atlas-local-lib-py 0.1.0a0__tar.gz

atlas_local_lib_py-0.1.0a0/.github/dependabot.yml

@@ -0,0 +1,67 @@
+version: 2
+updates:
+  # Enable version updates for Rust/Cargo dependencies
+  - package-ecosystem: "cargo"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+      time: "09:00"
+    open-pull-requests-limit: 10
+    commit-message:
+      prefix: "chore(deps)"
+    labels:
+      - "dependencies"
+    # Group updates by type to separate security from version updates
+    groups:
+      rust-security:
+        applies-to: security-updates
+        patterns:
+          - "*"
+      rust-version-updates:
+        applies-to: version-updates
+        patterns:
+          - "*"
+    cooldown:
+      default-days: 7
+
+  # Enable version updates for Python dependencies and build/dev tooling
+  # (e.g. maturin, pytest), sourced from pyproject.toml
+  - package-ecosystem: "pip"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+      time: "09:00"
+    open-pull-requests-limit: 10
+    commit-message:
+      prefix: "chore(deps)"
+    labels:
+      - "dependencies"
+    # Group updates by type to separate security from version updates
+    groups:
+      python-security:
+        applies-to: security-updates
+        patterns:
+          - "*"
+      python-version-updates:
+        applies-to: version-updates
+        patterns:
+          - "*"
+    cooldown:
+      default-days: 7
+
+  # Enable version updates for GitHub Actions
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+      day: "monday"
+      time: "09:00"
+    open-pull-requests-limit: 5
+    commit-message:
+      prefix: "chore(deps)"
+    labels:
+      - "dependencies"
+    cooldown:
+      default-days: 7

atlas_local_lib_py-0.1.0a0/.github/pull_request_template.md

@@ -0,0 +1,51 @@
+<!--
+The pull request title becomes the squashed commit message and feeds the
+changelog, so it has to follow conventional commits:
+
+    <type>(<optional scope>): <description>
+
+Accepted types: build, chore, ci, docs, feat, fix, perf, refactor, revert,
+style, test, ops. Add `!` after the type for a breaking change.
+-->
+
+## Summary
+
+<!-- What changes and why. Link the Jira ticket if there is one. -->
+_Jira ticket:_
+
+## Type of change
+
+- [ ] Bug fix (non-breaking change which fixes an issue)
+- [ ] New feature (non-breaking change which adds functionality)
+- [ ] Breaking change (a change that may break existing functionality)
+- [ ] Documentation fix or enhancement
+- [ ] Build, CI or tooling change
+- [ ] Other (please describe the change in the Summary section)
+
+
+## Public API
+
+<!-- Delete this section if the Python surface is untouched. -->
+
+- [ ] Public API changes are covered by appropriate tests
+- [ ] Errors use the most specific existing exception, or introduce a new one when appropriate
+- [ ] `README.md` and relevant examples are up to date
+
+
+## Checklist
+
+- [ ] I have signed the [MongoDB CLA](https://www.mongodb.com/legal/contributor-agreement)
+- [ ] I have read [CONTRIBUTING.md](../CONTRIBUTING.md)
+- [ ] I have added tests that prove my fix is effective or that my feature works
+- [ ] I have run `cargo fmt` and `ruff format .`
+- [ ] `cargo clippy --all-targets -- -D warnings` and `ruff check .` pass
+- [ ] `cargo test` and `pytest` pass
+- [ ] `pytest -m integration` passes, or the change cannot affect it
+- [ ] `LICENSE-3RD-PARTY.txt` is regenerated, or no dependency changed
+
+## Testing
+
+<!--
+How this was verified beyond the suites above: commands run, output, or the
+scenario exercised by hand.
+-->

