csspin-python 4.1.0rc2__py3-none-any.whl → 5.0.0__py3-none-any.whl

csspin_python/_predict_wheel_filename.py

@@ -0,0 +1,68 @@
+# -*- mode: python; coding: utf-8 -*-
+#
+# Copyright (C) 2026 CONTACT Software GmbH
+# https://www.contact-software.com/
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+"""
+Predict the wheel filename ``setup.py bdist_wheel`` would produce, without
+building it::
+
+    python _predict_wheel_filename.py /path/to/project NAME VERSION
+
+Must run in the subprocess environment to have setuptools in the environment and
+to have the correct Python version and platform tags that the wheel is built
+for.
+"""
+
+import io
+import os
+import sys
+import warnings
+from contextlib import redirect_stdout
+
+
+def predict_wheel_filename(project_path: str, name: str, version: str) -> str:
+    """Return the predicted wheel filename for ``project_path``."""
+    os.chdir(project_path)
+
+    # setup.py is exec'd here and free to print, so keep its chatter off the
+    # stdout the caller parses. stderr stays, so tracebacks still surface.
+    with warnings.catch_warnings(), redirect_stdout(io.StringIO()):
+        warnings.simplefilter("ignore")
+        if os.path.exists("setup.py"):
+            from distutils.core import run_setup  # pylint: disable=deprecated-module
+
+            dist = run_setup(
+                "setup.py", script_args=["bdist_wheel"], stop_after="commandline"
+            )
+        else:
+            from setuptools.dist import Distribution
+
+            dist = Distribution({"script_args": ["bdist_wheel"]})
+            dist.parse_config_files()
+
+        dist.metadata.name = name
+        dist.metadata.version = version
+
+        cmd = dist.get_command_obj("bdist_wheel")
+        cmd.ensure_finalized()
+        python_tag, abi_tag, plat_tag = cmd.get_tag()  # type: ignore[attr-defined]
+        dist_name = cmd.wheel_dist_name  # type: ignore[attr-defined]
+
+    return f"{dist_name}-{python_tag}-{abi_tag}-{plat_tag}.whl"
+
+
+if __name__ == "__main__":
+    print(predict_wheel_filename(*sys.argv[1:4]))

csspin_python/pytest.py

@@ -28,7 +28,6 @@ defaults = config(
         "--cov-reset",
         "--cov",
         "--cov-report=term",
-        "--cov-report=html",
         "--cov-report=xml:{pytest.coverage_report}",
     ],
     coverage_report="python-pytest-coverage.xml",

csspin_python/python.py

@@ -191,7 +191,7 @@ def wheel(
     for build_path in {Path(path).absolute() for path in search_paths}:
         try:
             echo("Building PEP 517-like wheel")
-            sh(
+            cmd = [
                 "python",
                 "-m",
                 "build",
@@ -199,20 +199,28 @@ def wheel(
                 build_path,
                 "-o",
                 "{spin.project_root}/dist",
-            )
+            ]
+            if cfg.verbosity <= Verbosity.NORMAL:
+                cmd.append("--config-setting=quiet=true")
+            sh(*cmd)
         except Abort:
             echo("Building does not seem to work, use legacy setup.py style")
             with cd(build_path):
-                sh(
+                cmd = [
                     "python",
                     "setup.py",
-                    None if cfg.verbosity > Verbosity.NORMAL else "-v" "build",
+                ]
+                if cfg.verbosity <= Verbosity.NORMAL:
+                    cmd.append("-q")
+                cmd += [
+                    "build",
                     "-b",
                     "{spin.project_root}/build",
                     "bdist_wheel",
                     "-d",
                     "{spin.project_root}/dist",
-                )
+                ]
+                sh(*cmd)
 
 
 @task()
@@ -297,8 +305,13 @@ def _check_venv(  # pylint: disable=too-many-return-statements
     cfg: ConfigTree,
 ) -> bool:
     """
-    Checks whether the venv is actually a venv compatible
-    with our configuration and not just some dir.
+    Checks whether the venv is actually a venv compatible with our configuration
+    and not just some dir.
+
+    Uses absolute interpreter paths and runs *outside* the subprocess environment
+    on purpose: it must work while inspecting an existing venv to decide whether a
+    ``python.version`` change requires rebuilding it -- i.e. before the new
+    interpreter is provisioned.
     """
     try:
         python_version = (
@@ -402,6 +415,11 @@ def configure(cfg: ConfigTree) -> None:
     if cfg.python.aws_auth.enabled:
         _check_aws_token_validity(cfg)
 
