fxcss 0.16.0__tar.gz → 0.16.2__tar.gz

{fxcss-0.16.0 → fxcss-0.16.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: fxcss
-Version: 0.16.0
+Version: 0.16.2
 Summary: Live-reload, inspect and screenshot-test Firefox userChrome.css themes
 Author: AdamXweb
 License: MIT
@@ -122,7 +122,7 @@ the [releases page](https://github.com/AdamXweb/fxcss/releases) has the latest.
 CI runners' Pythons are not externally managed, so plain pip is fine there:
 
 ```bash
-pip install "fxcss[images]==0.16.0"
+pip install "fxcss[images]==0.16.2"
 ```
 
 Either gives you an `fxcss` command. To hack on it, clone and install editable:
@@ -1013,7 +1013,7 @@ check out the base revision and the pull request revision, render both, compare,
 and publish the result.
 
 ```yaml
-- run: pip install "fxcss[images]==0.16.0"   # pin: your CI, your upgrades
+- run: pip install "fxcss[images]==0.16.2"   # pin: your CI, your upgrades
 - run: fxcss shot --theme base --out shots/base
 - run: fxcss shot --theme head --out shots/head
 - run: fxcss compare --base shots/base --head shots/head --out out/ --platform ${{ runner.os }}

{fxcss-0.16.0 → fxcss-0.16.2}/README.md

@@ -99,7 +99,7 @@ the [releases page](https://github.com/AdamXweb/fxcss/releases) has the latest.
 CI runners' Pythons are not externally managed, so plain pip is fine there:
 
 ```bash
-pip install "fxcss[images]==0.16.0"
+pip install "fxcss[images]==0.16.2"
 ```
 
 Either gives you an `fxcss` command. To hack on it, clone and install editable:
@@ -990,7 +990,7 @@ check out the base revision and the pull request revision, render both, compare,
 and publish the result.
 
 ```yaml
-- run: pip install "fxcss[images]==0.16.0"   # pin: your CI, your upgrades
+- run: pip install "fxcss[images]==0.16.2"   # pin: your CI, your upgrades
 - run: fxcss shot --theme base --out shots/base
 - run: fxcss shot --theme head --out shots/head
 - run: fxcss compare --base shots/base --head shots/head --out out/ --platform ${{ runner.os }}

{fxcss-0.16.0 → fxcss-0.16.2}/fxcss/__init__.py

@@ -1,3 +1,3 @@
 """fxcss — a testing toolkit for Firefox userChrome.css themes."""
 
-__version__ = "0.16.0"
+__version__ = "0.16.2"

{fxcss-0.16.0 → fxcss-0.16.2}/fxcss/core.py

@@ -584,8 +584,8 @@ SEED_BOOKMARKS = """
 const done = arguments[arguments.length - 1];
 (async () => {
   try {
-    const {PlacesUtils} = ChromeUtils.importESModule(
-      "resource://gre/modules/PlacesUtils.sys.mjs");
+    const {PlacesUtils} =
+      Services.wm.getMostRecentWindow("navigator:browser");
     for (const [title, url] of [["GitHub", "https://github.com/"],
                                 ["Mozilla", "https://www.mozilla.org/"],
                                 ["Example", "https://example.com/"]]) {
@@ -946,13 +946,19 @@ for (let i = 0; i < count; i++) {
 return win.gBrowser.tabs.length;
 """
 
+# Off the window, for the same reason APPLY_TOOLBAR takes CustomizableUI that
+# way: Firefox 154 moved this module from resource://gre/modules/ to
+# moz-src:///toolkit/components/contextualidentity/, and importing either URL
+# hard fails on the build that does not have it -- which is how it broke, in
+# the field, the day 154 shipped. browser.js declares it with
+# ChromeUtils.defineESModuleGetters(this, ...) on both, so the window property
+# is the same object either side and names no URL to go stale.
 CONTAINER_TABS = """
 const [url] = arguments;
 const win = Services.wm.getMostRecentWindow("navigator:browser");
 const sp = Services.scriptSecurityManager.getSystemPrincipal();
 Services.prefs.setBoolPref("privacy.userContext.enabled", true);
-const {ContextualIdentityService} = ChromeUtils.importESModule(
-  "resource://gre/modules/ContextualIdentityService.sys.mjs");
+const {ContextualIdentityService} = win;
 const ids = ContextualIdentityService.getPublicIdentities().slice(0, 3);
 for (const identity of ids) {
   win.gBrowser.addTab(url, {triggeringPrincipal: sp, userContextId: identity.userContextId});

{fxcss-0.16.0 → fxcss-0.16.2}/fxcss/templates/firefox-watch.yml

@@ -41,9 +41,9 @@ jobs:
         channel: [release, beta, nightly]
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
-      - uses: actions/setup-python@v5
+      - uses: actions/setup-python@v7
         with:
           python-version: '3.12'
 
