dotenvmodel 0.5.0__tar.gz → 0.5.2__tar.gz

dotenvmodel-0.5.2/.github/workflows/publish.yml

@@ -0,0 +1,125 @@
+name: Publish to PyPI
+
+on:
+  push:
+    tags:
+      - "v*"
+  workflow_call:
+    inputs:
+      release_created:
+        required: true
+        type: boolean
+      tag_name:
+        required: true
+        type: string
+  workflow_dispatch:
+    inputs:
+      tag_name:
+        description: Existing tag to build and publish (e.g. v0.2.0)
+        required: true
+        type: string
+
+permissions:
+  contents: read
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    if: ${{ github.event_name != 'workflow_call' || inputs.release_created }}
+    steps:
+      - uses: actions/checkout@v7
+        with:
+          ref: ${{ inputs.tag_name || github.ref }}
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@v8.3.2
+        with:
+          enable-cache: true
+
+      - name: Set up Python
+        run: uv python install 3.12
+
+      - name: Verify tag matches pyproject.toml version
+        env:
+          TAG_NAME: ${{ inputs.tag_name || github.ref_name }}
+        run: |
+          set -euo pipefail
+          tag="${TAG_NAME#v}"
+          version="$(uv run python -c 'import importlib.metadata; print(importlib.metadata.version("dotenvmodel"))')"
+          echo "Tag: ${tag}"
+          echo "pyproject.toml version: ${version}"
+          if [ "${tag}" != "${version}" ]; then
+            echo "::error::Git tag ${tag} does not match pyproject.toml version ${version}"
+            exit 1
+          fi
+
+      - name: Build sdist and wheel
+        run: uv build
+
+      - name: Assert wheel ships required non-code artifacts
+        run: |
+          set -euo pipefail
+          listing="$(uv run python -m zipfile -l dist/*.whl)"
+          echo "$listing" | grep -q "dotenvmodel/py.typed"
+
+      - name: Test installation from wheel
+        run: |
+          uv venv test-env
+          uv pip install --python test-env/bin/python dist/*.whl
+          cd /tmp && $GITHUB_WORKSPACE/test-env/bin/python -c "import dotenvmodel; print(dotenvmodel.__version__)"
+
+      - name: Upload build artifacts
+        uses: actions/upload-artifact@v7.0.1
+        with:
+          name: release-dist
+          path: dist/
+          retention-days: 7
+
+  publish:
+    needs: [build]
+    runs-on: ubuntu-latest
+    environment:
+      name: pypi
+      url: https://pypi.org/project/dotenvmodel/
+    permissions:
+      id-token: write
+    steps:
+      - name: Download build artifacts
+        uses: actions/download-artifact@v8.0.1
+        with:
+          name: release-dist
+          path: dist/
+
+      - name: Publish to PyPI
+        uses: pypa/gh-action-pypi-publish@release/v1
+        with:
+          # Attestations are only valid when publish.yml is the top-level
+          # workflow: the Sigstore certificate's Build Config URI records the
+          # top-level workflow, and PyPI verifies it against the trusted
+          # publisher (publish.yml). Via workflow_call from release-please.yml
+          # the certificate says release-please.yml instead, which PyPI
+          # rejects with a 400 (attestations under reusable workflows are
+          # unsupported). The OIDC token validates on both paths because PyPI
+          # matches it against job_workflow_ref (publish.yml).
+          attestations: ${{ github.event_name != 'workflow_call' }}
+
+# Trusted Publishing (OIDC): no API token is stored in this repo.
+# The PyPI trusted publisher is configured for:
+#   Repository: AZX-PBC-OSS/dotenvmodel
+#   Workflow: publish.yml
+#   Environment: (Any)
+# This workflow is invoked three ways:
+#   1. Direct push of a v* tag (manual fallback path).
+#   2. workflow_call from release-please.yml after release-please creates a
+#      release (tags made with GITHUB_TOKEN don't trigger push workflows, so
+#      release-please.yml calls this workflow explicitly).
+#   3. workflow_dispatch with an existing tag name (manual republish, e.g.
+#      recovering a failed automated publish).
+# The PyPI publisher stays valid for all paths because it targets
+# publish.yml — the file containing the publish job. For reusable-workflow
+# calls, PyPI matches the OIDC token against the called workflow's filename
+# (job_workflow_ref), which is still this one. Sigstore attestations are the
+# exception: their certificate records the TOP-LEVEL workflow, so they are
+# only enabled when publish.yml runs top-level (paths 1 and 3); see the
+# attestations input on the publish step.
+# See https://docs.pypi.org/trusted-publishers/ for setup details.