+    # Provide spin's subprocess environment (see python_env). Registered here
+    # rather than in init so it is also available to the provision and
+    # finalize_provision hooks of plugins depending on this one.
+    cfg.spin.subprocess_environment = lambda: python_env(cfg)
+
 
 def init(cfg: ConfigTree) -> None:
     """Initialize the python plugin"""
@@ -413,32 +431,85 @@ def init(cfg: ConfigTree) -> None:
                 " project. You might want to run spin with the 'provision'"
                 " task."
             )
-    venv_init(cfg)
-
-
-# We won't activate more than once.
-ACTIVATED = False
 
 
 def venv_init(cfg: ConfigTree) -> None:
     """Activate the virtual environment"""
-    global ACTIVATED  # pylint: disable=global-statement
-    if os.environ.get("VIRTUAL_ENV", "") != cfg.python.venv and not ACTIVATED:
-        activate_this = cfg.python.scriptdir / "activate_this.py"
-        if not exists(activate_this):
-            die(
-                f"{cfg.python.venv} does not exist. You may want to provision"
-                " it using 'spin provision'"
-            )
-        if sys.platform == "win32":
-            echo(f"{cfg.python.scriptdir}\\activate.ps1")
-        else:
-            echo(f". {cfg.python.scriptdir}/activate")
-        with open(activate_this, encoding="utf-8") as file:
-            exec(  # pylint: disable=exec-used # nosec
-                file.read(), {"__file__": activate_this}
-            )
-        ACTIVATED = True
+    activate_this = cfg.python.scriptdir / "activate_this.py"
+    if not exists(activate_this):
+        die(
+            f"{cfg.python.venv} does not exist. You may want to provision"
+            " it using 'spin provision'"
+        )
+    if sys.platform == "win32":
+        echo(f"{cfg.python.scriptdir}\\activate.ps1")
+    else:
+        echo(f". {cfg.python.scriptdir}/activate")
+    with open(activate_this, encoding="utf-8") as file:
+        exec(  # pylint: disable=exec-used # nosec
+            file.read(), {"__file__": activate_this}
+        )
+
+
+@contextmanager
+def python_env(cfg: ConfigTree) -> Generator:
+    """
+    Context manager to activate the subprocess/python virtual environment and
+    deactivate it once done.
+
+    Registered as ``spin.subprocess_environment`` by the plugin's
+    :py:func:`configure` hook, so ``csspin.sh`` activates the virtual environment
+    around the commands it spawns. Activation is conditional: while the virtual
+    environment has not been created yet (e.g. early during ``spin provision``)
+    this is a no-op and the command runs in spin's in-process environment; once
+    the venv exists it is activated. Saving and restoring
+    ``os.environ``, ``sys.path`` and the ``sys`` prefix attributes makes nesting
+    safe -- an explicit ``with python_env(cfg):`` block whose inner ``csspin.sh``
+    re-enters this context.
+
+    See the "The subprocess environment" section of csspin's plugin development
+    guide for the general concept.
+    """
+    if not exists(cfg.python.scriptdir / "activate_this.py"):
+        # The virtual environment has not been provisioned (yet); run the command
+        # in spin's in-process environment instead of activating.
+        yield
+    else:
+
+        def interpolate_environ_value(value: str) -> str:
+            if not value:
+                return ""
+            value = str(value)
+            keys = re.findall(r"{(?P<key>\w+?)}", value)
+            for key in keys:
+                if key in os.environ:
+                    value = value.replace(f"{{{key}}}", os.environ[key])
+            return value
+
+        missing = object()
+        old_env = os.environ.copy()
+        old_sys_path = sys.path.copy()
+        old_sys_prefix = sys.prefix
+        old_real_prefix = getattr(sys, "real_prefix", missing)
+        try:
+            for name, value in EXPORTS:
+                os.environ[name] = interpolate_environ_value(value)
+
+            venv_init(cfg)
+            yield
+        finally:
+            echo(f"deactivate {cfg.python.venv}")
+            os.environ.clear()
+            os.environ.update(old_env)
+            sys.path = old_sys_path
+            sys.prefix = old_sys_prefix
+            # activate_this.py sets sys.real_prefix on activation; restore it (or
+            # remove it) so the attribute does not leak past this context.
+            if old_real_prefix is missing:
+                if hasattr(sys, "real_prefix"):
+                    delattr(sys, "real_prefix")
+            else:
+                setattr(sys, "real_prefix", old_real_prefix)
 
