finatic-server-python 1.0.0__tar.gz → 1.0.2__tar.gz

finatic_server_python-1.0.2/.github/dependabot.yml

@@ -0,0 +1,45 @@
+version: 2
+updates:
+  - package-ecosystem: pip
+    directory: /
+    schedule:
+      interval: weekly
+    target-branch: develop
+    open-pull-requests-limit: 5
+    reviewers:
+      - founders
+    assignees:
+      - founders
+    commit-message:
+      prefix: chore
+      prefix-development: build
+      include: scope
+    versioning-strategy: increase
+    groups:
+      runtime-dependencies:
+        dependency-type: production
+        update-types:
+          - minor
+          - patch
+      development-dependencies:
+        dependency-type: development
+        update-types:
+          - minor
+          - patch
+
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: weekly
+    target-branch: develop
+    reviewers:
+      - founders
+    assignees:
+      - founders
+    commit-message:
+      prefix: ci
+      include: scope
+    groups:
+      ci-dependencies:
+        patterns:
+          - "*"

{finatic_server_python-1.0.0 → finatic_server_python-1.0.2}/.github/workflows/release.yml

@@ -24,6 +24,7 @@ on:
 
 permissions:
   contents: write
+  pull-requests: write
   id-token: write
 
 jobs:
@@ -91,10 +92,6 @@ jobs:
           requested = os.environ["REQUESTED_VERSION"].strip()
           if requested:
               next_version = requested
-          elif current in {"1.0.0", "1.0.1"}:
-              # First v1 PyPI publish: keep 1.0.0 when Trusted Publisher
-              # is only wired for push events (not workflow_dispatch).
-              next_version = "1.0.0"
           else:
               parts = current.split(".")
               if len(parts) != 3 or not all(part.isdigit() for part in parts):
@@ -147,22 +144,49 @@ jobs:
         if: steps.mode.outputs.dry_run != 'true' && steps.mode.outputs.repository == 'pypi'
         uses: pypa/gh-action-pypi-publish@release/v1
 
-      - name: Commit version bump and tag
+      - name: Open version bump pull request
         if: steps.mode.outputs.dry_run != 'true'
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          VERSION: ${{ steps.version.outputs.version }}
+          TAG: ${{ steps.version.outputs.tag }}
         shell: bash
         run: |
+          set -euo pipefail
+          BRANCH="chore/release-v${VERSION}"
           git config user.name "github-actions[bot]"
           git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
+          git checkout -B "$BRANCH"
           git add pyproject.toml CHANGELOG.md
           if git diff --cached --quiet; then
             echo "No version/changelog changes to commit (already at release version)."
+            exit 0
+          fi
+          git commit -m "chore(release): v${VERSION}"
+          if git rev-parse "$TAG" >/dev/null 2>&1; then
+            echo "Tag ${TAG} already exists locally."
           else
-            git commit -m "chore(release): v${{ steps.version.outputs.version }}"
+            git tag "$TAG"
+          fi
+          if ! git push -u origin "HEAD:${BRANCH}" --tags; then
+            echo "::warning::Could not push release branch/tag after PyPI publish of v${VERSION}."
+            exit 0
           fi
-          if git rev-parse "${{ steps.version.outputs.tag }}" >/dev/null 2>&1; then
-            echo "Tag ${{ steps.version.outputs.tag }} already exists."
+          if gh pr create \
+            --base main \
+            --head "$BRANCH" \
+            --title "chore(release): v${VERSION}" \
+            --body "$(cat <<EOF
+          ## Summary
+          - Sync \`pyproject.toml\` / changelog after publishing \`finatic-server-python==${VERSION}\` to PyPI.
+          - Direct pushes to \`main\` are blocked by branch protection; this PR carries the version bump.
+
+          ## Test plan
+          - [ ] Confirm PyPI shows \`finatic-server-python==${VERSION}\`
+          - [ ] Merge this PR so \`main\` matches the published version
+          EOF
+          )"; then
+            echo "Opened version bump PR for v${VERSION}."
           else
-            git tag "${{ steps.version.outputs.tag }}"
+            echo "::warning::PyPI publish of v${VERSION} succeeded, but could not open the version bump PR (org may block Actions from creating PRs)."
           fi
-          git pull --rebase origin main || true
-          git push origin HEAD:main --follow-tags || echo "Warning: git push failed after publish; package may already be on PyPI."

finatic_server_python-1.0.2/.github/workflows/security.yml

@@ -0,0 +1,41 @@
+name: Security
+
+on:
+  pull_request:
+  push:
+    branches: [develop, staging, main]
+  schedule:
+    - cron: "0 6 * * 1"
+  workflow_dispatch:
+
+permissions:
+  contents: read
+  security-events: write
+  actions: read
+
+jobs:
+  actionlint:
+    uses: FinaticORG/.github/.github/workflows/reusable-actionlint.yml@main
+    with:
+      strict: true
+
+  gitleaks:
+    uses: FinaticORG/.github/.github/workflows/reusable-gitleaks.yml@main
+    with:
+      strict: true
+      scan-mode: no-git
+
+  osv:
+    uses: FinaticORG/.github/.github/workflows/reusable-osv.yml@main
+    with:
+      strict: true
+
+  licenses:
+    uses: FinaticORG/.github/.github/workflows/reusable-licenses-pip.yml@main
+    with:
+      strict: true
+
+  codeql:
+    uses: FinaticORG/.github/.github/workflows/reusable-codeql.yml@main
+    with:
+      languages: '["python"]'

{finatic_server_python-1.0.0 → finatic_server_python-1.0.2}/CHANGELOG.md

@@ -1,5 +1,9 @@
 # Changelog
 
+## 1.0.2
+
+- Release from 6e6639c3189421d195165575ba08f571817f6c6c.
+
 ## 1.0.1
 
 - Release from 9d9cd9ca5ab93037a171a1131f288806885a093e.

{finatic_server_python-1.0.0 → finatic_server_python-1.0.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: finatic-server-python
-Version: 1.0.0
+Version: 1.0.2
 Summary: Python SDK for Finatic Server API
 Project-URL: Homepage, https://github.com/FinaticORG/FinaticServerSDK-Python
 Project-URL: Documentation, https://docs.finatic.com/python

{finatic_server_python-1.0.0 → finatic_server_python-1.0.2}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "finatic-server-python"
-version = "1.0.0"
+version = "1.0.2"
 description = "Python SDK for Finatic Server API"
 authors = [{ name = "Finatic", email = "support@finatic.dev" }]
 license = { text = "PROPRIETARY" }