atlas_local_lib_py-0.1.0a0/.github/workflows/check-pr-title.yml

@@ -0,0 +1,29 @@
+name: "Check PR Title"
+on:
+  pull_request:
+    types:
+      [
+        opened,
+        synchronize,
+        reopened,
+        ready_for_review,
+        labeled,
+        unlabeled,
+        converted_to_draft,
+        edited,
+      ]
+
+permissions:
+  pull-requests: read # to read PR title and labels
+
+jobs:
+  check-pr-title:
+    name: Check PR Title
+    runs-on: ubuntu-latest
+    steps:
+      - name: Enforce conventional commit style
+        uses: realm/ci-actions/title-checker@d6cc8f067474759d38e6d24e272027b4c88bc0a9
+        with:
+          regex: '^(build|chore|ci|docs|feat|fix|perf|refactor|revert|style|test|ops){1}(\([\w\-\.]+\))?(!)?: .*'
+          error-hint: 'Invalid PR title. Make sure it follows the conventional commit specification (i.e. "<type>(<optional scope>): <description>") or add the no-title-validation label'
+          ignore-labels: "no-title-validation"

atlas_local_lib_py-0.1.0a0/.github/workflows/close-jira.yaml

@@ -0,0 +1,17 @@
+# synced from apix-actions/.github/workflows/close-jira.yaml
+name: Auto Close Jira
+
+on:
+  pull_request:
+    types: [closed]
+
+permissions: {}
+
+jobs:
+  close-jira:
+    if: contains(github.event.pull_request.labels.*.name, 'auto_close_jira')
+    permissions:
+      contents: read
+      pull-requests: read
+    uses: mongodb/apix-action/.github/workflows/_close-jira.yaml@8c5007247643059c0d15c061290a345eb987657f # main
+    secrets: inherit

atlas_local_lib_py-0.1.0a0/.github/workflows/create-jira.yaml

@@ -0,0 +1,17 @@
+# synced from apix-actions/.github/workflows/create-jira.yaml
+name: Create Jira Ticket
+
+on:
+  pull_request:
+    types: [labeled]
+
+permissions: {}
+
+jobs:
+  create-jira:
+    if: github.event.label.name == 'create_jira'
+    permissions:
+      contents: read
+      pull-requests: write
+    uses: mongodb/apix-action/.github/workflows/_create-jira.yaml@8c5007247643059c0d15c061290a345eb987657f # main
+    secrets: inherit

atlas_local_lib_py-0.1.0a0/.github/workflows/dependabot-auto-merge.yaml

@@ -0,0 +1,36 @@
+# synced from apix-actions/.github/workflows/dependabot-auto-merge.yaml
+name: Auto merge dependabot prs
+
+on:
+  pull_request:
+    types: [opened, reopened, synchronize]
+
+permissions:
+  contents: write
+  pull-requests: write
+
+jobs:
+  auto-merge:
+    name: Auto merge dependabot prs
+    runs-on: ubuntu-latest
+    if: github.event.pull_request.user.login == 'dependabot[bot]'
+    steps:
+    - uses: GitHubSecurityLab/actions-permissions/monitor@bf82d13b9b10051d224345ab9184f5ede0a94289 # v1
+      with:
+        config: ${{ vars.PERMISSIONS_CONFIG }}
+    - name: Set APIX bot token
+      id: app-token
+      uses: mongodb/apix-action/token@8549161120ce38b1e132ff833302a0ecbde58038 # v14
+      with:
+        app-id: ${{ secrets.APIXBOT_APP_ID }}
+        private-key: ${{ secrets.APIXBOT_APP_PEM }}
+    - name: Approve PR
+      env:
+        GH_TOKEN: ${{ steps.app-token.outputs.token }}
+      run: |
+        gh pr review "${{ github.event.pull_request.html_url }}" --approve
+    - name: Auto merge PR
+      env:
+        GH_TOKEN: ${{ steps.app-token.outputs.token }}
+      run: |
+        gh pr merge "${{ github.event.pull_request.html_url }}" --auto --squash

atlas_local_lib_py-0.1.0a0/.github/workflows/dependabot-jira.yaml

@@ -0,0 +1,17 @@
+# synced from apix-actions/.github/workflows/dependabot-jira.yaml
+name: Create Jira Ticket for Dependabot PRs
+
+on:
+  pull_request:
+    types: [opened]
+
+permissions: {}
+
+jobs:
+  create-jira:
+    if: github.actor == 'dependabot[bot]'
+    permissions:
+      contents: read
+      pull-requests: write
+    uses: mongodb/apix-action/.github/workflows/_dependabot-jira.yaml@8c5007247643059c0d15c061290a345eb987657f # main
+    secrets: inherit