 
 class ActivateScriptPatcher(abc.ABC):
@@ -975,7 +1046,6 @@ def venv_provision(  # pylint: disable=too-many-branches,missing-function-docstr
         info("Provisioning venv '{python.venv}'")
         cfg.python.provisioner.provision_venv(cfg)
 
-    # This sets PATH to the venv
     init(cfg)
 
     _configure_pipconf(cfg)
@@ -1085,15 +1155,15 @@ def _check_aws_token_validity(  # pylint: disable=too-many-locals
 
     import time
 
-    if not (
-        client_secret := (
-            interpolate1(cfg.python.aws_auth.client_secret)
-            or os.getenv("CS_AWS_OIDC_CLIENT_SECRET")
-        )
-    ):
+    client_secret = interpolate1(cfg.python.aws_auth.client_secret) or os.getenv(
+        "CS_AWS_OIDC_CLIENT_SECRET"
+    )
+    static_oidc = interpolate1(cfg.python.aws_auth.static_oidc).lower() == "true"
+
+    if static_oidc and not client_secret:
         die(
             "Please provide a client secret for CodeArtifact access via"
-            " 'python.aws_auth.client_secret'."
+            " 'python.aws_auth.client_secret' when using static OIDC."
         )
 
     current_time = int(time.time())
@@ -1126,8 +1196,7 @@ def _check_aws_token_validity(  # pylint: disable=too-many-locals
 
             opts = {
                 "client_secret": client_secret,
-                "static_oidc": interpolate1(cfg.python.aws_auth.static_oidc).lower()
-                == "true",
+                "static_oidc": static_oidc,
             }
             if cfg.python.aws_auth.client_id:
                 opts["client_id"] = interpolate1(cfg.python.aws_auth.client_id)

csspin_python/python_sbom.py

@@ -25,6 +25,7 @@ from importlib.metadata import metadata as _pkg_metadata
 from importlib.metadata import version as _pkg_version
 from subprocess import DEVNULL, PIPE
 from tempfile import TemporaryDirectory
+from urllib.parse import quote, urlencode, urlparse
 
 from csspin import (
     Verbosity,
@@ -40,12 +41,14 @@ from csspin import (
 )
 from csspin.tree import ConfigTree
 from packaging.requirements import Requirement
+from packaging.utils import canonicalize_name
 from path import Path
 
 defaults = config(
     cyclonedx_bom_version="7.3.0",
     project_paths=["{spin.project_root}"],
-    requires=config(spin=["csspin_python.python"]),
+    repository_url="{python.index_url}",
+    requires=config(spin=["csspin_python.python"], python=["setuptools"]),
 )
 
 
@@ -69,12 +72,23 @@ def sbom(cfg: ConfigTree) -> None:
 
         project_path = Path(project_path).absolute()
         metadata = get_project_metadata(project_path, cfg.python.index_url)
+        project_name, project_version = metadata.get("name"), metadata.get("version")
+
+        file_name = _predict_wheel_filename(
+            project_path, project_name, project_version, cfg.python.python
+        )
         third_party_deps = _collect_thirdparty_deps(
             metadata.get("requires_dist", set()), python_version=cfg.python.version
         )
         sbom_json = json.loads(_run_cyclonedx(cfg, third_party_deps, stderr))
-        _enrich_sbom(sbom_json, metadata, third_party_deps)
-        _write_sbom(cfg, sbom_json, metadata.get("name"))
+        _enrich_sbom(
+            sbom_json,
+            metadata,
+            third_party_deps,
+            cfg.python_sbom.repository_url,
+            file_name,
+        )
+        _write_sbom(cfg, sbom_json, project_name)
 
 
 def cleanup(cfg: ConfigTree) -> None:
@@ -114,7 +128,7 @@ def _ensure_cyclonedx_venv(cfg: ConfigTree, binary_dir: str, quiet: str | None)
         )
         rmtree(venv_cdx)
 
