django-tailwind-cli 4.6.0__tar.gz → 4.6.2__tar.gz

django_tailwind_cli-4.6.2/.github/dependabot.yml

@@ -0,0 +1,19 @@
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    cooldown:
+      default-days: 7
+
+  - package-ecosystem: "pip"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    cooldown:
+      default-days: 7
+    groups:
+      python-deps:
+        patterns:
+          - "*"

{django_tailwind_cli-4.6.0 → django_tailwind_cli-4.6.2}/.github/workflows/release.yml

@@ -2,6 +2,13 @@ name: Publish Python 🐍 distribution 📦 to PyPI and TestPyPI
 
 on: push
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+
 env:
   # Change these for your project's URLs
   PYPI_URL: https://pypi.org/p/django-tailwind-cli
@@ -14,9 +21,11 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      with:
+        persist-credentials: false
     - name: Set up Python
-      uses: actions/setup-python@v6
+      uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
       with:
         python-version: "3.x"
     - name: Install pypa/build
@@ -25,20 +34,21 @@ jobs:
     - name: Build a binary wheel and a source tarball
       run: python3 -m build
     - name: Store the distribution packages
-      uses: actions/upload-artifact@v7
+      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
       with:
         name: python-package-distributions
         path: dist/
     - name: Extract changelog for tagged release
       if: startsWith(github.ref, 'refs/tags/')
+      env:
+        REF_NAME: ${{ github.ref_name }}
       run: |
-        VERSION="${{ github.ref_name }}"
-        VERSION="${VERSION#v}"
-        awk "
-          /^## ${VERSION}/ { found=1; next }
+        VERSION="${REF_NAME#v}"
+        awk -v ver="$VERSION" '
+          $0 ~ "^## " ver { found=1; next }
           found && /^## / { exit }
           found { print }
-        " CHANGELOG.md > release-notes.md
+        ' CHANGELOG.md > release-notes.md
         if [[ ! -s release-notes.md ]]; then
           echo "::error::No changelog section found for version ${VERSION}."
           echo "::error::Did you forget to rename '## Unreleased' in CHANGELOG.md before tagging?"
@@ -48,7 +58,7 @@ jobs:
         cat release-notes.md
     - name: Upload release notes
       if: startsWith(github.ref, 'refs/tags/')
-      uses: actions/upload-artifact@v7
+      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
       with:
         name: release-notes
         path: release-notes.md
@@ -67,12 +77,12 @@ jobs:
       id-token: write  # IMPORTANT: mandatory for trusted publishing
     steps:
     - name: Download all the dists
-      uses: actions/download-artifact@v8
+      uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
       with:
         name: python-package-distributions
         path: dist/
     - name: Publish distribution 📦 to PyPI
-      uses: pypa/gh-action-pypi-publish@release/v1.13
+      uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b # release/v1.14
 
   github-release:
     name: >-
@@ -88,16 +98,16 @@ jobs:
 
     steps:
     - name: Download all the dists
-      uses: actions/download-artifact@v8
+      uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
       with:
         name: python-package-distributions
         path: dist/
     - name: Download release notes
-      uses: actions/download-artifact@v8
+      uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
       with:
         name: release-notes
     - name: Sign the dists with Sigstore
-      uses: sigstore/gh-action-sigstore-python@v3.3.0
+      uses: sigstore/gh-action-sigstore-python@04cffa1d795717b140764e8b640de88853c92acc # v3.3.0
       with:
         inputs: >-
           ./dist/*.tar.gz
@@ -105,21 +115,25 @@ jobs:
     - name: Create GitHub Release
       env:
         GITHUB_TOKEN: ${{ github.token }}
+        REF_NAME: ${{ github.ref_name }}
+        REPO: ${{ github.repository }}
       run: >-
         gh release create
-        '${{ github.ref_name }}'
-        --repo '${{ github.repository }}'
+        "$REF_NAME"
+        --repo "$REPO"
         --notes-file release-notes.md
     - name: Upload artifact signatures to GitHub Release
       env:
         GITHUB_TOKEN: ${{ github.token }}
+        REF_NAME: ${{ github.ref_name }}
+        REPO: ${{ github.repository }}
       # Upload to GitHub Release using the `gh` CLI.
       # `dist/` contains the built packages, and the
       # sigstore-produced signatures and certificates.
       run: >-
         gh release upload
-        '${{ github.ref_name }}' dist/**
-        --repo '${{ github.repository }}'
+        "$REF_NAME" dist/**
+        --repo "$REPO"
 
