etlplus 0.3.5__tar.gz → 0.3.15__tar.gz

etlplus-0.3.15/.github/actions/python-bootstrap/action.yml

@@ -0,0 +1,42 @@
+# action.yml
+# ETLPlus
+#
+# Copyright © 2025 Dagitali LLC. All rights reserved.
+#
+# A GitHub Actions action to set up Python and install Python package
+# dependencies.
+#
+# Notes
+# - External GitHub Actions action references are each pinned to specific SHA
+#   to limit supply-chain risk.
+
+---
+
+name: Setup Python and Install Dependencies
+
+description: >-
+  Sets up the requested Python runtime, upgrades pip, and installs the provided
+  dependency list to keep workflow jobs consistent.
+
+inputs:
+  python-version:
+    description: Python version to install via actions/setup-python
+    required: true
+  python-bootstrap:
+    description: Arguments passed to "pip install"
+    required: true
+
+runs:
+  using: composite
+  steps:
+    - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065  # Pinned v5
+      with:
+        python-version: ${{ inputs.python-version }}
+
+    - name: Upgrade pip
+      shell: bash
+      run: python -m pip install --upgrade pip
+
+    - name: Install dependencies
+      shell: bash
+      run: pip install ${{ inputs.python-bootstrap }}

etlplus-0.3.15/.github/workflows/ci.yml

@@ -0,0 +1,159 @@
+# ci.yml
+# ETLPlus
+#
+# Copyright © 2025 Dagitali LLC. All rights reserved.
+#
+# A GitHub Actions workflow configuration file for Continuous Integration (CI).
+#
+# Notes
+# - The workflow includes jobs for linting, testing, building distributions,
+#   and publishing releases to GitHub and PyPI.
+# - The workflow is hardened by removing global permissions and setting per-job
+#   scopes.
+# - To harden workflow security, global permissions are absent, and per-job
+#   permissions are set as needed.
+# - External GitHub Actions action references are each pinned to specific SHA
+#   to limit supply-chain risk.
+
+---
+
+name: CI
+
+on:
+  push:
+    branches:
+      # GitFlow branches
+      - main
+      - develop
+      - '**/feature/**'
+      - '**/bugfix/**'
+      - '**/release/**'
+      - '**/hotfix/**'
+
+      # Extended branches
+      - '**/chore/**'
+      - '**/ci/**'
+      - '**/docs/**'
+    tags: [ 'v*.*.*' ]
+  pull_request:
+    branches: [ main, develop ]
+
+permissions: {}
+
+jobs:
+  lint:
+    runs-on: ubuntu-latest
+    strategy: &python-matrix
+      matrix:
+        python-version: ['3.13', '3.14']
+    permissions: &permissions_read
+      contents: read
+    steps:
+      - &checkout_step
+        name: Checkout repository
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5  # Pinned v4
+        with:
+          fetch-depth: 0
+      - uses: ./.github/actions/python-bootstrap
+        with:
+          python-version: ${{ matrix.python-version }}
+          python-bootstrap: ".[dev]"
+      - name: Ruff check
+        run: |
+          ruff version
+          ruff check .
+          ruff format --check .
+
+  test:
+    runs-on: ubuntu-latest
+    strategy: *python-matrix
+    permissions: *permissions_read
+    steps:
+      - *checkout_step
+      - uses: ./.github/actions/python-bootstrap
+        with:
+          python-version: ${{ matrix.python-version }}
+          python-bootstrap: "-e .[dev,yaml]"
+      - name: Run tests (with coverage)
+        run: |
+          pytest -q \
+            --cov \
+            --cov-branch \
+            --cov-report=term-missing \
+            --cov-report=xml \
+            tests/
+
+      - name: Upload coverage reports to Codecov
+        if: matrix.python-version == '3.13'
+        uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de  # Pinned v5.5.2
+        with:
+          fail_ci_if_error: true
+          files: coverage.xml
+          flags: unit
+          name: etlplus
+          token: ${{ secrets.CODECOV_TOKEN }}  # Omit for public repo
+          verbose: true
+
+  build:
+    name: Build distributions
+    runs-on: ubuntu-latest
+    if: &release_tag_condition >
+      startsWith(github.ref, 'refs/tags/v') ||
+      startsWith(github.ref, 'refs/tags/rc')
+    needs: [lint, test]
+    permissions: *permissions_read
+    steps:
+      - *checkout_step
+      - uses: ./.github/actions/python-bootstrap
+        with:
+          python-version: '3.13'
+          python-bootstrap: build
+      - name: Build distributions
+        run: |
+          python -m build
+      - name: Upload distributions
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02  # Pinned v4
+        with:
+          name: dist-artifacts
+          path: dist/*
+          if-no-files-found: error
+
+  release:
+    name: Publish GitHub Release
+    runs-on: ubuntu-latest
+    if: *release_tag_condition
+    needs: build
+    permissions:
+      contents: write
+    steps:
+      - *checkout_step
+      - &download_dist_step
+        name: Download distributions
+        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093  # Pinned v4
+        with:
+          name: dist-artifacts
+          path: dist
+      - name: Publish GitHub release
+        uses: softprops/action-gh-release@a06a81a03ee405af7f2048a818ed3f03bbf83c7b  # Pinned v2
+        with:
+          files: dist/*
+          generate_release_notes: true
+
+  publish:
+    name: Publish to PyPI
+    runs-on: ubuntu-latest
+    if: *release_tag_condition
+    needs: build
+    permissions:
+      contents: read
+      id-token: write
+    environment:
+      name: pypi
+      url: https://pypi.org/project/etlplus/
+    steps:
+      - *checkout_step
+      - *download_dist_step
+      - name: Publish to PyPI
+        uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e  # Pinned v1
+        with:
+          verbose: true