atlas_local_lib_py-0.1.0a0/.github/workflows/dependabot-licenses.yml

@@ -0,0 +1,108 @@
+name: Update third-party licenses
+
+on:
+  pull_request:
+    types: [opened, reopened, synchronize]
+
+permissions:
+  contents: read
+  pull-requests: read
+
+concurrency:
+  group: update-third-party-licenses-${{ github.event.pull_request.number }}
+  cancel-in-progress: true
+
+jobs:
+  update-licenses:
+    name: Regenerate LICENSE-3RD-PARTY.txt
+    runs-on: ubuntu-latest
+
+    if: >-
+      github.event.pull_request.user.login == 'dependabot[bot]' &&
+      github.event.pull_request.head.repo.full_name == github.repository &&
+      (
+        startsWith(github.event.pull_request.head.ref, 'dependabot/cargo/') ||
+        startsWith(github.event.pull_request.head.ref, 'dependabot/pip/')
+      )
+
+    env:
+      CARGO_ABOUT_VERSION: "0.9.1"
+
+    steps:
+      - name: Create APIx bot token
+        id: app-token
+        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
+        with:
+          app-id: ${{ secrets.APIXBOT_APP_ID }}
+          private-key: ${{ secrets.APIXBOT_APP_PEM }}
+          owner: ${{ github.repository_owner }}
+          repositories: ${{ github.event.repository.name }}
+          permission-contents: write
+
+      - name: Checkout Dependabot branch
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          repository: ${{ github.event.pull_request.head.repo.full_name }}
+          ref: ${{ github.event.pull_request.head.ref }}
+          token: ${{ steps.app-token.outputs.token }}
+
+      - name: Install Rust toolchain
+        uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4 # stable
+        with:
+          toolchain: stable
+
+      - name: Set up Python
+        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
+        with:
+          python-version: "3.x"
+
+      - name: Cache Cargo dependencies
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
+        with:
+          path: |
+            ~/.cargo/registry
+            ~/.cargo/git
+            target
+          key: ${{ runner.os }}-cargo-license-${{ hashFiles('**/Cargo.lock') }}
+          restore-keys: |
+            ${{ runner.os }}-cargo-license-
+
+      - name: Install cargo-binstall
+        uses: cargo-bins/cargo-binstall@e00d2c94cc0067b77737821097a62d91c0301baa # v1.21.1
+
+      - name: Install cargo-about
+        run: |
+          cargo binstall \
+            --no-confirm \
+            --locked \
+            --version "${CARGO_ABOUT_VERSION}" \
+            cargo-about
+
+      - name: Install package and Python tooling
+        run: |
+          python -m pip install --upgrade pip
+          pip install . pip-licenses packaging
+
+      - name: Regenerate LICENSE-3RD-PARTY.txt
+        run: |
+          set -euo pipefail
+          PYTHON="$(which python)" ./scripts/generate-third-party.sh
+
+      - name: Commit and push updated licenses
+        env:
+          APP_SLUG: ${{ steps.app-token.outputs.app-slug }}
+          BRANCH: ${{ github.event.pull_request.head.ref }}
+        run: |
+          set -euo pipefail
+
+          if git diff --quiet -- LICENSE-3RD-PARTY.txt; then
+            echo "LICENSE-3RD-PARTY.txt is already up to date"
+            exit 0
+          fi
+
+          git config user.name "${APP_SLUG}[bot]"
+          git config user.email "${APP_SLUG}[bot]@users.noreply.github.com"
+
+          git add LICENSE-3RD-PARTY.txt
+          git commit -m "chore(deps): update LICENSE-3RD-PARTY.txt"
+          git push origin "HEAD:${BRANCH}"