   publish-to-testpypi:
     name: Publish Python 🐍 distribution 📦 to TestPyPI
@@ -137,12 +151,12 @@ jobs:
 
     steps:
     - name: Download all the dists
-      uses: actions/download-artifact@v8
+      uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
       with:
         name: python-package-distributions
         path: dist/
     - name: Publish distribution 📦 to TestPyPI
-      uses: pypa/gh-action-pypi-publish@release/v1.13
+      uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b # release/v1.14
       with:
         repository-url: https://test.pypi.org/legacy/
         skip-existing: true

django_tailwind_cli-4.6.2/.github/workflows/test.yml

@@ -0,0 +1,53 @@
+name: Test
+
+on:
+  push:
+    branches:
+      - main
+  pull_request:
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+
+jobs:
+  build:
+    name: Test (Python ${{ matrix.python-version }})
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        python-version: ["3.10", "3.11", "3.12", "3.13", "3.14", "3.15"]
+
+    steps:
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        with:
+          persist-credentials: false
+
+      - name: Set up Python ${{ matrix.python-version }}
+        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
+        with:
+          python-version: ${{ matrix.python-version }}
+          allow-prereleases: true
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
+
+      - name: Test with tox
+        run: uvx --with tox-uv --with tox-gh-actions tox
+
+  zizmor:
+    name: Audit workflows (zizmor)
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      actions: read # zizmor-action reads workflow definitions
+      security-events: write # upload SARIF results to code scanning
+    steps:
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        with:
+          persist-credentials: false
+
+      - uses: zizmorcore/zizmor-action@b1d7e1fb5de872772f31590499237e7cce841e8e # v0.5.3

{django_tailwind_cli-4.6.0 → django_tailwind_cli-4.6.2}/CHANGELOG.md

@@ -1,5 +1,25 @@
 # Changelog
 
+## Unreleased
+
+## 4.6.2 (2026-05-14)
+
+### 🛠️ Developer Experience
+- **Python 3.15 support**: Added `py315` to the tox matrix (Django 6.0) and to the PyPI classifiers.
+
+## 4.6.1 (2026-05-10)
+
+### 🐛 Bug Fixes
+- **`tailwind watch` crash with `TAILWIND_CLI_CSS_MAP`**: `MultiWatchProcessManager` installed `signal.signal` handlers that fail with `ValueError: signal only works in main thread of the main interpreter` under Django's autoreloader (the watch loop runs in a worker thread). Cleanup now relies on `KeyboardInterrupt` propagation, matching the single-entry path. Fixes [#201](https://github.com/django-commons/django-tailwind-cli/issues/201).
+- **SIGTERM-graceful shutdown for both watch managers**: `ProcessManager` and `MultiWatchProcessManager` now install a SIGTERM handler only when running on the main thread, so `kill -TERM` cleans up child watchers in `tailwind watch --noreload` and `tailwind runserver` without re-introducing the autoreloader crash. SIGINT keeps using Python's default handler (which raises `KeyboardInterrupt`).
+- **Sidestepped a Bun DLOPEN race in multi-entry watch**: `MultiWatchProcessManager` now staggers successive watcher subprocess spawns by 300 ms. The Bun-built tailwindcss standalone binary extracts its embedded `@parcel/watcher` native module to `/$bunfs/` on first use; two parallel processes raced on that path and the loser crashed with `ERR_DLOPEN_FAILED`. The 300 ms gap is below noticeable in interactive use.
+
+### 🛠️ Developer Experience
+- **Filtered Bun native-runtime noise from watcher stderr**: `MultiWatchProcessManager` captures each `tailwindcss` subprocess' stderr and drops upstream Bun stack traces (`EIO: i/o error` on shutdown, `ERR_DLOPEN_FAILED` on the rare DLOPEN race) while forwarding Tailwind's own diagnostics verbatim. Cleanup output stays clean even when the user `kill -TERM`s the runserver.
+
+### 🔧 Technical Improvements
+- **Hardened GitHub Actions workflows**: pinned all actions to commit SHAs, scoped top-level permissions, added concurrency groups, moved `github.ref_name` / `github.repository` out of shell interpolation into `env:` vars, and added a [zizmor](https://docs.zizmor.sh/) audit job to keep workflow security regressions out of CI.
+
 ## 4.6.0 (2026-04-11)
 
