gitlab-projects-settings 5.2.0__tar.gz → 5.3.0__tar.gz

gitlab_projects_settings-5.3.0/.coveragerc

@@ -0,0 +1,7 @@
+# .coveragerc to control coverage.py
+
+[paths]
+source =
+    src/
+    */src
+    *\src

{gitlab_projects_settings-5.2.0 → gitlab_projects_settings-5.3.0}/.cz.yaml

@@ -36,36 +36,36 @@ commitizen:
 
       ## Conventional Commits - Customized specification
 
-      The commit contains the following structural elements, to communicate
-      intent to the consumers of your library:
+      The commit contains the following structural elements:
 
       ### Commit type
 
-      fix: a commit of the type fix patches a bug in your codebase
-      (this correlates with PATCH in semantic versioning).
-
-      feat: a commit of the type feat introduces a new feature to the codebase
-      (this correlates with MINOR in semantic versioning).
-
-      Others: commit types other than fix: and feat: are allowed,
-      like chore:, docs:, style:, refactor:, perf:, test:, and others.
-
-      We also recommend improvement for commits that improve a current
-      implementation without adding a new feature or fixing a bug.
-
-      For temporary commits, start with 'wip' or 'WIP' to ignore commit validation.
+      - fix: Bug or issues fixes
+      - feat: New or extended feature
+      - chore: Changes to non-production code
+      - docs: Documentation only changes
+      - style: Cosmetic changes only (white-space, formatting, etc)
+      - refactor: Code changes that neither fix a bug nor add a feature
+      - perf: Code change that improve performance
+      - security: Changes resolve security related issues
+      - test: Adding missing or correcting existing tests
+      - build: Changes to the build system or dependencies (example: makefile, pip, docker)
+      - ci: Changes to CI configuration files and scripts (example: gitlab-ci)
+      - improvement: Changes that improve sources without any impact
+      - wip: Temporary commits meant for local developments and rebases
 
       ### Commit scope
 
       A scope has to be provided to a commit’s type, to provide additional contextual information,
       such as the changed file, the containing folder or a globally modified feature,
-      and is contained within parenthesis, e.g., feat(parser): add ability to parse arrays.
+      and is contained within parenthesis, e.g. feat(parser): add ability to parse arrays.
 
       ### Commit breaking changes
 
       BREAKING CHANGE: A commit with '!' before the ':' or that has the text BREAKING CHANGE:
       at the beginning of its optional body or footer section introduces a breaking API change
       (correlating with MAJOR in semantic versioning).
+
       A BREAKING CHANGE can be part of commits of any type.
 
       ### Commit syntax
@@ -122,7 +122,7 @@ commitizen:
             name: 'test: Adding missing or correcting existing tests'
             key: t
           - value: build
-            name: 'build: Changes to the build system or dependencies _(example: makefile, pip, docker)'
+            name: 'build: Changes to the build system or dependencies (example: makefile, pip, docker)'
             key: b
           - value: ci
             name: 'ci: Changes to CI configuration files and scripts (example: gitlab-ci)'

gitlab_projects_settings-5.3.0/.gitattributes

@@ -0,0 +1,2 @@
+# Shell scripts
+*.sh text eol=lf

{gitlab_projects_settings-5.2.0 → gitlab_projects_settings-5.3.0}/.gitignore

@@ -5,11 +5,19 @@ build/
 *.pyc
 __pycache__/
 
+# Coverage files
+coverage-reports/
+
 # Distribution files
 .eggs/
 *.egg-info/
 dist/
 