-    sh(cfg.python.interpreter, "-m", "venv", venv_cdx)
+    sh(cfg.python.interpreter, "-m", "venv", venv_cdx, use_subprocess_environment=False)
     sh(
         interpreter_cdx,
         "-m",
@@ -125,6 +139,7 @@ def _ensure_cyclonedx_venv(cfg: ConfigTree, binary_dir: str, quiet: str | None)
         "--index-url",
         cfg.python.index_url,
         "cyclonedx-bom==" + requested_version,
+        use_subprocess_environment=False,
     )
     with memoizer(memo_file) as memo:
         memo.add(memo_key)
@@ -143,7 +158,7 @@ def _run_cyclonedx(cfg: ConfigTree, third_party_deps: set[str], stderr: int) ->
     with TemporaryDirectory() as tmp_dir:
         venv = Path(tmp_dir) / "venv"
         interpreter = venv / binary_dir / "python" + cfg.platform.exe
-        sh(cfg.python.interpreter, "-m", "venv", venv)
+        sh(cfg.python.interpreter, "-m", "venv", venv, use_subprocess_environment=False)
         if third_party_deps:
             sh(
                 interpreter,
@@ -158,10 +173,28 @@ def _run_cyclonedx(cfg: ConfigTree, third_party_deps: set[str], stderr: int) ->
                     for constraint in cfg.python.constraints
                 ],
                 *third_party_deps,
+                use_subprocess_environment=False,
                 stderr=stderr,
             )
-        sh(interpreter, "-m", "pip", quiet, "uninstall", "-y", "pip")
-        return backtick(interpreter_cdx, "-m", "cyclonedx_py", "environment", venv, stderr=stderr)  # type: ignore[no-any-return] # noqa: E501
+        sh(
+            interpreter,
+            "-m",
+            "pip",
+            quiet,
+            "uninstall",
+            "-y",
+            "pip",
+            use_subprocess_environment=False,
+        )
+        return backtick(  # type: ignore[no-any-return]
+            interpreter_cdx,
+            "-m",
+            "cyclonedx_py",
+            "environment",
+            venv,
+            use_subprocess_environment=False,
+            stderr=stderr,
+        )
 
 
 def _write_sbom(cfg: ConfigTree, sbom_json: dict, project_name: str) -> None:
@@ -197,7 +230,52 @@ def _parse_authors(author_name: str, author_email: str) -> str:
     return ", ".join(f"{name} ({addr})" for name, addr in entries)
 
 
-def _build_primary_component(metadata: dict) -> tuple[dict, str]:
+def _repository_base_url(index_url: str) -> str:
+    """Reduce a pip index URL to the repository base URL a purl expects."""
+    parsed = urlparse(index_url)
+    segments = [segment for segment in parsed.path.split("/") if segment]
+    if segments and segments[-1] in ("simple", "+simple"):
+        segments.pop()
+    return parsed._replace(
+        netloc=parsed.netloc.rsplit("@", 1)[-1],  # drop basic-auth credentials
+        path="/".join([""] + segments),
+    ).geturl()
+
+
+def _build_purl(name: str, version: str, repository_url: str, file_name: str) -> str:
+    """Build the pypi Package URL for a project, per tn-0058.
+
+    ``repository_url`` is only added when the package isn't published to
+    public pypi.org, since type, name and version are unique there already.
+    """
+    purl = f"pkg:pypi/{canonicalize_name(name)}@{quote(version, safe=':')}"
+
+    qualifiers = {"file_name": file_name}
+    if urlparse(repository_url).hostname != "pypi.org":
+        qualifiers["repository_url"] = _repository_base_url(repository_url)
+
+    return f"{purl}?{urlencode(sorted(qualifiers.items()), safe=':')}"
+
+
+def _predict_wheel_filename(
+    project_path: str, name: str, version: str, interpreter: str
+) -> str:
+    """
+    Predict the wheel filename ``python:wheel`` will produce for
+    ``project_path``, without building it.
+
+    ``name`` and ``version`` come from :func:`get_project_metadata`.
+    ``interpreter`` must be ``project_path``'s own, since it owns the tags.
+    Cached since the prediction is identical for every caller within the same
+    process.
+    """
+    script = Path(__file__).parent / "_predict_wheel_filename.py"
+    return backtick(interpreter, script, project_path, name, version).strip()  # type: ignore[no-any-return] # noqa: E501
+
+
+def _build_primary_component(
+    metadata: dict, repository_url: str, file_name: str
+) -> tuple[dict, str]:
     """Build the CycloneDX primary component dict and its bom-ref from project metadata."""
     if not (name := metadata.get("name")):
         die("Project metadata is missing 'name'.")
@@ -206,6 +284,7 @@ def _build_primary_component(metadata: dict) -> tuple[dict, str]:
     if not (license_id := metadata.get("license")):
         die("Project metadata is missing 'license'.")
 
