dotenvmodel 0.5.2__tar.gz → 0.5.4__tar.gz

dotenvmodel-0.5.4/.github/workflows/publish.yml

@@ -0,0 +1,89 @@
+name: Publish to PyPI
+
+on:
+  push:
+    tags:
+      - "v*"
+  workflow_call:
+    inputs:
+      tag_name:
+        required: true
+        type: string
+  workflow_dispatch:
+    inputs:
+      tag_name:
+        description: Existing tag to build and publish (e.g. v0.5.3)
+        required: true
+        type: string
+
+permissions:
+  contents: read
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v7
+        with:
+          ref: ${{ inputs.tag_name || github.ref }}
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@v8.3.2
+        with:
+          enable-cache: true
+
+      - name: Set up Python
+        run: uv python install 3.12
+
+      - name: Verify tag matches project version
+        env:
+          TAG_NAME: ${{ inputs.tag_name || github.ref_name }}
+          DIST_NAME: dotenvmodel
+        run: |
+          set -euo pipefail
+          tag="${TAG_NAME#v}"
+          version="$(uv run python -c 'import importlib.metadata, os; print(importlib.metadata.version(os.environ["DIST_NAME"]))')"
+          echo "Tag: ${tag}"
+          echo "project version: ${version}"
+          if [ "${tag}" != "${version}" ]; then
+            echo "::error::Git tag ${tag} does not match project version ${version}"
+            exit 1
+          fi
+
+      - name: Build sdist and wheel
+        run: uv build
+
+      - name: Smoke-test install from wheel
+        env:
+          DIST_NAME: dotenvmodel
+        run: |
+          uv venv test-env
+          uv pip install --python test-env/bin/python dist/*.whl
+          cd /tmp && $GITHUB_WORKSPACE/test-env/bin/python -c "import importlib.metadata, os; print(importlib.metadata.version(os.environ['DIST_NAME']))"
+
+      - name: Upload build artifacts
+        uses: actions/upload-artifact@v7.0.1
+        with:
+          name: release-dist
+          path: dist/
+          retention-days: 7
+
+  publish:
+    needs: [build]
+    runs-on: ubuntu-latest
+    environment:
+      name: pypi
+      url: https://pypi.org/project/dotenvmodel/
+    permissions:
+      id-token: write
+    steps:
+      - name: Download build artifacts
+        uses: actions/download-artifact@v8.0.1
+        with:
+          name: release-dist
+          path: dist/
+
+      - name: Publish to PyPI
+        uses: pypa/gh-action-pypi-publish@release/v1
+        with:
+          attestations: false

{dotenvmodel-0.5.2 → dotenvmodel-0.5.4}/.github/workflows/release-please.yml

@@ -30,6 +30,5 @@ jobs:
     if: needs.release-please.outputs.release_created
     uses: ./.github/workflows/publish.yml
     with:
-      release_created: true
       tag_name: ${{ needs.release-please.outputs.tag_name }}
     secrets: inherit

dotenvmodel-0.5.4/.release-please-manifest.json

@@ -0,0 +1,3 @@
+{
+  ".": "0.5.4"
+}

{dotenvmodel-0.5.2 → dotenvmodel-0.5.4}/CHANGELOG.md

@@ -5,6 +5,20 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.5.4](https://github.com/AZX-PBC-OSS/dotenvmodel/compare/v0.5.3...v0.5.4) (2026-07-22)
+
+
+### Continuous Integration
+
+* local self-contained publish workflow with attestations off ([#46](https://github.com/AZX-PBC-OSS/dotenvmodel/issues/46)) ([1f72487](https://github.com/AZX-PBC-OSS/dotenvmodel/commit/1f724876329ef4244c78289d7524254405b4cc10))
+
+## [0.5.3](https://github.com/AZX-PBC-OSS/dotenvmodel/compare/v0.5.2...v0.5.3) (2026-07-22)
+
+
+### Continuous Integration
+
+* publish via centralized reusable workflow ([#44](https://github.com/AZX-PBC-OSS/dotenvmodel/issues/44)) ([d653161](https://github.com/AZX-PBC-OSS/dotenvmodel/commit/d653161cc426161838580bd0772ebb65b488198f))
+
 ## [0.5.2](https://github.com/AZX-PBC-OSS/dotenvmodel/compare/v0.5.1...v0.5.2) (2026-07-22)
 
 

{dotenvmodel-0.5.2 → dotenvmodel-0.5.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: dotenvmodel
-Version: 0.5.2
+Version: 0.5.4
 Summary: Type-safe environment configuration with automatic .env file loading
 Project-URL: Homepage, https://github.com/AZX-PBC-OSS/dotenvmodel
 Project-URL: Repository, https://github.com/AZX-PBC-OSS/dotenvmodel

{dotenvmodel-0.5.2 → dotenvmodel-0.5.4}/dotenvmodel/__init__.py

@@ -34,7 +34,7 @@ Public API:
       Exception hierarchy
 """
 
-__version__ = "0.5.2"  # x-release-please-version
+__version__ = "0.5.4"  # x-release-please-version
 __author__ = "AZX, PBC."
 __email__ = "oss@azx.io"
 __license__ = "MIT"

