chemotools 0.1.16__tar.gz → 0.1.17__tar.gz

{chemotools-0.1.16 → chemotools-0.1.17}/.github/workflows/python-release.yml

@@ -44,4 +44,16 @@ jobs:
 
       # 3. Publish to PyPI
       - name: Publish package distributions to PyPI
-        uses: pypa/gh-action-pypi-publish@release/v1
+        uses: pypa/gh-action-pypi-publish@release/v1
+
+      # 4. Create SBOM
+      - name: Create SBOM and attach to the release
+        run: uv run cyclonedx-py 'environment' --output-format=json --output-file=chemotools-${{ github.event.release.tag_name }}-sbom.json
+
+      # 5. Upload SBOM as a release asset
+      - name: Upload SBOM to release
+        uses: softprops/action-gh-release@v1
+        with:
+          files: chemotools-${{ github.event.release.tag_name }}-sbom.json
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

{chemotools-0.1.16 → chemotools-0.1.17}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: chemotools
-Version: 0.1.16
+Version: 0.1.17
 Summary: chemotools: A Python Package that Integrates Chemometrics and scikit-learn
 Author: Pau Cabaneros
 License-Expression: MIT
@@ -12,6 +12,7 @@ Requires-Dist: polars<2,>=1.17.0
 Requires-Dist: pyarrow<21,>=18
 Requires-Dist: scikit-learn<2,>=1.4.0
 Provides-Extra: dev
+Requires-Dist: cyclonedx-bom>=7.1.0; extra == 'dev'
 Requires-Dist: mypy<2,>=1.13.0; extra == 'dev'
 Requires-Dist: pandas-stubs<3,>=2.2.3.241126; extra == 'dev'
 Requires-Dist: pytest-cov>=6.3.0; extra == 'dev'

{chemotools-0.1.16 → chemotools-0.1.17}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "chemotools"
-version = "0.1.16"
+version = "0.1.17"
 description = "chemotools: A Python Package that Integrates Chemometrics and scikit-learn"
 authors = [{ name = "Pau Cabaneros" }]
 requires-python = ">=3.10"
@@ -16,6 +16,7 @@ dependencies = [
 
 [project.optional-dependencies]
 dev = [
+    "cyclonedx-bom>=7.1.0",
     "pytest>=8.3.0,<9",
     "pytest-cov>=6.3.0",
     "ruff>=0.8.0,<0.9",
@@ -38,3 +39,5 @@ filterwarnings = "always"
 module = ["sklearn", "sklearn.*", "setuptools", "setuptools.*"]
 ignore_missing_imports = true
 
+
+