ferro-orm 0.3.0__tar.gz → 0.3.2__tar.gz

{ferro_orm-0.3.0 → ferro_orm-0.3.2}/.github/PERMISSIONS.md

@@ -71,6 +71,7 @@ permissions:
   - Add labels or comments to PRs
 
 **What It Does:**
+- **Preflight** builds all release wheels at the workflow SHA (same matrix as post-release wheel builds), in parallel with the CI gate and packaging smoke jobs. If any platform fails, the Create Release job does not run.
 - Analyzes conventional commits
 - Determines next version
 - Updates version in both Python and Rust files
@@ -88,7 +89,7 @@ permissions:
 
 ### 2. Build & Publish (jobs in `release.yml`)
 
-**Trigger:** Part of `release.yml` after the release job (no reusable workflow).
+**Trigger:** Part of `release.yml` after the Create Release job (no reusable workflow). Wheel preflight runs in parallel with CI and packaging smoke, before that job.
 
 Build, test, and publish jobs are defined directly in `release.yml` so PyPI Trusted Publishing receives a token with `workflow_ref: release.yml` (reusable workflows are not supported by PyPI).
 
@@ -248,7 +249,7 @@ Permission to manage GitHub Pages deployments:
 
 ### Release Completed But Publish/Docs Did Not Run
 
-**Cause:** `release.yml` gates downstream jobs. If CI, packaging smoke, or release creation fails, publish/docs are skipped.
+**Cause:** `release.yml` gates downstream jobs. If CI, packaging smoke, preflight wheel builds, or release creation fails, publish/docs are skipped.
 
 **Solution:**
 - Open the failed `release.yml` run and inspect the first failed job.

{ferro_orm-0.3.0 → ferro_orm-0.3.2}/.github/workflows/publish.yml

@@ -60,6 +60,10 @@ jobs:
 
       - name: Build wheels
         uses: PyO3/maturin-action@v1.48.0
+        env:
+          # ring (via rustls/sqlx): manylinux2014-cross gcc does not define __ARM_ARCH for .S asm.
+          # https://github.com/briansmith/ring/issues/1728
+          CFLAGS_aarch64_unknown_linux_gnu: ${{ matrix.platform.name == 'linux-aarch64' && '-D__ARM_ARCH=8' || '' }}
         with:
           target: ${{ matrix.platform.target }}
           args: --release --out dist --find-interpreter