+    purl = _build_purl(str(name), str(version), repository_url, file_name)
     authors = _parse_authors(
         author_name=metadata.get("author", "").strip(),
         author_email=metadata.get("author_email", "").strip(),
@@ -216,6 +295,7 @@ def _build_primary_component(metadata: dict) -> tuple[dict, str]:
         "bom-ref": primary_ref,
         "licenses": [{"expression": license_id}],
         "name": name,
+        "purl": purl,
         "type": "application",
         "version": version,
     }
@@ -226,9 +306,13 @@ def _enrich_sbom(
     sbom_json: dict,
     metadata: dict,
     third_party_deps: set[str],
+    repository_url: str,
+    file_name: str,
 ) -> None:
     """Add the primary component and its dependency entry to the CycloneDX document."""
-    component, primary_ref = _build_primary_component(metadata)
+    component, primary_ref = _build_primary_component(
+        metadata, repository_url, file_name
+    )
     existing_metadata = sbom_json.get("metadata", {})
     existing_tools = existing_metadata.get("tools", {})
     existing_tool_components = (

csspin_python/python_sbom_schema.yaml

@@ -16,3 +16,8 @@ python_sbom:
             help: |
                 Version of the cyclonedx-bom package to use for generating the
                 SBOM.
+        repository_url:
+            type: str
+            help: |
+                URL of the package index used for the primary component's
+                Package URL. Defaults to 'python.index_url'.

{csspin_python-4.1.0rc2.dist-info → csspin_python-5.0.0.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: csspin-python
-Version: 4.1.0rc2
+Version: 5.0.0
 Summary: Plugin-package for csspin providing Python related plugins
 Author-email: CONTACT Software GmbH <info@contact-software.com>
 Maintainer-email: Waleri Enns <waleri.enns@contact-software.com>, Benjamin Thomas Schwertfeger <benjaminthomas.schwertfeger@contact-software.com>, Fabian Hafer <fabian.hafer@contact-software.com>