+# SonarQube files
+.scannerwork/
+.sonar/
+
 # Temporary files
+.*.swp
 .tmp/
 .tmp.*

gitlab_projects_settings-5.3.0/.gitlab-ci.yml

@@ -0,0 +1,566 @@
+include:
+  - component: gitlab.com/RadianDevCore/tools/pre-commit-crocodile/commits@2.0.0
+    inputs:
+      stage: prepare
+
+stages:
+  - development
+  - prepare
+  - build
+  - test
+  - quality
+  - deploy
+
+variables:
+  REGISTRY_HOST: registry.gitlab.com
+  REGISTRY_NAMESPACE: radiandevcore/tools
+  REGISTRY_PROJECT: gitlab-projects-settings
+
+.local:
+  engine: docker,auto
+  real_paths: true
+  version: 9.0
+
+# =============================================================================
+# Stage: development
+
+clean:
+  stage: development
+  image: local
+  script:
+    - sudo rm -rf ./build ./dist ./*.egg-info ./.eggs
+  rules:
+    - if: $CI_LOCAL
+
+changelog:
+  stage: development
+  image: local:silent
+  script:
+    # Prepare git-cliff binaries
+    - |
+      mkdir -p ./.tmp/
+      if ! ls ./.tmp/git-cliff-x86_64-unknown-linux-gnu.tar.gz >/dev/null 2>&1; then
+        wget -O ./.tmp/git-cliff-x86_64-unknown-linux-gnu.tar.gz -q https://github.com/orhun/git-cliff/releases/download/v2.4.0/git-cliff-2.4.0-x86_64-unknown-linux-gnu.tar.gz
+        tar -xzf ./.tmp/git-cliff-x86_64-unknown-linux-gnu.tar.gz -C ./.tmp/ --strip-components 1
+        rm -f ./.tmp/git-cliff-x86_64-unknown-linux-gnu.tar.gz
+      fi
+    # Request release tag
+    - |
+      echo -n " > Current commit : "
+      git describe --always
+      echo ''
+      if [ ! -z "${RELEASE_TAG:-}" ]; then
+        tag="${RELEASE_TAG}"
+      else
+        read -p " > Release tag : " -r tag
+      fi
+      echo ''
+    # Generate changelog
+    - |
+      git tag -f -m "${tag}" "${tag}"
+      ./.tmp/git-cliff --no-exec --config ./config/cliff.toml --output ./CHANGELOG.md
+      sed -i "s#raw/[^/]*/docs#raw/${tag}/docs#g" ./README.md
+      git add -v ./CHANGELOG.md ./README.md
+      echo ''
+      git commit -m "docs(changelog): regenerate release tag changes history" -s
+      echo ''
+    # Create release tag
+    - git tag -f -m "${tag}" "${tag}"
+  rules:
+    - if: $CI_LOCAL
+
+hooks:
+  stage: development
+  image: local:silent
+  script:
+    # Refresh configurations
+    - pre-commit-crocodile --configure
+    # Stash local changes
+    - echo ''
+    - echo ' [INFO] Use "s" to split hunks and "y" to remove changes you do not want, "n" otherwise'
+    - echo ''
+    - sleep 2
+    - git stash -p
+    # Stage changes
+    - git add -v ./.cz.yaml ./.pre-commit-config.yaml
+    # Enable hooks
+    - pre-commit-crocodile --enable
+    # Run hooks
+    - pre-commit-crocodile --run
+    # Reset changes
+    - git reset HEAD ./.cz.yaml ./.pre-commit-config.yaml
+  rules:
+    - if: $CI_LOCAL
+
+images:
+  stage: development
+  image: local:silent
+  script:
+    # Rehost standard images
+    - |
+      for base_rename in \
+          'python:3.8' \
+          'python:3.12' \
+          'python:3.12-alpine' \
+          'sonarsource/sonar-scanner-cli:latest' \
+          'tobix/pywine:3.10' \
+      ; do
+        base=$(echo "${base_rename}" | cut -d'|' -f1 | tr -d ' ')
+        rename=$(echo "${base_rename}" | cut -d'|' -f2 | tr -d ' ')