 ### 💥 Breaking Changes

{django_tailwind_cli-4.6.0 → django_tailwind_cli-4.6.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: django-tailwind-cli
-Version: 4.6.0
+Version: 4.6.2
 Summary: Django and Tailwind integration based on the prebuilt Tailwind CSS CLI.
 Project-URL: Home, https://django-tailwind-cli.rtfd.io/
 Project-URL: Documentation, https://django-tailwind-cli.rtfd.io/
@@ -39,6 +39,7 @@ Classifier: Programming Language :: Python :: 3.11
 Classifier: Programming Language :: Python :: 3.12
 Classifier: Programming Language :: Python :: 3.13
 Classifier: Programming Language :: Python :: 3.14
+Classifier: Programming Language :: Python :: 3.15
 Classifier: Topic :: Software Development :: Libraries
 Classifier: Topic :: Utilities
 Requires-Python: >=3.10

{django_tailwind_cli-4.6.0 → django_tailwind_cli-4.6.2}/docs/requirements.txt

@@ -1,5 +1,5 @@
-sphinx>=8.0
-myst-parser>=4.0
+sphinx>=8.1.3
+myst-parser>=4.0.1
 sphinx-copybutton
 sphinx-autobuild
 furo

{django_tailwind_cli-4.6.0 → django_tailwind_cli-4.6.2}/justfile

@@ -35,7 +35,7 @@ VENV_DIRNAME := ".venv"
 @test: check_uv
     uv run pytest --cov --cov-report=html --cov-report=term
 
-# run test suite
+# run test suite on all supported python versions
 @test-all: check_uv
     uvx --with tox-uv tox
 

{django_tailwind_cli-4.6.0 → django_tailwind_cli-4.6.2}/pyproject.toml

@@ -14,6 +14,7 @@ classifiers = [
     "Programming Language :: Python :: 3.12",
     "Programming Language :: Python :: 3.13",
     "Programming Language :: Python :: 3.14",
+    "Programming Language :: Python :: 3.15",
     "Operating System :: OS Independent",
     "Topic :: Software Development :: Libraries",
     "Topic :: Utilities",

{django_tailwind_cli-4.6.0 → django_tailwind_cli-4.6.2}/src/django_tailwind_cli/management/commands/tailwind.py

@@ -3,13 +3,15 @@
 import importlib.util
 import functools
 import os
+import re
 import signal
 import subprocess
 import sys
+import threading
 import time
 from pathlib import Path
 from types import FrameType
-from typing import Any
+from typing import IO, Any
 from collections.abc import Callable
 
 from django_tailwind_cli.utils import http
@@ -43,6 +45,51 @@ For more information about a specific command, use:
     rich_markup_mode="markdown",
 )  # type: ignore
 