{csspin_python-4.1.0rc2.dist-info → csspin_python-5.0.0.dist-info}/RECORD

@@ -1,3 +1,4 @@
+csspin_python/_predict_wheel_filename.py,sha256=sz09QpDOPQesG-QAANjH607QSkS3PFo0qxPifG1y85o,2399
 csspin_python/behave.py,sha256=iJZeyIqB7V_NzTdLTZldNY9W_GGwCWkXe6WY69wpDqs,4997
 csspin_python/behave_schema.yaml,sha256=8qoOCK-uTmwgRRW29urgK0X_kgn0zO0X34v89bvii2w,1241
 csspin_python/debugpy.py,sha256=v0ZZopv5TNoSaFf2kiePsw9OmhBpjfOBFh0u71jTcnQ,962
@@ -6,20 +7,18 @@ csspin_python/devpi.py,sha256=o7O06Dw-xt47y-M74TShcl9MUMaW78aFmw6i6ISYwoU,2351
 csspin_python/devpi_schema.yaml,sha256=2gPATWjVcfvCTrGZX2FK6wH8hh9KS0XzZ35JvZeJGEU,487
 csspin_python/playwright.py,sha256=oFfphLqa4AB6K9vasCUFHN0kFXu63n3ocrsqVuRp4-0,5102
 csspin_python/playwright_schema.yaml,sha256=TSeR16YHa7m7bfO59F2eMV-jXcglluTJdEpUeL16saY,1178
-csspin_python/pytest.py,sha256=N9YaU_ouQab0PFPf46HLE7Vg4JeoZW4dzVD7EevqJ1U,4573
+csspin_python/pytest.py,sha256=vSLtmS-kNO0NPo_tszfEm5zGwJb6Yb5IGS-hA7CNguo,4544
 csspin_python/pytest_schema.yaml,sha256=tzXtdF6MvGC9v59EVRJFfLeMMHqPsXcFXy2zJtRECBI,1535
-csspin_python/python.py,sha256=yqH1eG6mqRJomu-F99cB74PFaUzbSoG_dhpUjYwr1xE,37725
-csspin_python/python_sbom.py,sha256=8NVZ6uVUz7rU3VhEoXJ_wHLCdv4BIV6Zjz1ZRa9nQhc,10488
-csspin_python/python_sbom_schema.yaml,sha256=VCxY9E2AG_fS00dvIYe6Fbvz1maPjpY0zyZK1Z0wJu4,538
+csspin_python/python.py,sha256=SO5RkNdpZPcux7KnuDHVTaNIVQAmU9xjwTtJG4v97NE,40725
+csspin_python/python_sbom.py,sha256=FYx9DMDSeooB4lXuIisUsMwBMEj1Hl-QVl1AlDdTmZk,13381
+csspin_python/python_sbom_schema.yaml,sha256=QysysjGJ6n1WEoLBqYHcdbojuEomUvL8QG4ZSWQW2_8,739
 csspin_python/python_schema.yaml,sha256=pgVVjByUYjxQWek7aFmjQzRwmq2ROLvHYgwGPMrT9sM,6351
 csspin_python/radon.py,sha256=uFqm6FEi5oWj-_XVaAm3s9cam0cUmr1_FwRf40K6xWs,1876
 csspin_python/radon_schema.yaml,sha256=rlRzXw5z4XbjOVznRiUxWGP4E9hx1Jm-gGw1iQiYzE0,548
 csspin_python/uv_provisioner.py,sha256=1e-_Sb39JrqNWyaUNeBX59R5tutXLJ1ZsT7urCN1U0I,6044
 csspin_python/uv_provisioner_schema.yaml,sha256=Y8ZNC2OMnhR8Us3WUXAXK9hMjqGWAKFJB2puX4X5XNQ,727
-csspin_python-4.1.0rc2.dist-info/licenses/LICENSE,sha256=4MAecetnRTQw5DlHtiikDSzKWO1xVLwzM5_DsPMYlnE,10172
-csspin_python-4.1.0rc2.dist-info/METADATA,sha256=v7TeI32ffR2KghQaNg2Yi1nXefTReG2Pr6iI3D8LKM0,5257
-csspin_python-4.1.0rc2.dist-info/WHEEL,sha256=aeYiig01lYGDzBgS8HxWXOg3uV61G9ijOsup-k9o1sk,91
-csspin_python-4.1.0rc2.dist-info/scm_file_list.json,sha256=Q47_SEZYR492yYYWq_DlPPp-64AFlvHaOz7APY0i8j0,2902
-csspin_python-4.1.0rc2.dist-info/scm_version.json,sha256=r-bmiPdloFp64jPWB2hS3VjSJvF_ljCIL5y985ukLKY,163
-csspin_python-4.1.0rc2.dist-info/top_level.txt,sha256=QSeglMEGbFu1z4L6MCQYwo01NgL0KojWvC4rzgMQ8gU,14
-csspin_python-4.1.0rc2.dist-info/RECORD,,
+csspin_python-5.0.0.dist-info/licenses/LICENSE,sha256=4MAecetnRTQw5DlHtiikDSzKWO1xVLwzM5_DsPMYlnE,10172
+csspin_python-5.0.0.dist-info/METADATA,sha256=a4GiqeHydRsKdxlj_uH-B9bAfoCfbQBSowJJrnCMaJI,5254
+csspin_python-5.0.0.dist-info/WHEEL,sha256=YVMoNqKzERt-wjUZwJ33xBGAwnFl-4cqbYkTtWa4itE,91
+csspin_python-5.0.0.dist-info/top_level.txt,sha256=QSeglMEGbFu1z4L6MCQYwo01NgL0KojWvC4rzgMQ8gU,14
+csspin_python-5.0.0.dist-info/RECORD,,