+        image="${REGISTRY_HOST}/${REGISTRY_NAMESPACE}/${REGISTRY_PROJECT}/${rename:-${base}}"
+        if [ -z "${IMAGE}" ] || echo "${image}" | grep -q "${IMAGE}"; then
+          echo ''
+          echo " [INFO] Pull: ${base}"
+          echo ''
+          docker pull "${base}" || true
+          docker tag "${base}" "${image}"
+          echo ''
+          echo " [INFO] Push: ${image}"
+          echo ''
+          docker push "${image}" || true
+          docker rmi "${base}" >/dev/null || true
+        fi
+      done
+    # Prepare project images
+    - |
+      for name_base_container in \
+          'build                 | python:3.12-alpine | build' \
+          'codestyle             | python:3.12-alpine | codestyle' \
+          'deploy                | python:3.12-alpine | deploy' \
+          'test-coverage-linux   | python:3.12        | test-coverage-linux' \
+          'test-coverage-windows | tobix/pywine:3.10  | test-coverage-windows' \
+          'test-oldest           | python:3.8         | test-linux' \
+          'test-latest           | python:3.12        | test-linux' \
+      ; do
+        name=$(echo "${name_base_container}" | cut -d'|' -f1 | tr -d ' ')
+        base=$(echo "${name_base_container}" | cut -d'|' -f2 | tr -d ' ')
+        container=$(echo "${name_base_container}" | cut -d'|' -f3 | tr -d ' ')
+        base="${REGISTRY_HOST}/${REGISTRY_NAMESPACE}/${REGISTRY_PROJECT}/${base}"
+        image="${REGISTRY_HOST}/${REGISTRY_NAMESPACE}/${REGISTRY_PROJECT}/${REGISTRY_PROJECT}:${name}"
+        if [ -z "${IMAGE}" ] || echo "${image}" | grep -q "${IMAGE}"; then
+          echo ''
+          echo " [INFO] Pull: ${image}"
+          echo ''
+          docker pull "${base}" || true
+          docker pull "${image}" || true
+          docker build \
+              --build-arg "IMAGE_BASE=${base}" \
+              --build-context 'requirements=./requirements' \
+              --cache-from "${image}" \
+              --pull \
+              --tag "${image}" \
+              "./containers/${container}/"
+          echo ''
+          echo " [INFO] Push: ${image}"
+          echo ''
+          docker push "${image}" || true
+        fi
+      done
+  rules:
+    - if: $CI_LOCAL
+
+# =============================================================================
+# Stage: prepare
+
+codestyle:
+  stage: prepare
+  image: registry.gitlab.com/radiandevcore/tools/gitlab-projects-settings/gitlab-projects-settings:codestyle
+  needs: []
+  script:
+    - yapf -i ./src/*.py ./src/*/*.py ./setup.py
+    - echo '' && git diff --name-status
+    - git diff --quiet
+  rules:
+    - if: $CI_COMMIT_REF_NAME == $CI_DEFAULT_BRANCH
+      changes:
+        - 'CHANGELOG.md'
+        - 'requirements/**/*'
+        - 'setup.py'
+        - 'src/**/*'
+    - if: $CI_COMMIT_TAG || $CI_PIPELINE_SOURCE == "trigger" || $CI_PIPELINE_SOURCE == "web" || $CI_COMMIT_REF_NAME != $CI_DEFAULT_BRANCH
+      when: on_success
+
+lint:
+  stage: prepare
+  image: registry.gitlab.com/radiandevcore/tools/gitlab-projects-settings/gitlab-projects-settings:codestyle
+  needs: []
+  script:
+    - pylint --errors-only ./src/ ./setup.py