+# Delay between successive multi-watch Popen calls. The Bun-built tailwindcss
+# standalone binary extracts its embedded @parcel/watcher native module to
+# /$bunfs/ on first use; two parallel spawns race on the same path and one
+# crashes with ERR_DLOPEN_FAILED. Staggering by 300 ms sidesteps the race
+# without being noticeable in interactive use.
+_WATCH_SPAWN_STAGGER_S = 0.3
+
+# Bun-built tailwindcss occasionally leaks unhandled native-module errors
+# (DLOPEN race on startup, EIO on shutdown when its watch FD is closed under
+# it). The traces are upstream noise — neither actionable nor caused by
+# user code. We drop matching lines from forwarded stderr while keeping
+# Tailwind's own diagnostics intact.
+_BUN_NOISE = re.compile(
+    r"""
+    ^EIO:\ i/o\ error          |   # EIO header
+    ^Bun\ v\d                  |   # crash footer
+    ^error:\ dlopen\(          |   # DLOPEN header
+    ^\d+\ ?\|                  |   # numbered source-context line
+    ^\s+(?:fd|syscall|errno|code):  |   # error-detail field
+    ^\s+at\ <anonymous>\ \(/\$bunfs/   |   # bunfs stack frame
+    ^\s+\^\s*$                 |   # caret pointer
+    ^\s+code:\s*"(?:EIO|ERR_DLOPEN_FAILED)"   # error-code value
+    """,
+    re.VERBOSE,
+)
+
+
+def _is_bun_noise(line: str) -> bool:
+    """Return True if the line looks like a Bun native-runtime crash trace."""
+    return bool(_BUN_NOISE.match(line))
+
+
+def _drain_filtered_stderr(stream: IO[str], is_shutting_down: Callable[[], bool]) -> None:
+    """Forward subprocess stderr to the parent's stderr, dropping Bun noise.
+
+    Runs in a daemon thread until the subprocess closes the pipe. Drops every
+    line once `is_shutting_down()` returns True — post-shutdown stderr is not
+    actionable and just churns output during cleanup.
+    """
+    for line in stream:
+        if is_shutting_down() or _is_bun_noise(line):
+            continue
+        sys.stderr.write(line)
+        sys.stderr.flush()
+
 
 # DECORATORS AND COMMON SETUP ---------------------------------------------------------------------
 
@@ -1027,6 +1074,8 @@ def runserver(
 class ProcessManager:
     """Manages concurrent processes for Tailwind watch and Django runserver."""
 
+    _SHUTDOWN_MESSAGE = "\nShutdown signal received, stopping processes..."
+
     def __init__(self) -> None:
         self.processes: list[subprocess.Popen[str]] = []
         self.shutdown_requested = False
@@ -1038,9 +1087,11 @@ class ProcessManager:
             watch_cmd: Command to start Tailwind watch process.
             server_cmd: Command to start Django development server.
         """
-        # Set up signal handlers for graceful shutdown
-        signal.signal(signal.SIGINT, self._signal_handler)
-        signal.signal(signal.SIGTERM, self._signal_handler)
+        # SIGINT propagates as KeyboardInterrupt via Python's default handler.
+        # Override SIGTERM only on the main thread — signal.signal() raises
+        # ValueError in worker threads (e.g. under Django's autoreloader).
+        if threading.current_thread() is threading.main_thread():
+            signal.signal(signal.SIGTERM, self._signal_handler)
 
         try:
             # Start Tailwind watch process — inherit stdout/stderr so the
@@ -1067,22 +1118,31 @@ class ProcessManager:
             self.processes.append(server_process)
             typer.secho("Started Django development server", fg=typer.colors.GREEN)
 