ferro_orm-0.3.2/.github/workflows/release.yml

@@ -0,0 +1,374 @@
+name: Release
+
+on:
+  workflow_dispatch:
+    inputs:
+      prerelease:
+        description: 'Create a pre-release'
+        required: false
+        type: boolean
+        default: false
+
+concurrency:
+  group: release-${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  # Same maturin targets as build-wheels, but against the current ref *before*
+  # semantic-release mutates the repo. Runs in parallel with CI gate and
+  # packaging smoke so the wall-clock pipeline stays shorter.
+  preflight-build-wheels:
+    name: Preflight build wheels (${{ matrix.platform.name }})
+    runs-on: ${{ matrix.platform.runner }}
+    strategy:
+      fail-fast: false
+      matrix:
+        platform:
+          - name: linux-x86_64
+            runner: ubuntu-latest
+            target: x86_64
+            manylinux: auto
+          - name: linux-aarch64
+            runner: ubuntu-latest
+            target: aarch64
+            manylinux: auto
+          - name: macos-aarch64
+            runner: macos-latest
+            target: aarch64
+            manylinux: ''
+          - name: windows-x64
+            runner: windows-latest
+            target: x64
+            manylinux: ''
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          ref: ${{ github.sha }}
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: '3.13'
+
+      - name: Build wheels (preflight)
+        uses: PyO3/maturin-action@v1.48.0
+        env:
+          # ring (via rustls/sqlx): manylinux2014-cross gcc does not define __ARM_ARCH for .S asm.
+          # https://github.com/briansmith/ring/issues/1728
+          CFLAGS_aarch64_unknown_linux_gnu: ${{ matrix.platform.name == 'linux-aarch64' && '-D__ARM_ARCH=8' || '' }}
+        with:
+          target: ${{ matrix.platform.target }}
+          args: --release --out dist --find-interpreter
+          manylinux: ${{ matrix.platform.manylinux }}
+          sccache: 'true'
+
+  ci-gate:
+    name: CI Gate
+    uses: ./.github/workflows/ci.yml
+
+  packaging-smoke:
+    name: Packaging Smoke Gate
+    uses: ./.github/workflows/packaging-smoke.yml
+
+  release:
+    name: Create Release
+    needs: [ci-gate, packaging-smoke, preflight-build-wheels]
+    runs-on: ubuntu-latest
+    outputs:
+      release_created: ${{ steps.verify_release.outputs.release_created }}
+      release_ref: ${{ steps.release_ref.outputs.release_ref }}
+    permissions:
+      contents: write
+      issues: write
+      pull-requests: write
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+          ssh-key: ${{ secrets.RELEASE_DEPLOY_KEY }}
+          persist-credentials: false
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: '3.13'
+
+      - name: Install UV
+        uses: astral-sh/setup-uv@v5
+        with:
+          enable-cache: true
+
+      - name: Set up Rust
+        uses: dtolnay/rust-toolchain@stable
+
+      - name: Cache Rust dependencies
+        uses: Swatinem/rust-cache@v2
+        with:
+          prefix-key: "v1-rust"
+
+      - name: Install dependencies
+        run: |
+          uv sync --only-group release --no-install-project --python 3.13
+
+      - name: Configure Git
+        run: |
+          git config --local user.email "github-actions[bot]@users.noreply.github.com"
+          git config --local user.name "github-actions[bot]"
+          git remote set-url origin "git@github.com:${{ github.repository }}.git"
+
+      - name: Run semantic-release
+        env:
+          # Prefer a PAT so release events can trigger downstream workflows.
+          GH_TOKEN: ${{ secrets.RELEASE_TOKEN || secrets.GITHUB_TOKEN }}
+        run: |
+          # Use the --prerelease flag if requested via manual trigger
+          PRERELEASE_FLAG=""
+          if [ "${{ github.event.inputs.prerelease }}" == "true" ]; then
+            PRERELEASE_FLAG="--prerelease"
+          fi
+
+          # This command will:
+          # 1. Bump version in pyproject.toml and Cargo.toml
+          # 2. Update CHANGELOG.md
+          # 3. Create a commit and push it
+          # 4. Create a tag and push it
+          # 5. Create a GitHub Release (publishing is handled by the wheels/publish workflow)
+          uv run semantic-release version $PRERELEASE_FLAG
+
+      - name: Verify release commit updates changelog
+        id: verify_release
+        shell: bash
+        run: |
+          LAST_SUBJECT="$(git log -1 --pretty=%s)"
+          if [[ "$LAST_SUBJECT" != chore\(release\):* ]]; then
+            echo "No release commit created in this run; skipping changelog validation."
+            echo "release_created=false" >> "$GITHUB_OUTPUT"
+            echo "changelog_validated=skipped" >> "$GITHUB_OUTPUT"
+            echo "release_subject=$LAST_SUBJECT" >> "$GITHUB_OUTPUT"
+            exit 0
+          fi
+
+          echo "release_created=true" >> "$GITHUB_OUTPUT"
+          echo "release_subject=$LAST_SUBJECT" >> "$GITHUB_OUTPUT"
+
+          CHANGED_FILES="$(git show --name-only --pretty='' HEAD)"
+          if [[ "$CHANGED_FILES" != *"CHANGELOG.md"* ]]; then
+            echo "WARNING: release commit does not include CHANGELOG.md update."
+            echo "Changed files:"
+            echo "$CHANGED_FILES"
+            echo "changelog_validated=missing" >> "$GITHUB_OUTPUT"
+            exit 0
+          fi
+
+          echo "changelog_validated=passed" >> "$GITHUB_OUTPUT"
+          echo "Validated: release commit includes CHANGELOG.md."
+
+      - name: Capture released ref
+        id: release_ref
+        shell: bash
+        run: |
+          if [[ "${{ steps.verify_release.outputs.release_created }}" != "true" ]]; then
+            echo "release_ref=" >> "$GITHUB_OUTPUT"
+            exit 0
+          fi
+
+          RELEASE_TAG="$(git tag --points-at HEAD | head -n1)"