+    - pylint --disable=missing-docstring --load-plugins=pylint.extensions.no_self_use ./src/ ./setup.py
+  rules:
+    - if: $CI_COMMIT_REF_NAME == $CI_DEFAULT_BRANCH
+      changes:
+        - 'CHANGELOG.md'
+        - 'requirements/**/*'
+        - 'setup.py'
+        - 'src/**/*'
+    - if: $CI_COMMIT_TAG || $CI_PIPELINE_SOURCE == "trigger" || $CI_PIPELINE_SOURCE == "web" || $CI_COMMIT_REF_NAME != $CI_DEFAULT_BRANCH
+      when: on_success
+
+typings:
+  stage: prepare
+  image: registry.gitlab.com/radiandevcore/tools/gitlab-projects-settings/gitlab-projects-settings:codestyle
+  needs: []
+  variables:
+    MYPY_CACHE_DIR: /dev/null
+    MYPY_FORCE_COLOR: 1
+    TERM: ansi
+  script:
+    - set +x
+    - |
+      if [ $(git rev-list --count HEAD) -gt 1 ]; then
+        mypy --follow-imports silent --pretty $(git diff --name-only $(git diff --exit-code >/dev/null && echo 'HEAD~1' || echo 'HEAD') ./src/ ./setup.py | grep '\.py$') 2>/dev/null || true
+      fi
+    - sleep 1
+    - mypy --follow-imports silent --pretty ./src/ ./setup.py
+  rules:
+    - if: $CI_COMMIT_REF_NAME == $CI_DEFAULT_BRANCH
+      changes:
+        - 'CHANGELOG.md'
+        - 'requirements/**/*'
+        - 'setup.py'
+        - 'src/**/*'
+    - if: $CI_COMMIT_TAG || $CI_PIPELINE_SOURCE == "trigger" || $CI_PIPELINE_SOURCE == "web" || $CI_COMMIT_REF_NAME != $CI_DEFAULT_BRANCH
+      when: on_success
+
+# =============================================================================
+# Stage: build
+
+build:
+  stage: build
+  image: registry.gitlab.com/radiandevcore/tools/gitlab-projects-settings/gitlab-projects-settings:build
+  needs:
+    - job: codestyle
+      artifacts: false
+      optional: true
+    - job: commits
+      artifacts: false
+      optional: true
+    - job: lint
+      artifacts: false
+      optional: true
+    - job: typings
+      artifacts: false
+      optional: true
+  script:
+    - rm -rf ./build ./dist ./*.egg-info ./.eggs
+    - python3 -m build
+  after_script:
+    - rm -rf ./build ./*.egg-info ./.eggs
+  rules:
+    - if: $CI_COMMIT_REF_NAME == $CI_DEFAULT_BRANCH
+      changes:
+        - 'CHANGELOG.md'
+        - 'requirements/**/*'
+        - 'src/**/*'
+    - if: $CI_COMMIT_TAG || $CI_PIPELINE_SOURCE == "trigger" || $CI_PIPELINE_SOURCE == "web" || $CI_COMMIT_REF_NAME != $CI_DEFAULT_BRANCH
+      when: on_success
+  artifacts:
+    paths:
+      - dist/
+
+install:
+  stage: build
+  image: local:quiet
+  script:
+    - pipx uninstall $(ls -1 ./dist/*.whl | cut -d'/' -f3 | cut -d'-' -f1) || true
+    - pipx install --force ./dist/*.whl
+  rules:
+    - if: $CI_LOCAL
+
+readme:
+  stage: build
+  image: local:silent
+  script:
+    - |
+      export COLUMNS=120
+      mkdir -p ./.tmp/
+      PROJECT_PACKAGE=$(grep '^PROJECT_PACKAGE =' ./setup.py | cut -d"'" -f2)
+      {
+        echo ''
+        echo '```yaml'
+        alignments='[ ]\{2,\}'
+        argument='[[:alnum:]][[:alnum:]_-]\{0,\}'
+        letter='[[:alnum:]_]\{1\}'
+        parameter='[-]\{1,2\}[[:alnum:]][[:alnum:]_-]\{0,\}'
+        separator='--'
+        word='[[:alnum:]_-]\{1,\}'
+        help="[(]\{0,1\}${word}"
+        "${PROJECT_PACKAGE}" --help \
+          | sed '1d; $d' \