atlas_local_lib_py-0.1.0a0/.github/workflows/issue-closed.yaml

@@ -0,0 +1,16 @@
+# synced from apix-actions/.github/workflows/issue-closed.yaml
+name: Close Jira Ticket on Issue Close
+
+on:
+  issues:
+    types: [closed]
+
+permissions: {}
+
+jobs:
+  close-jira:
+    permissions:
+      contents: read
+      issues: read
+    uses: mongodb/apix-action/.github/workflows/_issue-closed.yaml@9ce9e6205a14af111352430e9f9adbea1c75230b # main
+    secrets: inherit

atlas_local_lib_py-0.1.0a0/.github/workflows/issue-opened.yaml

@@ -0,0 +1,16 @@
+# synced from apix-actions/.github/workflows/issue-opened.yaml
+name: Create Jira Ticket for New Issues
+
+on:
+  issues:
+    types: [opened]
+
+permissions: {}
+
+jobs:
+  create-jira:
+    permissions:
+      contents: read
+      issues: write
+    uses: mongodb/apix-action/.github/workflows/_issue-opened.yaml@8c5007247643059c0d15c061290a345eb987657f # main
+    secrets: inherit

atlas_local_lib_py-0.1.0a0/.github/workflows/issue-reopened.yaml

@@ -0,0 +1,16 @@
+# synced from apix-actions/.github/workflows/issue-reopened.yaml
+name: Reopen Jira Ticket on Issue Reopen
+
+on:
+  issues:
+    types: [reopened]
+
+permissions: {}
+
+jobs:
+  reopen-jira:
+    permissions:
+      contents: read
+      issues: read
+    uses: mongodb/apix-action/.github/workflows/_issue-reopened.yaml@8c5007247643059c0d15c061290a345eb987657f # main
+    secrets: inherit

atlas_local_lib_py-0.1.0a0/.github/workflows/license.yml

@@ -0,0 +1,76 @@
+name: License compliance
+
+on:
+  push:
+    branches:
+      - main
+      - master
+  pull_request:
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+env:
+  CARGO_TERM_COLOR: always
+  # Tool versions (adapt as needed; not required to match atlas-local-lib).
+  CARGO_DENY_VERSION: "0.16.3"
+  CARGO_ABOUT_VERSION: "0.9.1"
+
+jobs:
+  check:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+
+      - name: Install Rust toolchain
+        uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4 # stable
+        with:
+          toolchain: stable
+
+      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
+        with:
+          python-version: "3.x"
+
+      - name: Cache cargo registry
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
+        with:
+          path: |
+            ~/.cargo/registry
+            ~/.cargo/git
+            target
+          key: ${{ runner.os }}-cargo-license-${{ hashFiles('**/Cargo.lock') }}
+          restore-keys: |
+            ${{ runner.os }}-cargo-license-
+
+      - name: Install cargo-binstall
+        uses: cargo-bins/cargo-binstall@e00d2c94cc0067b77737821097a62d91c0301baa # v1.21.1
+
+      - name: Install cargo-deny and cargo-about
+        run: |
+          cargo binstall --no-confirm --locked --version "${CARGO_DENY_VERSION}" cargo-deny
+          cargo binstall --no-confirm --locked --version "${CARGO_ABOUT_VERSION}" cargo-about
+
+      - name: Install package and Python tooling
+        run: |
+          python -m pip install --upgrade pip
+          pip install . pip-licenses packaging
+
+      # 1. Rust dependency license policy.
+      - name: Check Rust dependency licenses
+        run: cargo deny --all-features check licenses
+
+      # 2. Python dependency license policy.
+      - name: Check Python dependency licenses
+        run: PYTHON="$(which python)" ./scripts/check-python-licenses.sh
+
+      # 3. Regenerate LICENSE-3RD-PARTY.txt and fail if the checked-in copy is stale.
+      - name: Regenerate LICENSE-3RD-PARTY.txt
+        run: PYTHON="$(which python)" ./scripts/generate-third-party.sh
+
+      - name: Fail if checked-in LICENSE-3RD-PARTY.txt is stale
+        run: |
+          if ! git diff --exit-code -- LICENSE-3RD-PARTY.txt; then
+            echo "::error::LICENSE-3RD-PARTY.txt is out of date. Run ./scripts/generate-third-party.sh and commit the result."
+            exit 1
+          fi