{csspin_python-4.1.0rc2.dist-info → csspin_python-5.0.0.dist-info}/WHEEL

@@ -1,5 +1,5 @@
 Wheel-Version: 1.0
-Generator: setuptools (82.0.1)
+Generator: setuptools (84.0.0)
 Root-Is-Purelib: true
 Tag: py3-none-any
 

csspin_python-4.1.0rc2.dist-info/scm_file_list.json

@@ -1,78 +0,0 @@
-{
-  "files": [
-    "spinfile.yaml",
-    "README.rst",
-    ".pre-commit-config.yaml",
-    "CONTRIBUTING.md",
-    "requirements-dev.txt",
-    "LICENSE",
-    ".gitignore",
-    ".gitlab-ci.yml",
-    ".prettierrc.yaml",
-    "pyproject.toml",
-    ".readthedocs.yaml",
-    "doc/virtual_environment.rst",
-    "doc/development.rst",
-    "doc/relnotes.rst",
-    "doc/index.rst",
-    "doc/links.rst",
-    "doc/conf.py",
-    "doc/installation.rst",
-    "doc/plugins/playwright.rst",
-    "doc/plugins/uv_provisioner.rst",
-    "doc/plugins/debugpy.rst",
-    "doc/plugins/devpi.rst",
-    "doc/plugins/python.rst",
-    "doc/plugins/python_sbom.rst",
-    "doc/plugins/pytest.rst",
-    "doc/plugins/behave.rst",
-    "doc/plugins/radon.rst",
-    "tests/conftest.py",
-    "tests/unit/test_uv_provisioner.py",
-    "tests/unit/test_python_sbom.py",
-    "tests/unit/test_python.py",
-    "tests/integration/test_provisioning.py",
-    "tests/integration/conftest.py",
-    "tests/integration/fixtures/activation_script/test_env.ps1",
-    "tests/integration/fixtures/activation_script/test_env.sh",
-    "tests/integration/fixtures/activation_script/plugins/dummy.py",
-    "tests/integration/yamls/pytest.yaml",
-    "tests/integration/yamls/uv_provisioner_use.yaml",
-    "tests/integration/yamls/pytest_with_playwright.yaml",
-    "tests/integration/yamls/python_version.yaml",
-    "tests/integration/yamls/playwright.yaml",
-    "tests/integration/yamls/devpi.yaml",
-    "tests/integration/yamls/python_use.yaml",
-    "tests/integration/yamls/behave.yaml",
-    "tests/integration/yamls/radon.yaml",
-    "tests/integration/yamls/python_activation_scripts.yaml",
-    "tests/integration/yamls/uv_provisioner.yaml",
-    "tests/acceptance/test_aws_auth.py",
-    "tests/acceptance/python_sbom/spinfile.yaml",
-    "tests/acceptance/python_sbom/test_sbom.py",
-    "tests/acceptance/python_sbom/pyproject.toml",
-    "tests/acceptance/python_constraints/test_constraints.py",
-    "tests/acceptance/python_constraints/spinfile.yaml",
-    "tests/acceptance/python_constraints/constraints.txt",
-    "tests/acceptance/yamls/python_aws_auth.yaml",
-    "src/csspin_python/debugpy_schema.yaml",
-    "src/csspin_python/devpi_schema.yaml",
-    "src/csspin_python/uv_provisioner_schema.yaml",
-    "src/csspin_python/pytest.py",
-    "src/csspin_python/playwright_schema.yaml",
-    "src/csspin_python/behave.py",
-    "src/csspin_python/pytest_schema.yaml",
-    "src/csspin_python/uv_provisioner.py",
-    "src/csspin_python/radon.py",
-    "src/csspin_python/python_sbom_schema.yaml",
-    "src/csspin_python/python_sbom.py",
-    "src/csspin_python/devpi.py",
-    "src/csspin_python/debugpy.py",
-    "src/csspin_python/playwright.py",
-    "src/csspin_python/behave_schema.yaml",
-    "src/csspin_python/python.py",
-    "src/csspin_python/python_schema.yaml",
-    "src/csspin_python/radon_schema.yaml",
-    ".gitlab/merge_request_templates/default.md"
-  ]
-}

csspin_python-4.1.0rc2.dist-info/scm_version.json

@@ -1,8 +0,0 @@
-{
-  "tag": "4.1.0rc2",
-  "distance": 0,
-  "node": "gcaf72582381496c091ef82854c9703c0c9583259",
-  "dirty": false,
-  "branch": "HEAD",
-  "node_date": "2026-06-23"
-}