+          | sed "s/^\(  ${parameter} \[${word}\]${alignments}\)/\1# /g" \
+          | sed "s/^\(  ${parameter}\( ${word}\)\{1,\}${alignments}\)/\1# /g" \
+          | sed "s/^\(  ${parameter}\( ${word}\)\{1,\}, ${parameter}\( ${word}\)\{1,\}${alignments}\)/\1# /g" \
+          | sed "s/^\(  ${parameter}${alignments}\)/\1# /g" \
+          | sed "s/^\(  ${parameter}, ${parameter}${alignments}\)/\1# /g" \
+          | sed "s/^\(  ${separator}${alignments}\)/\1# /g" \
+          | sed "s/^\(  ${argument}${alignments}\)/\1# /g" \
+          | sed "s/^\(  ${alignments}\)\(${help}\)/\1# \2/g"
+        echo '```'
+        echo ''
+      } >./.tmp/README.help.tmp
+    - |
+      lead='^<!-- readme-help-start -->$'
+      tail='^<!-- readme-help-stop -->$'
+      sed -i "/${lead}/,/${tail}/{ /${lead}/{ p; r ./.tmp/README.help.tmp
+        }; /${tail}/p; d }"  ./README.md | head -n 100
+    - rm -f ./.tmp/README.help.tmp
+    - |
+      git -c color.diff=always --no-pager diff ./README.md | grep --color=never '.' && echo ''
+      echo  ' > README: Updated successfully'
+      git diff --quiet ./README.md
+  rules:
+    - if: $CI_LOCAL
+
+# =============================================================================
+# Stage: test (templates)
+
+.unit-tests-rules:
+  rules:
+    - if: $CI_COMMIT_REF_NAME == $CI_DEFAULT_BRANCH
+      changes:
+        - 'CHANGELOG.md'
+        - 'requirements/**/*'
+        - 'src/**/*'
+    - if: $CI_COMMIT_TAG || $CI_PIPELINE_SOURCE == "trigger" || $CI_PIPELINE_SOURCE == "web" || $CI_COMMIT_REF_NAME != $CI_DEFAULT_BRANCH
+      when: on_success
+
+.unit-tests-template:
+  stage: test
+  timeout: 10m
+  variables:
+    DEBUG_UPDATES_DISABLE: 'true'
+    FORCE_COLOR: 1
+    PYTHONUNBUFFERED: 1
+    TEMP: .tmp
+    TERM: ansi
+  before_script:
+    - mkdir -p ./.tmp/
+    - |
+      if type pipx >/dev/null 2>&1; then
+        pipx uninstall $(ls -1 ./dist/*.whl | cut -d'/' -f3 | cut -d'-' -f1) || true
+        pipx install --force ./dist/*.whl
+      else
+        pip3 install ./dist/*.whl
+        pip3 install --force-reinstall --no-deps --upgrade ./dist/*.whl
+        pip3 show gitlab-projects-settings
+      fi
+  script:
+    # Prepare tests
+    - export SUITE=$(echo "${SUITE}" | sed 's/,/\\|/g')
+    - if [ ! -z "${SUITE}" ]; then ls -1d ./tests/* | grep -q "\/\(${SUITE}\)" || (set +x; echo ''; echo -e '\033[1;31m[ERROR] The requested SUITE filter does not match any suite\033[0m'; echo ''; exit 1); fi
+    # Run tests
+    - for path in $(ls -1d ./tests/* | grep "\/\(${SUITE}\)"); do (cd "${path}/" && time sh ./test.sh 2>&1); done
+    # Finish tests
+    - |
+      (
+        set +x
+        echo ''
+        echo ' [INFO] Unit tests finished successfully'
+        echo ''
+      )
+
+.coverage-template:
+  extends:
+    - .unit-tests-template
+    - .unit-tests-rules
+  variables:
+    COVERAGE_COMMON: ${CI_PROJECT_DIR}/coverage-reports/coverage-common.xml
+    COVERAGE_FOLDER: ${CI_PROJECT_DIR}/coverage-reports
+    COVERAGE_RCFILE: ${CI_PROJECT_DIR}/.coveragerc
+    PYTHONDONTWRITEBYTECODE: 1
+    PYTHONPATH: ${CI_PROJECT_DIR}
+  before_script:
+    - mkdir -p "${COVERAGE_FOLDER}/"
+    - chmod 777 "${COVERAGE_FOLDER}"