atlas_local_lib_py-0.1.0a0/.github/workflows/prepare-release.yml

@@ -0,0 +1,102 @@
+name: Prepare Release
+
+on:
+  workflow_dispatch:
+    inputs:
+      version:
+        description: "Exact version (for example 0.1.0) or major, minor, patch"
+        required: true
+        default: patch
+        type: string
+
+run-name: "Prepare release: ${{ inputs.version }}"
+
+permissions:
+  contents: write
+
+jobs:
+  prepare:
+    name: Update version and changelog
+    runs-on: ubuntu-latest
+    environment: release
+    steps:
+      - name: Validate version input
+        env:
+          INPUT_VERSION: ${{ inputs.version }}
+        run: |
+          if [[ ! "$INPUT_VERSION" =~ ^(major|minor|patch)$ ]] && [[ ! "$INPUT_VERSION" =~ ^[0-9]+\.[0-9]+\.[0-9]+(-[0-9A-Za-z.-]+)?$ ]]; then
+            echo "::error::Invalid version input '$INPUT_VERSION'. Must be 'major', 'minor', 'patch', or a semver version (e.g. 1.2.3)."
+            exit 1
+          fi
+
+      - name: Set Apix Bot token
+        id: app-token
+        uses: mongodb/apix-action/token@8549161120ce38b1e132ff833302a0ecbde58038 # v14
+        with:
+          app-id: ${{ secrets.APIXBOT_APP_ID }}
+          private-key: ${{ secrets.APIXBOT_APP_PEM }}
+
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          token: ${{ steps.app-token.outputs.token }}
+          fetch-depth: 0
+
+      - name: Install Rust toolchain
+        uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4 # stable
+        with:
+          toolchain: stable
+
+      - name: Install cargo-binstall
+        uses: cargo-bins/cargo-binstall@e00d2c94cc0067b77737821097a62d91c0301baa # v1.21.1
+
+      - name: Install cargo-edit
+        run: cargo binstall --no-confirm --locked cargo-edit
+
+      - name: Update Cargo.toml version
+        id: cargo-version
+        env:
+          INPUT_VERSION: ${{ inputs.version }}
+        shell: bash
+        run: |
+          case "$INPUT_VERSION" in
+            major|minor|patch)
+              cargo set-version --bump "$INPUT_VERSION"
+              ;;
+            *)
+              cargo set-version "$INPUT_VERSION"
+              ;;
+          esac
+          VERSION="$(cargo metadata --format-version 1 --no-deps | jq -r '.packages[0].version')"
+          echo "version=$VERSION" >> "$GITHUB_OUTPUT"
+
+      - name: Fail if the tag already exists
+        env:
+          VERSION: ${{ steps.cargo-version.outputs.version }}
+        run: |
+          if git rev-parse -q --verify "refs/tags/v${VERSION}" >/dev/null; then
+            echo "::error::Tag v${VERSION} already exists."
+            exit 1
+          fi
+
+      - name: Generate changelog
+        uses: orhun/git-cliff-action@f50e11560dce63f7c33227798f90b924471a88b5 # v4.8.0
+        with:
+          config: cliff.toml
+          args: --tag ${{ steps.cargo-version.outputs.version }} --verbose
+        env:
+          OUTPUT: CHANGELOG.md
+          GITHUB_REPO: ${{ github.repository }}
+
+      - name: Commit version changes and create tag
+        env:
+          GIT_USER_NAME: ${{ steps.app-token.outputs.user-name }}
+          GIT_USER_EMAIL: ${{ steps.app-token.outputs.user-email }}
+          VERSION: ${{ steps.cargo-version.outputs.version }}
+        run: |
+          git config user.name "$GIT_USER_NAME"
+          git config user.email "$GIT_USER_EMAIL"
+          git add Cargo.toml Cargo.lock CHANGELOG.md
+          git commit -m "chore(release): prepare for ${VERSION}"
+          git tag "v${VERSION}"
+          git push origin HEAD:main
+          git push origin "v${VERSION}"