@@ -63,9 +63,13 @@ jobs:
             esr)     product=firefox-esr-latest-ssl ;;
             *) echo "unknown channel"; exit 1 ;;
           esac
-          curl -sSL -o firefox.dmg \
+          # Into $RUNNER_TEMP, not the checkout: the fix step below commits
+          # from this tree, and a 150 MB dmg sitting in it was being swept
+          # into the commit, which GitHub's 100 MB limit then rejected --
+          # silently killing the watch on every channel.
+          curl -sSL -o "$RUNNER_TEMP/firefox.dmg" \
             "https://download.mozilla.org/?product=${product}&os=osx&lang=en-US"
-          hdiutil attach -nobrowse -quiet -mountpoint /Volumes/ffwatch firefox.dmg
+          hdiutil attach -nobrowse -quiet -mountpoint /Volumes/ffwatch "$RUNNER_TEMP/firefox.dmg"
           cp -R /Volumes/ffwatch/*.app "$RUNNER_TEMP/Firefox.app"
           hdiutil detach /Volumes/ffwatch -quiet
           echo "FIREFOX_BIN=$RUNNER_TEMP/Firefox.app/Contents/MacOS/firefox" >> "$GITHUB_ENV"
@@ -103,8 +107,11 @@ jobs:
           git config user.name  'github-actions[bot]'
           git config user.email '41898282+github-actions[bot]@users.noreply.github.com'
           git checkout -b "$branch"
-          git apply fxcss-fix.patch
-          git add -A ':!audit.txt' ':!fxcss-fix.patch'
+          # --index applies the patch and stages exactly the files it
+          # touches, nothing else. `git add -A` with a couple of exclusions is
+          # how a 150 MB dmg got committed; anything else a step leaves in the
+          # tree would have gone the same way.
+          git apply --index fxcss-fix.patch
           git commit -m "fix(css): update selectors renamed in Firefox ${VERSION}"
           git push origin "$branch"
           {
@@ -169,7 +176,7 @@ jobs:
               --comment "Firefox ${CHANNEL} audits clean again — closing."
           fi
 
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@v7
         if: always()
         with:
           name: audit-${{ matrix.channel }}

{fxcss-0.16.0 → fxcss-0.16.2}/fxcss/templates/pr-preview-cleanup.yml

@@ -19,7 +19,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 10
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           ref: ${{ github.event.repository.default_branch }}
 

{fxcss-0.16.0 → fxcss-0.16.2}/fxcss/templates/pr-preview-publish.yml

@@ -39,7 +39,7 @@ jobs:
 
     steps:
       - name: Check out default branch
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Resolve source run
         id: src
@@ -51,7 +51,7 @@ jobs:
           fi
 
       - name: Download preview artifacts
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v8
         with:
           run-id: ${{ steps.src.outputs.run_id }}
           github-token: ${{ secrets.GITHUB_TOKEN }}
@@ -61,7 +61,7 @@ jobs:
 
       - name: Validate artifact and resolve pull request
         id: check
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           script: |
             const fs = require('fs');
@@ -221,7 +221,7 @@ jobs:
 
       - name: Upsert pull request comment
         if: steps.check.outputs.skip == 'false'
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         env:
           PR: ${{ steps.check.outputs.pr }}
           SHA: ${{ steps.check.outputs.sha }}

{fxcss-0.16.0 → fxcss-0.16.2}/fxcss/templates/pr-preview.yml

@@ -52,20 +52,20 @@ jobs:
 
     steps:
       - name: Check out base revision
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           ref: ${{ github.event.pull_request.base.sha }}
           path: base
           persist-credentials: false
 
       - name: Check out pull request revision
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           ref: ${{ github.event.pull_request.head.sha }}
           path: head
           persist-credentials: false
 
-      - uses: actions/setup-python@v5
+      - uses: actions/setup-python@v7
         with:
           python-version: '3.12'
 
@@ -140,7 +140,7 @@ jobs:
           echo "${{ github.event.pull_request.head.sha }}" > out/head-sha.txt
 
       - name: Upload preview
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: preview-${{ matrix.label }}
           path: out/

{fxcss-0.16.0 → fxcss-0.16.2}/fxcss/templates/readme-previews.yml

@@ -47,9 +47,9 @@ jobs:
     runs-on: macos-latest
     timeout-minutes: 30
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
-      - uses: actions/setup-python@v5
+      - uses: actions/setup-python@v7
         with:
           python-version: '3.12'
 

{fxcss-0.16.0 → fxcss-0.16.2}/fxcss/templates/showcase.yml

@@ -32,9 +32,9 @@ jobs:
     runs-on: macos-latest
     timeout-minutes: 30
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
-      - uses: actions/setup-python@v5
+      - uses: actions/setup-python@v7
         with:
           python-version: '3.12'
 
@@ -63,7 +63,7 @@ jobs:
           # shellcheck disable=SC2086
           fxcss shot --out showcase --only-live $args
 
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@v7
         with:
           name: showcase
           path: showcase/live/