{dotenvmodel-0.5.2 → dotenvmodel-0.5.4}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "dotenvmodel"
-version = "0.5.2"
+version = "0.5.4"
 description = "Type-safe environment configuration with automatic .env file loading"
 readme = "README.md"
 requires-python = ">=3.12"

{dotenvmodel-0.5.2 → dotenvmodel-0.5.4}/uv.lock

@@ -245,7 +245,7 @@ wheels = [
 
 [[package]]
 name = "dotenvmodel"
-version = "0.5.2"
+version = "0.5.4"
 source = { editable = "." }
 dependencies = [
     { name = "python-dotenv" },

dotenvmodel-0.5.2/.github/workflows/publish.yml

@@ -1,125 +0,0 @@
-name: Publish to PyPI
-
-on:
-  push:
-    tags:
-      - "v*"
-  workflow_call:
-    inputs:
-      release_created:
-        required: true
-        type: boolean
-      tag_name:
-        required: true
-        type: string
-  workflow_dispatch:
-    inputs:
-      tag_name:
-        description: Existing tag to build and publish (e.g. v0.2.0)
-        required: true
-        type: string
-
-permissions:
-  contents: read
-
-jobs:
-  build:
-    runs-on: ubuntu-latest
-    if: ${{ github.event_name != 'workflow_call' || inputs.release_created }}
-    steps:
-      - uses: actions/checkout@v7
-        with:
-          ref: ${{ inputs.tag_name || github.ref }}
-
-      - name: Install uv
-        uses: astral-sh/setup-uv@v8.3.2
-        with:
-          enable-cache: true
-
-      - name: Set up Python
-        run: uv python install 3.12
-
-      - name: Verify tag matches pyproject.toml version
-        env:
-          TAG_NAME: ${{ inputs.tag_name || github.ref_name }}
-        run: |
-          set -euo pipefail
-          tag="${TAG_NAME#v}"
-          version="$(uv run python -c 'import importlib.metadata; print(importlib.metadata.version("dotenvmodel"))')"
-          echo "Tag: ${tag}"
-          echo "pyproject.toml version: ${version}"
-          if [ "${tag}" != "${version}" ]; then
-            echo "::error::Git tag ${tag} does not match pyproject.toml version ${version}"
-            exit 1
-          fi
-
-      - name: Build sdist and wheel
-        run: uv build
-
-      - name: Assert wheel ships required non-code artifacts
-        run: |
-          set -euo pipefail
-          listing="$(uv run python -m zipfile -l dist/*.whl)"
-          echo "$listing" | grep -q "dotenvmodel/py.typed"
-
-      - name: Test installation from wheel
-        run: |
-          uv venv test-env
-          uv pip install --python test-env/bin/python dist/*.whl
-          cd /tmp && $GITHUB_WORKSPACE/test-env/bin/python -c "import dotenvmodel; print(dotenvmodel.__version__)"
-
-      - name: Upload build artifacts
-        uses: actions/upload-artifact@v7.0.1
-        with:
-          name: release-dist
-          path: dist/
-          retention-days: 7
-
-  publish:
-    needs: [build]
-    runs-on: ubuntu-latest
-    environment:
-      name: pypi
-      url: https://pypi.org/project/dotenvmodel/
-    permissions:
-      id-token: write
-    steps:
-      - name: Download build artifacts
-        uses: actions/download-artifact@v8.0.1
-        with:
-          name: release-dist
-          path: dist/
-
-      - name: Publish to PyPI
-        uses: pypa/gh-action-pypi-publish@release/v1
-        with:
-          # Attestations are only valid when publish.yml is the top-level
-          # workflow: the Sigstore certificate's Build Config URI records the
-          # top-level workflow, and PyPI verifies it against the trusted
-          # publisher (publish.yml). Via workflow_call from release-please.yml
-          # the certificate says release-please.yml instead, which PyPI
-          # rejects with a 400 (attestations under reusable workflows are
-          # unsupported). The OIDC token validates on both paths because PyPI
-          # matches it against job_workflow_ref (publish.yml).
-          attestations: ${{ github.event_name != 'workflow_call' }}
-
-# Trusted Publishing (OIDC): no API token is stored in this repo.
-# The PyPI trusted publisher is configured for:
-#   Repository: AZX-PBC-OSS/dotenvmodel
-#   Workflow: publish.yml
-#   Environment: (Any)
-# This workflow is invoked three ways:
-#   1. Direct push of a v* tag (manual fallback path).
-#   2. workflow_call from release-please.yml after release-please creates a
-#      release (tags made with GITHUB_TOKEN don't trigger push workflows, so
-#      release-please.yml calls this workflow explicitly).
-#   3. workflow_dispatch with an existing tag name (manual republish, e.g.
-#      recovering a failed automated publish).
-# The PyPI publisher stays valid for all paths because it targets
-# publish.yml — the file containing the publish job. For reusable-workflow
-# calls, PyPI matches the OIDC token against the called workflow's filename
-# (job_workflow_ref), which is still this one. Sigstore attestations are the
-# exception: their certificate records the TOP-LEVEL workflow, so they are
-# only enabled when publish.yml runs top-level (paths 1 and 3); see the
-# attestations input on the publish step.
-# See https://docs.pypi.org/trusted-publishers/ for setup details.

dotenvmodel-0.5.2/.release-please-manifest.json

@@ -1,3 +0,0 @@
-{
-  ".": "0.5.2"
-}