-            # Monitor processes
             self._monitor_processes()
-
+        except KeyboardInterrupt:
+            self._request_shutdown()
         except Exception as e:
             typer.secho(f"Error starting processes: {e}", fg=typer.colors.RED)
-            self._cleanup_processes()
             raise
+        finally:
+            self._cleanup_processes()
 
     def _signal_handler(self, _signum: int, _frame: FrameType | None) -> None:
-        """Handle shutdown signals gracefully."""
-        typer.secho("\nShutdown signal received, stopping processes...", fg=typer.colors.YELLOW)
+        """Adapter for signal.signal — delegates to the idempotent shutdown request."""
+        self._request_shutdown()
+
+    def _request_shutdown(self) -> None:
+        """Print the shutdown message once and flip the flag. Idempotent.
+
+        Cleanup is owned by start_concurrent_processes' finally.
+        """
+        if self.shutdown_requested:
+            return
+        typer.secho(self._SHUTDOWN_MESSAGE, fg=typer.colors.YELLOW)
         self.shutdown_requested = True
-        self._cleanup_processes()
 
     def _monitor_processes(self) -> None:
-        """Monitor running processes and handle their lifecycle."""
+        """Monitor running processes. Cleanup is owned by start_concurrent_processes' finally."""
         while not self.shutdown_requested and any(p.poll() is None for p in self.processes):
             time.sleep(0.5)
 
@@ -1093,9 +1153,6 @@ class ProcessManager:
                     self.shutdown_requested = True
                     break
 
-        # Clean up any remaining processes
-        self._cleanup_processes()
-
     def _cleanup_processes(self) -> None:
         """Clean up all managed processes."""
         for process in self.processes:
@@ -1119,6 +1176,8 @@ class ProcessManager:
 class MultiWatchProcessManager:
     """Manages multiple Tailwind watch processes for multi-file mode."""
 
+    _SHUTDOWN_MESSAGE = "\nShutdown signal received, stopping watch processes..."
+
     def __init__(self) -> None:
         self.processes: list[subprocess.Popen[str]] = []
         self.shutdown_requested = False
@@ -1130,42 +1189,68 @@ class MultiWatchProcessManager:
             config: Configuration object with css_entries.
             verbose: Whether to show detailed information.
         """
-        # Set up signal handlers for graceful shutdown
-        signal.signal(signal.SIGINT, self._signal_handler)
-        signal.signal(signal.SIGTERM, self._signal_handler)
+        # SIGINT propagates as KeyboardInterrupt via Python's default handler.
+        # Override SIGTERM only on the main thread — signal.signal() raises
+        # ValueError in worker threads (e.g. under Django's autoreloader).
+        if threading.current_thread() is threading.main_thread():
+            signal.signal(signal.SIGTERM, self._signal_handler)
 
         try:
-            for entry in config.css_entries:
+            for index, entry in enumerate(config.css_entries):
+                if index > 0:
+                    time.sleep(_WATCH_SPAWN_STAGGER_S)
+
                 watch_cmd = config.get_watch_cmd(entry)
                 if verbose:
                     typer.secho(f"🚀 Starting watch for '{entry.name}'...", fg=typer.colors.CYAN)
                     typer.secho(f"   • Command: {' '.join(watch_cmd)}", fg=typer.colors.BLUE)
 
-                # Inherit stdout/stderr so output flows to the terminal and we
-                # avoid a pipe-fill deadlock — the OS pipe buffer would otherwise
-                # block the watcher after ~64 KB of rebuild status lines.
+                # Inherit stdout (high-volume rebuild progress) to avoid a pipe-fill
+                # deadlock — the OS pipe buffer would otherwise block the watcher
+                # after ~64 KB. stderr is captured so we can filter Bun's native-
+                # runtime noise (DLOPEN race, EIO on shutdown) before it hits the
+                # terminal; volume there is low enough that the drain thread keeps
+                # up easily.
                 process = subprocess.Popen(
                     watch_cmd,
                     cwd=settings.BASE_DIR,
                     text=True,
+                    stderr=subprocess.PIPE,
                 )
                 self.processes.append(process)
+                if process.stderr is not None:
+                    threading.Thread(
+                        target=_drain_filtered_stderr,
+                        args=(process.stderr, lambda: self.shutdown_requested),
+                        daemon=True,
+                    ).start()
                 typer.secho(f"Watching '{entry.name}': {entry.src_css}", fg=typer.colors.GREEN)
 