+          if [[ -z "$RELEASE_TAG" ]]; then
+            echo "ERROR: expected release tag on HEAD but none was found."
+            exit 1
+          fi
+
+          echo "release_ref=$RELEASE_TAG" >> "$GITHUB_OUTPUT"
+          echo "Using release ref: $RELEASE_TAG"
+
+      - name: Release summary
+        if: always()
+        shell: bash
+        run: |
+          {
+            echo "## Release workflow summary"
+            echo ""
+            echo "- Trigger: \`${{ github.event_name }}\`"
+            echo "- Ref: \`${{ github.ref_name }}\`"
+            echo "- Release commit created: \`${{ steps.verify_release.outputs.release_created || 'unknown' }}\`"
+            echo "- Changelog validation: \`${{ steps.verify_release.outputs.changelog_validated || 'unknown' }}\`"
+            echo "- Release ref: \`${{ steps.release_ref.outputs.release_ref || 'n/a' }}\`"
+            echo "- Last commit subject: \`${{ steps.verify_release.outputs.release_subject || 'n/a' }}\`"
+          } >> "$GITHUB_STEP_SUMMARY"
+
+  # Build and publish jobs are inlined here (not in a reusable workflow) so that
+  # PyPI Trusted Publishing sees workflow_ref = release.yml. Reusable workflows
+  # are not supported by PyPI Trusted Publishing.
+  build-wheels:
+    name: Build wheels (${{ matrix.platform.name }})
+    needs: [release]
+    if: needs.release.outputs.release_created == 'true'
+    runs-on: ${{ matrix.platform.runner }}
+    strategy:
+      fail-fast: false
+      matrix:
+        platform:
+          - name: linux-x86_64
+            runner: ubuntu-latest
+            target: x86_64
+            manylinux: auto
+          - name: linux-aarch64
+            runner: ubuntu-latest
+            target: aarch64
+            manylinux: auto
+          - name: macos-aarch64
+            runner: macos-latest
+            target: aarch64
+            manylinux: ''
+          - name: windows-x64
+            runner: windows-latest
+            target: x64
+            manylinux: ''
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          ref: ${{ needs.release.outputs.release_ref }}
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: '3.13'
+
+      - name: Build wheels
+        uses: PyO3/maturin-action@v1.48.0
+        env:
+          # ring (via rustls/sqlx): manylinux2014-cross gcc does not define __ARM_ARCH for .S asm.
+          # https://github.com/briansmith/ring/issues/1728
+          CFLAGS_aarch64_unknown_linux_gnu: ${{ matrix.platform.name == 'linux-aarch64' && '-D__ARM_ARCH=8' || '' }}
+        with:
+          target: ${{ matrix.platform.target }}
+          args: --release --out dist --find-interpreter
+          manylinux: ${{ matrix.platform.manylinux }}
+          sccache: 'true'
+
+      - name: Upload wheels
+        uses: actions/upload-artifact@v4
+        with:
+          name: wheels-${{ matrix.platform.name }}
+          path: dist/*.whl
+
+  build-sdist:
+    name: Build sdist
+    needs: [release]
+    if: needs.release.outputs.release_created == 'true'
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          ref: ${{ needs.release.outputs.release_ref }}
+
+      - name: Build sdist
+        uses: PyO3/maturin-action@v1.48.0
+        with:
+          command: sdist
+          args: --out dist
+
+      - name: Upload sdist
+        uses: actions/upload-artifact@v4
+        with:
+          name: sdist
+          path: dist/*.tar.gz
+
+  test-wheels:
+    name: Test wheels (${{ matrix.os }})
+    needs: [release, build-wheels]
+    if: needs.release.outputs.release_created == 'true'
+    runs-on: ${{ matrix.os }}
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [ubuntu-latest, windows-latest, macos-latest]
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          ref: ${{ needs.release.outputs.release_ref }}
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: '3.13'
+
+      - name: Download wheels
+        uses: actions/download-artifact@v4
+        with:
+          path: dist
+          pattern: wheels-*
+          merge-multiple: true
+
+      - name: Install wheel
+        shell: bash
+        run: |
+          python -m pip install --upgrade pip
+          python -m pip install --find-links dist ferro-orm
+
+      - name: Test import
+        shell: bash
+        run: |
+          python -c "import ferro; print('Ferro imported successfully')"
+
+      - name: Run basic smoke test
+        shell: bash
+        run: |
+          python -c "
+          import asyncio
+          from ferro import Model, FerroField, connect
+          from typing import Annotated
+
+          class TestModel(Model):
+              id: Annotated[int, FerroField(primary_key=True)]
+              name: str
+
+          async def test():
+              await connect('sqlite::memory:')
+              print('Connection test passed')
+
+          asyncio.run(test())
+          "
+
+  publish-pypi:
+    name: Publish to PyPI
+    needs: [release, build-wheels, build-sdist, test-wheels]
+    if: needs.release.outputs.release_created == 'true'
+    runs-on: ubuntu-latest
+    environment:
+      name: pypi
+      url: https://pypi.org/p/ferro-orm
+    permissions:
+      id-token: write
+    steps:
+      - name: Download all artifacts
+        uses: actions/download-artifact@v4
+        with:
+          path: dist
+          merge-multiple: true
+
+      - name: Publish to PyPI
+        uses: pypa/gh-action-pypi-publish@release/v1
+        with:
+          skip-existing: true
+          verbose: true
+
+  deploy-docs:
+    name: Deploy Documentation
+    needs: [release, publish-pypi]
+    if: needs.release.outputs.release_created == 'true'
+    uses: ./.github/workflows/publish-docs.yml
+    permissions:
+      contents: read
+      pages: write
+      id-token: write
+    with:
+      ref: ${{ needs.release.outputs.release_ref }}