+    - |
+      if [ -z "${SUITE}" ]; then
+        coverage erase
+      fi
+    - coverage run --append --module --source=src src --version >/dev/null
+    - chmod 666 "${COVERAGE_FILE}"
+    - echo 'coverage run --append --module --source=src src "${@}"' | tee /usr/local/bin/gitlab-projects-settings >/dev/null
+    - echo 'coverage run --append --source=src "${@}"' | tee /usr/local/bin/python3-coverage >/dev/null
+    - chmod a+x /usr/local/bin/gitlab-projects-settings /usr/local/bin/python3-coverage
+  after_script:
+    - coverage xml -o "${COVERAGE_XML}"
+    - coverage report --show-missing --skip-covered
+    - sed -i 's#\(<source>\).*\(</source>\)#\1.\2#g' "${COVERAGE_XML}"
+    - |
+      set +x
+      if [ ! -z "${CI_LOCAL}" ]; then
+        common=$(mktemp -d)
+        cp "${COVERAGE_FOLDER}/.coverage-"* "${common}/"
+        COVERAGE_FILE="${common}/.coverage" coverage combine "${common}/.coverage-"*
+        COVERAGE_FILE="${common}/.coverage" coverage report --ignore-errors --show-missing --skip-covered
+        COVERAGE_FILE="${common}/.coverage" coverage xml -o "${COVERAGE_COMMON}"
+        sed -i 's#\(<source>\).*\(</source>\)#\1.\2#g' "${COVERAGE_COMMON}"
+        rm -rf "${common}"
+      fi
+  rules:
+    - if: $CI_COMMIT_REF_NAME == $CI_DEFAULT_BRANCH
+      changes:
+        - 'CHANGELOG.md'
+        - 'requirements/**/*'
+        - 'src/**/*'
+        - 'tests/**/*'
+    - if: $CI_COMMIT_TAG || $CI_PIPELINE_SOURCE == "trigger" || $CI_PIPELINE_SOURCE == "web" || $CI_COMMIT_REF_NAME != $CI_DEFAULT_BRANCH
+      when: on_success
+  artifacts:
+    paths:
+      - coverage-reports/
+
+# =============================================================================
+# Stage: test (coverage)
+
+coverage:linux:
+  extends:
+    - .coverage-template
+  image: registry.gitlab.com/radiandevcore/tools/gitlab-projects-settings/gitlab-projects-settings:test-coverage-linux
+  needs: []
+  variables:
+    COVERAGE_FILE: ${CI_PROJECT_DIR}/coverage-reports/.coverage-linux
+    COVERAGE_XML: ${CI_PROJECT_DIR}/coverage-reports/coverage-linux.xml
+  before_script:
+    - !reference [.coverage-template, before_script]
+
+coverage:windows:
+  extends:
+    - .coverage-template
+  image: registry.gitlab.com/radiandevcore/tools/gitlab-projects-settings/gitlab-projects-settings:test-coverage-windows
+  needs: []
+  variables:
+    COVERAGE_FILE: ${CI_PROJECT_DIR}/coverage-reports/.coverage-windows
+    COVERAGE_XML: ${CI_PROJECT_DIR}/coverage-reports/coverage-windows.xml
+  before_script:
+    - !reference [.coverage-template, before_script]
+  script:
+    - cd ./tests/windows/ && sh ./test.sh 2>&1
+
+# =============================================================================
+# Stage: test (Python)
+
+py3.8:
+  extends:
+    - .unit-tests-template
+    - .unit-tests-rules
+  image: registry.gitlab.com/radiandevcore/tools/gitlab-projects-settings/gitlab-projects-settings:test-oldest
+  before_script:
+    - !reference [.unit-tests-template, before_script]
+
+py3.12:
+  extends:
+    - .unit-tests-template
+    - .unit-tests-rules
+  image: registry.gitlab.com/radiandevcore/tools/gitlab-projects-settings/gitlab-projects-settings:test-latest