             self._monitor_processes()
+        except KeyboardInterrupt:
+            self._request_shutdown()
         except Exception as e:
             typer.secho(f"Error starting watch processes: {e}", fg=typer.colors.RED)
-            self._cleanup_processes()
             raise
+        finally:
+            self._cleanup_processes()
 
     def _signal_handler(self, _signum: int, _frame: FrameType | None) -> None:
-        """Handle shutdown signals gracefully."""
-        typer.secho("\nShutdown signal received, stopping watch processes...", fg=typer.colors.YELLOW)
+        """Adapter for signal.signal — delegates to the idempotent shutdown request."""
+        self._request_shutdown()
+
+    def _request_shutdown(self) -> None:
+        """Print the shutdown message once and flip the flag. Idempotent.
+
+        Cleanup is owned by start_watch_processes' finally.
+        """
+        if self.shutdown_requested:
+            return
+        typer.secho(self._SHUTDOWN_MESSAGE, fg=typer.colors.YELLOW)
         self.shutdown_requested = True
-        self._cleanup_processes()
 
     def _monitor_processes(self) -> None:
-        """Monitor all watch processes."""
+        """Monitor all watch processes. Cleanup is owned by start_watch_processes' finally."""
         while not self.shutdown_requested and any(p.poll() is None for p in self.processes):
             time.sleep(0.5)
 
@@ -1175,8 +1260,6 @@ class MultiWatchProcessManager:
                     self.shutdown_requested = True
                     break
 
-        self._cleanup_processes()
-
     def _cleanup_processes(self) -> None:
         """Clean up all watch processes."""
         for process in self.processes:

{django_tailwind_cli-4.6.0 → django_tailwind_cli-4.6.2}/tests/test_error_scenarios.py

@@ -7,7 +7,6 @@ file operations, and subprocess execution.
 # pyright: reportPrivateUsage=false
 
 import os
-import signal
 import subprocess
 import time
 from pathlib import Path
@@ -483,8 +482,8 @@ class TestFileSystemErrorScenarios:
 class TestConcurrencyErrorScenarios:
     """Test concurrency and race condition handling."""
 
-    def test_process_manager_signal_handling_error(self):
-        """Test ProcessManager error handling during signal processing."""
+    def test_process_manager_cleanup_swallows_terminate_error(self):
+        """ProcessManager cleanup must not propagate OSError from terminate()."""
         manager = ProcessManager()
 
         # Mock process that raises exception during terminate
@@ -494,14 +493,13 @@ class TestConcurrencyErrorScenarios:
         mock_process.wait.return_value = None
         manager.processes = [mock_process]
 
-        # Should handle terminate errors gracefully
-        manager._signal_handler(signal.SIGINT, None)
+        manager._cleanup_processes()
 
         # Should still clean up processes list
         assert manager.processes == []
 
-    def test_process_manager_wait_timeout_error(self):
-        """Test ProcessManager handling of wait timeout."""
+    def test_process_manager_cleanup_escalates_on_wait_timeout(self):
+        """ProcessManager cleanup must kill() when terminate() + wait() time out."""
         manager = ProcessManager()
 
         # Mock process that times out during wait
@@ -512,8 +510,7 @@ class TestConcurrencyErrorScenarios:
         mock_process.kill.return_value = None
         manager.processes = [mock_process]
 
-        # Should escalate to kill when terminate times out
-        manager._signal_handler(signal.SIGINT, None)
+        manager._cleanup_processes()
 
         mock_process.terminate.assert_called_once()
         mock_process.kill.assert_called_once()