{ferro_orm-0.3.0 → ferro_orm-0.3.2}/.gitignore

@@ -243,5 +243,4 @@ playground.ipynb
 IMPLEMENTATION.md
 Cargo.lock
 demo.db
-docs/superpowers/plans/2026-04-22-shadow-fk-types.md
-docs/superpowers/specs/2026-04-22-shadow-fk-types-design.md
+docs/superpowers

{ferro_orm-0.3.0 → ferro_orm-0.3.2}/CHANGELOG.md

@@ -1,7 +1,75 @@
 # CHANGELOG
 
 
-## v0.3.0 (2026-04-22)
+## v0.3.2 (2026-04-24)
+
+### Bug Fixes
+
+- Move alembic reqs to optional dependencies
+  ([`87f0e81`](https://github.com/syn54x/ferro-orm/commit/87f0e8157640ac9984da20e0c4c7290dbfcf4bfd))
+
+### Build System
+
+- **sqlx**: Enable rustls TLS for PostgreSQL connections
+  ([`807fa81`](https://github.com/syn54x/ferro-orm/commit/807fa8196a3742a5a50380fe6dbf727045798cc3))
+
+### Chores
+
+- Sync uv.lock with project version 0.3.1
+  ([`c3c9f91`](https://github.com/syn54x/ferro-orm/commit/c3c9f91907a3ece8ce7bc70f08979f1dd269a87c))
+
+### Continuous Integration
+
+- Build preflight wheels earlier to fail faster
+  ([`475c93c`](https://github.com/syn54x/ferro-orm/commit/475c93caa1d51fb07d7eda875205086761d64e8f))
+
+- Fix linux-aarch64 wheel builds for ring/rustls asm
+  ([`5eadddc`](https://github.com/syn54x/ferro-orm/commit/5eadddc922b51448ad4da3841a84fd4931b19814))
+
+- Gate release on preflight wheel builds for all platforms
+  ([`6ec48a2`](https://github.com/syn54x/ferro-orm/commit/6ec48a275b8dc9868612a3f374595ce63fe151ca))
+
+- Restore legacy release workflow
+  ([`d3ee87c`](https://github.com/syn54x/ferro-orm/commit/d3ee87c68995a1163480eb9be8a3111032e94842))
+
+### Documentation
+
+- Add Supabase PostgreSQL connection and TLS guidance
+  ([`b1d61ad`](https://github.com/syn54x/ferro-orm/commit/b1d61ad4395a17c7c2270c1d4776500c436c22d1))
+
+
+## v0.3.1 (2026-04-23)
+
+### Bug Fixes
+
+- Alembic autogenerate named SQLAlchemy enums for PostgreSQL
+  ([`25a00e8`](https://github.com/syn54x/ferro-orm/commit/25a00e84502ae1f8ba502718934d93eedfa4ce09))
+
+- **migrations**: Align nullable inference with field types
+  ([`885f0fe`](https://github.com/syn54x/ferro-orm/commit/885f0fe155dfa643e29b9425ff1ede62f3f0b269))
+
+- **migrations**: Propagate ForeignKey(unique=True) to Alembic metadata
+  ([#22](https://github.com/syn54x/ferro-orm/pull/22),
+  [`9329e8f`](https://github.com/syn54x/ferro-orm/commit/9329e8fba2f0efd201bea4545393654c7d1dd34e))
+
+### Continuous Integration
+
+- Fix release
+  ([`e2822f6`](https://github.com/syn54x/ferro-orm/commit/e2822f6c9bacc6fc955e56b2ca8e120cc22b0b72))
+
+- Fix release
+  ([`e5c1adc`](https://github.com/syn54x/ferro-orm/commit/e5c1adcc10eb44845ef95d78226840ecdbfd0ebd))
+
+- Fix release
+  ([`688d01b`](https://github.com/syn54x/ferro-orm/commit/688d01bdae0aff1f82e4a1bb60dd1b8ab35e1d01))
+
+### Documentation
+
+- Prefer Field over FerroField
+  ([`3385cfa`](https://github.com/syn54x/ferro-orm/commit/3385cfadf0951f80827dac1aa08f73430a02023f))
+
+
+## v0.3.0 (2026-04-23)
 
 ### Bug Fixes
 
@@ -18,9 +86,6 @@
 
 ### Continuous Integration
 
-- Fix release
-  ([`688d01b`](https://github.com/syn54x/ferro-orm/commit/688d01bdae0aff1f82e4a1bb60dd1b8ab35e1d01))
-
 - Fix release
   ([`249e460`](https://github.com/syn54x/ferro-orm/commit/249e46058bac87215920083a9d45557f3c58b62f))