{dotenvmodel-0.5.0 → dotenvmodel-0.5.2}/.github/workflows/release-please.yml

@@ -21,8 +21,6 @@ jobs:
       - uses: googleapis/release-please-action@v5
         id: release
         with:
-          release-type: python
-          package-name: dotenvmodel
           config-file: release-please-config.json
           manifest-file: .release-please-manifest.json
           token: ${{ secrets.GITHUB_TOKEN }}

dotenvmodel-0.5.2/.release-please-manifest.json

@@ -0,0 +1,3 @@
+{
+  ".": "0.5.2"
+}

{dotenvmodel-0.5.0 → dotenvmodel-0.5.2}/CHANGELOG.md

@@ -5,6 +5,20 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.5.2](https://github.com/AZX-PBC-OSS/dotenvmodel/compare/v0.5.1...v0.5.2) (2026-07-22)
+
+
+### Continuous Integration
+
+* standardize publish workflow on org template (pypa action, conditional attestations) ([#42](https://github.com/AZX-PBC-OSS/dotenvmodel/issues/42)) ([32960d4](https://github.com/AZX-PBC-OSS/dotenvmodel/commit/32960d404867e044b9287644319de805459e15df))
+
+## [0.5.1](https://github.com/AZX-PBC-OSS/dotenvmodel/compare/v0.5.0...v0.5.1) (2026-07-22)
+
+
+### Continuous Integration
+
+* activate release-please manifest mode; fix stale version seeds ([#40](https://github.com/AZX-PBC-OSS/dotenvmodel/issues/40)) ([91fb40a](https://github.com/AZX-PBC-OSS/dotenvmodel/commit/91fb40acb5a176b8dcb8a269c008f4ca7c5c7219))
+
 ## [0.5.0](https://github.com/AZX-PBC-OSS/dotenvmodel/compare/v0.4.0...v0.5.0) (2026-07-21)
 
 

{dotenvmodel-0.5.0 → dotenvmodel-0.5.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: dotenvmodel
-Version: 0.5.0
+Version: 0.5.2
 Summary: Type-safe environment configuration with automatic .env file loading
 Project-URL: Homepage, https://github.com/AZX-PBC-OSS/dotenvmodel
 Project-URL: Repository, https://github.com/AZX-PBC-OSS/dotenvmodel

{dotenvmodel-0.5.0 → dotenvmodel-0.5.2}/dotenvmodel/__init__.py

@@ -34,7 +34,7 @@ Public API:
       Exception hierarchy
 """
 
-__version__ = "0.5.0"
+__version__ = "0.5.2"  # x-release-please-version
 __author__ = "AZX, PBC."
 __email__ = "oss@azx.io"
 __license__ = "MIT"

{dotenvmodel-0.5.0 → dotenvmodel-0.5.2}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "dotenvmodel"
-version = "0.5.0"
+version = "0.5.2"
 description = "Type-safe environment configuration with automatic .env file loading"
 readme = "README.md"
 requires-python = ">=3.12"

{dotenvmodel-0.5.0 → dotenvmodel-0.5.2}/release-please-config.json

@@ -1,6 +1,7 @@
 {
   "release-type": "python",
   "package-name": "dotenvmodel",
+  "include-component-in-tag": false,
   "packages": {
     ".": {
       "component": "dotenvmodel",
@@ -9,8 +10,7 @@
       "extra-files": [
         {
           "type": "generic",
-          "path": "dotenvmodel/__init__.py",
-          "jsonpath": "$.__version__"
+          "path": "dotenvmodel/__init__.py"
         }
       ]
     }

{dotenvmodel-0.5.0 → dotenvmodel-0.5.2}/uv.lock

@@ -245,7 +245,7 @@ wheels = [
 
 [[package]]
 name = "dotenvmodel"
-version = "0.5.0"
+version = "0.5.2"
 source = { editable = "." }
 dependencies = [
     { name = "python-dotenv" },

dotenvmodel-0.5.0/.github/workflows/publish.yml

@@ -1,46 +0,0 @@
-name: Publish to PyPI
-
-on:
-  workflow_call:
-    inputs:
-      release_created:
-        required: true
-        type: boolean
-      tag_name:
-        required: true
-        type: string
-  release:
-    types: [published]
-  workflow_dispatch:
-
-permissions:
-  id-token: write
-  contents: read
-
-jobs:
-  publish:
-    runs-on: ubuntu-latest
-    if: inputs.release_created || github.event_name == 'release' || github.event_name == 'workflow_dispatch'
-
-    steps:
-    - uses: actions/checkout@v7
-
-    - name: Install uv
-      uses: astral-sh/setup-uv@v7
-      with:
-        version: "latest"
-
-    - name: Set up Python
-      run: uv python install
-
-    - name: Install dependencies
-      run: uv sync --all-extras --group dev
-
-    - name: Run tests
-      run: uv run pytest tests/ -v
-
-    - name: Build package
-      run: uv build
-
-    - name: Publish to PyPI
-      run: uv publish

dotenvmodel-0.5.0/.release-please-manifest.json

@@ -1,3 +0,0 @@
-{
-  ".": "0.5.0"
-}