0 +1,16 @@
+# Security Policy
+
+## Supported Versions
+
+| Version | Supported |
+|---|---|
+| 2.x | Yes |
+| < 2.0 | No |
+
+## Reporting a Vulnerability
+
+Please report security vulnerabilities by emailing solganis.dev@gmail.com.
+
+Do not open a public issue for security vulnerabilities.
+
+You should receive a response within 48 hours. If the vulnerability is confirmed, a fix will be released as soon as possible.

{assertpy2-2.1.1 → assertpy2-2.1.3}/assertpy2/assertpy.py

@@ -73,7 +73,7 @@ from .numeric import NumericMixin
 from .snapshot import SnapshotMixin
 from .string import StringMixin
 
-__version__ = "2.1.1"
+__version__ = "2.1.3"
 
 __tracebackhide__ = True  # clean tracebacks via py.test integration
 contextlib.__tracebackhide__ = True  # monkey patch contextlib with clean py.test tracebacks

{assertpy2-2.1.1 → assertpy2-2.1.3}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "assertpy2"
-version = "2.1.1"
+version = "2.1.3"
 description = "Fluent assertion library for Python with full type safety and soft assertions"
 readme = "README.md"
 license = "BSD-3-Clause"

{assertpy2-2.1.1 → assertpy2-2.1.3}/tests/test_matchers.py

@@ -490,8 +490,6 @@ class TestContainsWithMatcher:
 
 
 class TestDescribeCoverage:
-    """Ensures all matcher describe() methods are exercised."""
-
     def test_greater_than_or_equal_to_describe(self):
         assert_that(match.greater_than_or_equal_to(5).describe()).contains("greater than or equal to")
 

{assertpy2-2.1.1 → assertpy2-2.1.3}/tests/test_overloads.py

@@ -6,8 +6,6 @@ from assertpy2.assertpy import AssertionBuilder
 
 
 class TestOverloadsRuntimeBehavior:
-    """Verify that @overload decorators don't affect runtime behavior."""
-
     def test_str_returns_builder(self):
         result = assert_that("hello")
         assert isinstance(result, AssertionBuilder)

assertpy2-2.1.1/.github/workflows/publish.yml

@@ -1,29 +0,0 @@
-name: Publish to PyPI
-
-on:
-  release:
-    types: [published]
-
-jobs:
-  publish:
-    runs-on: ubuntu-latest
-    environment: pypi
-    permissions:
-      id-token: write
-    steps:
-      - uses: actions/checkout@v4
-
-      - name: Install uv
-        uses: astral-sh/setup-uv@v6
-
-      - name: Set up Python
-        uses: actions/setup-python@v5
-        with:
-          python-version: "3.15"
-          allow-prereleases: true
-
-      - name: Build
-        run: uv build
-
-      - name: Publish to PyPI
-        uses: pypa/gh-action-pypi-publish@release/v1

assertpy2-2.1.1/CLAUDE.md

@@ -1,113 +0,0 @@
-# assertpy2
-
-Fluent assertion library for Python. Fork of assertpy с type safety, soft assertions, snapshot testing.
-Python 3.10+, единственная зависимость: typing_extensions>=4.0.
-
----
-
-## Project layout
-
-```
-assertpy2/
-├── assertpy.py           # assert_that(), AssertionBuilder, soft_assertions(), fail()
-├── async_assertions.py   # AsyncAssertionBuilder - eventually() polling
-├── base.py               # BaseMixin - is_equal_to, satisfies, each, matches_structure
-├── string.py             # StringMixin - starts_with, ends_with, matches, is_alpha, is_digit
-├── numeric.py            # NumericMixin - is_zero, is_positive, is_between, is_close_to
-├── collection.py         # CollectionMixin - is_iterable, is_subset_of, is_sorted
-├── contains.py           # ContainsMixin - contains, does_not_contain, is_empty
-├── dict.py               # DictMixin - contains_key, contains_value, contains_entry
-├── date.py               # DateMixin - is_before, is_after, is_equal_to_ignoring_time
-├── file.py               # FileMixin + contents_of() - exists, is_file, is_directory
-├── exception.py          # ExceptionMixin - raises, when_called_with
-├── extracting.py         # ExtractingMixin - extracting with filter/sort
-├── dynamic.py            # DynamicMixin - has_<attr>() via __getattr__
-├── snapshot.py           # SnapshotMixin - snapshot testing
-├── helpers.py            # HelpersMixin - _dict_not_equal, _fmt_items, validation
-├── errors.py             # AssertionFailure, DiffResult, DiffEntry - structured errors
-├── matchers.py           # Matcher protocol, composable matchers, match namespace
-├── pytest_plugin.py      # pytest entry point - rich diff output for AssertionFailure
-├── _typing.py            # TYPE_CHECKING-only Protocol classes for @overload return types
-├── __init__.py           # Public API exports
-└── py.typed              # PEP 561 marker
-
-tests/                 # 100% coverage required
-```
-
----
-
-## Architecture
-
-- AssertionBuilder наследует миксины. Каждый миксин - одна категория assertions.
-- Все assertion-методы возвращают Self для chaining.
-- error() в AssertionBuilder маршрутизирует: raise (default), log (warn), collect (soft).
-- __tracebackhide__ = True во всех миксинах для чистого pytest traceback.
-- Расширения через add_extension(func) - динамическая привязка через types.MethodType.
-
-Правило: новые assertions добавляются в существующий миксин по категории.
-Новый миксин создаётся только для принципиально новой категории (не для 1-2 методов).
-
----
-
-## Tooling
-
-```
-uv sync
-uv run pytest
-uv run pytest -v --cov=assertpy2 --cov-report=term-missing
-uv run ruff check .
-uv run ruff format .
-uv run ruff format --check .
-```
-
----
-
-## CI/CD
-
-GitHub Actions, два workflow:
-
-**CI** (.github/workflows/ci.yml):
-- Триггер: push/PR в main
-- Матрица: Python 3.10-3.15
-- Шаги: uv sync, ruff check, pytest с coverage (xml + term-missing)
-- Codecov upload: только с Python 3.14 (token в secrets)
-- Отдельный lint job: ruff check + ruff format --check
-
-**Publish** (.github/workflows/publish.yml):
-- Триггер: GitHub Release (published)
-- Trusted Publisher (id-token: write), без API-ключей
-- uv build, pypa/gh-action-pypi-publish
-
-Правила:
-- Версия только в pyproject.toml (одно место)
-- Релиз: обновить version в pyproject.toml, создать GitHub Release с тегом
-- Не мержить без зелёного CI
-
----
-
-## Key dependencies
-
-| Package | Version | Role |
-|---|---|---|
-| typing_extensions | >=4.0 | Self type, runtime-free typing |
-| pytest | >=9.0.3 | test runner (dev) |
-| pytest-cov | >=6.1 | coverage (dev) |
-| ruff | >=0.15.14 | linter + formatter (dev) |
-
----
-
-## Naming
-
-- Assertion-методы: is_*, has_*, does_not_*, contains_*, starts_with, ends_with
-- Новые assertions следуют существующему паттерну: глагол + предикат
-- Тестовые файлы: test_<feature>.py
-- Миксины: <Category>Mixin
-
----
-
-## Testing
-
-- Coverage 100%. Каждый assertion-метод покрыт: happy path, error path, edge cases.
-- Тесты используют pytest.raises(AssertionError) для проверки сообщений об ошибках.
-- match= в pytest.raises для валидации текста ошибки.
-- Snapshot-тесты хранят данные в tests/__snapshots__/.