{etlplus-0.3.5 → etlplus-0.3.15}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: etlplus
-Version: 0.3.5
+Version: 0.3.15
 Summary: A Swiss Army knife for simple ETL operations
 Home-page: https://github.com/Dagitali/ETLPlus
 Author: ETLPlus Team

{etlplus-0.3.5 → etlplus-0.3.15}/etlplus.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: etlplus
-Version: 0.3.5
+Version: 0.3.15
 Summary: A Swiss Army knife for simple ETL operations
 Home-page: https://github.com/Dagitali/ETLPlus
 Author: ETLPlus Team

{etlplus-0.3.5 → etlplus-0.3.15}/etlplus.egg-info/SOURCES.txt

@@ -13,6 +13,7 @@ REFERENCES.md
 pyproject.toml
 pytest.ini
 setup.py
+.github/actions/python-bootstrap/action.yml
 .github/workflows/ci.yml
 docs/pipeline-guide.md
 docs/snippets/installation_version.md

etlplus-0.3.5/.github/workflows/ci.yml

@@ -1,87 +0,0 @@
-# ci.yml
-# ETLPlus
-#
-# Copyright © 2025 Dagitali LLC. All rights reserved.
-#
-# A GitHub Actions workflow configuration file for Continuous Integration (CI).
-
----
-
-name: CI
-
-on:
-  push:
-    branches: [ main, '**/feature/**', '**/fix/**', '**/chore/**' ]
-    tags: [ 'v*.*.*' ]
-  pull_request:
-
-permissions:
-  contents: read
-  id-token: write
-
-jobs:
-  lint:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
-      - uses: actions/setup-python@v5
-        with:
-          python-version: '3.13'
-      - name: Install dev tools
-        run: |
-          python -m pip install --upgrade pip
-          pip install .[dev]
-      - name: Ruff check
-        run: |
-          ruff version
-          ruff check .
-          ruff format --check .
-
-  test:
-    runs-on: ubuntu-latest
-    strategy:
-      matrix:
-        python-version: ['3.13', '3.14']
-    steps:
-      - uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
-      - uses: actions/setup-python@v5
-        with:
-          python-version: ${{ matrix.python-version }}
-      - name: Install package with dev+yaml extras
-        run: |
-          python -m pip install --upgrade pip
-          pip install -e .[dev,yaml]
-      - name: Run tests
-        run: |
-          pytest -q
-
-  publish:
-    name: Publish to PyPI
-    runs-on: ubuntu-latest
-    if: startsWith(github.ref, 'refs/tags/v')
-    needs: [lint, test]
-    environment:
-      name: pypi
-      url: https://pypi.org/project/etlplus/
-    steps:
-      - uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
-      - uses: actions/setup-python@v5
-        with:
-          python-version: '3.13'
-      - name: Install build dependencies
-        run: |
-          python -m pip install --upgrade pip
-          pip install build
-      - name: Build distributions
-        run: |
-          python -m build
-      - name: Publish to PyPI
-        uses: pypa/gh-action-pypi-publish@release/v1
-        with:
-          verbose: true