+  before_script:
+    - !reference [.unit-tests-template, before_script]
+
+# =============================================================================
+# Stage: quality
+
+sonarcloud:
+  stage: quality
+  image:
+    name: registry.gitlab.com/radiandevcore/tools/gitlab-projects-settings/sonarsource/sonar-scanner-cli:latest
+    entrypoint: ['']
+  needs:
+    - job: coverage:linux
+    - job: coverage:windows
+  variables:
+    GIT_DEPTH: 0
+    SONAR_USER_HOME: ${CI_PROJECT_DIR}/.sonar
+  cache:
+    key: '${CI_JOB_NAME}'
+    paths:
+      - .sonar/cache
+  before_script:
+    # Configure Git securities
+    - git config --global --add safe.directory "${CI_PROJECT_DIR}"
+  script:
+    # Scan with SonarCloud
+    - sonar-scanner -Dsonar.projectVersion=$(git describe --always) -Dsonar.branch.name=${CI_COMMIT_REF_NAME}
+  rules:
+    - if: $CI_COMMIT_REF_NAME == $CI_DEFAULT_BRANCH
+      changes:
+        - 'CHANGELOG.md'
+        - 'requirements/**/*'
+        - 'src/**/*'
+        - 'tests/**/*'
+      when: always
+    - if: $CI_COMMIT_REF_NAME == "main"
+      when: always
+    - when: never
+  allow_failure: true
+
+# =============================================================================
+# Stage: deploy
+
+deploy:release:
+  stage: deploy
+  image: registry.gitlab.com/radiandevcore/tools/gitlab-projects-settings/gitlab-projects-settings:deploy
+  needs:
+    - job: build
+    - job: coverage:linux
+      artifacts: false
+    - job: coverage:windows
+      artifacts: false
+    - job: py3.8
+      artifacts: false
+    - job: py3.12
+      artifacts: false
+  variables:
+    TWINE_PASSWORD: ${TWINE_PASSWORD}
+  before_script:
+    # Validate protected tag
+    - if [ ! "${CI_COMMIT_REF_PROTECTED}" = 'true' ]; then echo '[ERROR] Please protect this tag...'; exit 1; fi
+  script:
+    # Extract tag changelog
+    - tag=${CI_COMMIT_REF_NAME:-$(git describe --always --abbrev=0)}
+    - |
+      description=$(
+        sed -n "
+          /^## \[${tag}\]/,/^## \[/{
+            n; :a; n; h;
+            /^$/{
+              n; H;
+              /^$/{
+                n; H;
+                /^<a name=/{ q; };
+              };
+              g;
+            };
+            p; ba;
+          }" ./CHANGELOG.md \
+        | sed -z 's/"/\\"/g'
+      )
+    # Create tag release
+    - |
+      description="${description}"$'\n\n''### Download'$'\n'
+      gitlab-release --description "${description}" --link-prefix '* ' ./dist/*
+    # Deploy package release
+    - twine upload -u '__token__' -p "${TWINE_PASSWORD}" ./dist/*
+  rules:
+    - if: $CI_COMMIT_TAG
+
+deploy:trial:
+  stage: deploy
+  image: registry.gitlab.com/radiandevcore/tools/gitlab-projects-settings/gitlab-projects-settings:deploy
+  needs:
+    - job: build
+    - job: coverage:linux
+      artifacts: false
+    - job: coverage:windows
+      artifacts: false
+    - job: py3.8
+      artifacts: false
+    - job: py3.12
+      artifacts: false
+  variables:
+    TWINE_PASSWORD_TEST: ${TWINE_PASSWORD_TEST}
+  script:
+    # Deploy package release
+    - twine upload -u '__token__' -p "${TWINE_PASSWORD_TEST}" --repository testpypi ./dist/*
+  rules:
+    - if: $CI_LOCAL
+  when: manual