{fxcss-0.16.0 → fxcss-0.16.2}/fxcss.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: fxcss
-Version: 0.16.0
+Version: 0.16.2
 Summary: Live-reload, inspect and screenshot-test Firefox userChrome.css themes
 Author: AdamXweb
 License: MIT
@@ -122,7 +122,7 @@ the [releases page](https://github.com/AdamXweb/fxcss/releases) has the latest.
 CI runners' Pythons are not externally managed, so plain pip is fine there:
 
 ```bash
-pip install "fxcss[images]==0.16.0"
+pip install "fxcss[images]==0.16.2"
 ```
 
 Either gives you an `fxcss` command. To hack on it, clone and install editable:
@@ -1013,7 +1013,7 @@ check out the base revision and the pull request revision, render both, compare,
 and publish the result.
 
 ```yaml
-- run: pip install "fxcss[images]==0.16.0"   # pin: your CI, your upgrades
+- run: pip install "fxcss[images]==0.16.2"   # pin: your CI, your upgrades
 - run: fxcss shot --theme base --out shots/base
 - run: fxcss shot --theme head --out shots/head
 - run: fxcss compare --base shots/base --head shots/head --out out/ --platform ${{ runner.os }}

{fxcss-0.16.0 → fxcss-0.16.2}/tests/test_units.py

@@ -2396,3 +2396,86 @@ class ProfileChoiceTests(unittest.TestCase):
                       for name in ("m", "u", "spare")}
             self.assertEqual(states, {"m": "managed", "u": "unmanaged",
                                       "spare": "empty"})
+
+
+class ModuleUrlTests(unittest.TestCase):
+    """Chrome scripts must reach Firefox modules off the window, not by URL.
+
+    Module URLs move. `resource://gre/modules/ContextualIdentityService.sys.mjs`
+    became `moz-src:///toolkit/components/contextualidentity/…` in Firefox 154
+    and every capture broke the day it shipped, on a line that had been correct
+    for a year. `ChromeUtils.defineESModuleGetters` puts the same objects on
+    the browser window under a name that does not move, so a script naming a
+    URL is a dated assumption waiting for the next uplift.
+
+    Scanning the source rather than listing the scripts by name: a new script
+    with a fresh import is exactly what this needs to catch.
+    """
+
+    def source(self):
+        from fxcss import core
+        return Path(core.__file__).read_text(encoding="utf-8")
+
+    def test_no_script_imports_a_module_by_url(self):
+        offenders = [line.strip() for line in self.source().splitlines()
+                     if "importESModule" in line and not
+                     line.lstrip().startswith("#")]
+        self.assertEqual(offenders, [], "reach these off the window instead")
+
+    def test_the_scripts_that_needed_modules_still_name_them(self):
+        """Guard the guard: a passing scan means nothing if the uses vanished."""
+        source = self.source()
+        for name in ("ContextualIdentityService", "PlacesUtils"):
+            self.assertIn(name, source, name)
+
+
+class TemplateActionVersionTests(unittest.TestCase):
+    """The shipped templates must not fall behind fxcss's own workflows.
+
+    Dependabot watches .github/workflows/ and bumps the actions there; it
+    does not know fxcss/templates/ holds the same actions, shipped in the
+    wheel for every theme that runs `fxcss init`. That is how the templates
+    sat on checkout@v4 / setup-python@v5 -- the Node 20 set GitHub is
+    retiring -- while fxcss's CI had moved to v7 months earlier. Pinning the
+    two to each other turns the next Dependabot bump into a failing test.
+    """
+
+    PIN = re.compile(r"uses:\s*actions/([a-z-]+)@v(\d+)")
+
+    def versions(self, paths):
+        found = {}
+        for path in paths:
+            for name, major in self.PIN.findall(
+                    path.read_text(encoding="utf-8")):
+                found.setdefault(name, set()).add(int(major))
+        return found
+
+    def test_templates_match_the_workflows_fxcss_itself_runs(self):
+        root = Path(__file__).resolve().parent.parent
+        own = self.versions((root / ".github" / "workflows").glob("*.yml"))
+        shipped = self.versions((root / "fxcss" / "templates").glob("*.yml"))
+        self.assertTrue(own and shipped)
+        for name, majors in shipped.items():
+            self.assertEqual(len(majors), 1,
+                             f"{name} pinned inconsistently in templates")
+            if name in own:
+                self.assertEqual(majors, own[name],
+                                 f"templates pin actions/{name}@v{majors} but "
+                                 f"fxcss's own CI runs v{own[name]}")
+
+    def test_no_template_action_targets_node_20(self):
+        """The majors GitHub's deprecation notice names, by action.
+
+        Kept as a floor rather than derived: what counts as "old" is a fact
+        about GitHub's runners on a date, and a test should say which date.
+        Floors as of 2026-08, each read from the action's own action.yml at
+        that tag: the first major declaring `using: node24`.
+        """
+        root = Path(__file__).resolve().parent.parent
+        floors = {"checkout": 5, "setup-python": 6, "upload-artifact": 6,
+                  "download-artifact": 7, "github-script": 8}
+        shipped = self.versions((root / "fxcss" / "templates").glob("*.yml"))
+        for name, floor in floors.items():
+            for major in shipped.get(name, ()):
+                self.assertGreaterEqual(
+                    major, floor, f"actions/{name}@v{major} runs on Node 20")