imbi-plugin-github 2.21.0__tar.gz → 2.21.1__tar.gz

{imbi_plugin_github-2.21.0 → imbi_plugin_github-2.21.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: imbi-plugin-github
-Version: 2.21.0
+Version: 2.21.1
 Summary: GitHub identity plugin for Imbi (github.com / GHEC / GHES)
 Author-email: "Gavin M. Roy" <gavinr@aweber.com>
 License-Expression: BSD-3-Clause
@@ -12,7 +12,7 @@ Classifier: Programming Language :: Python :: 3
 Classifier: Programming Language :: Python :: 3.14
 Requires-Python: >=3.14
 Requires-Dist: httpx>=0.27
-Requires-Dist: imbi-common[databases]==2.21.0
+Requires-Dist: imbi-common[databases]==2.21.1
 Requires-Dist: pydantic>=2
 Requires-Dist: pyjwt[crypto]>=2.8
 Description-Content-Type: text/markdown

{imbi_plugin_github-2.21.0 → imbi_plugin_github-2.21.1}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "imbi-plugin-github"
-version = "2.21.0"
+version = "2.21.1"
 description = "GitHub identity plugin for Imbi (github.com / GHEC / GHES)"
 readme = "README.md"
 requires-python = ">=3.14"
@@ -18,7 +18,7 @@ classifiers = [
 ]
 dependencies = [
   "httpx>=0.27",
-  "imbi-common[databases]==2.21.0",
+  "imbi-common[databases]==2.21.1",
   "pydantic>=2",
   "pyjwt[crypto]>=2.8",
 ]

{imbi_plugin_github-2.21.0 → imbi_plugin_github-2.21.1}/src/imbi/plugins/github/deployment.py

@@ -46,6 +46,7 @@ from imbi.common.plugins.base import (
     RefInfo,
     ReleaseInfo,
     RemoteDeployment,
+    RemoteRelease,
     WorkflowFile,
 )
 from imbi.common.plugins.errors import PluginAuthenticationFailed
@@ -1196,19 +1197,19 @@ class GitHubDeployment(DeploymentCapability):
         run_cache[run_id] = result
         return result
 
-    async def _release_notes_for_ref(
+    async def _release_for_ref(
         self, client: httpx.AsyncClient, ref: str
-    ) -> str | None:
-        """Return the GitHub release notes body for a deployed ref.
-
-        A deployment created against a semver tag has a matching GitHub
-        release whose ``body`` is the "What's Changed" markdown the host
-        persists on the ``Release`` node.  Refs that aren't a release tag
-        (branches, raw SHAs) 404 here and yield ``None`` -- resync is
-        never blocked by a missing or unreadable release.  A ``403``
-        (token lacks scope to read releases) is cached process-wide so a
-        forbidden token short-circuits instead of re-issuing the request
-        for every deployment on every resync sweep.
+    ) -> RemoteRelease | None:
+        """Return the GitHub release for ``ref``, metadata included.
+
+        The single release lookup every caller degrades through: a 404 /
+        non-200 / parse failure yields ``None``, and a ``403`` (token lacks
+        scope to read releases) is cached process-wide so a forbidden token
+        short-circuits instead of re-issuing the request for every
+        deployment on every resync sweep.  ``author`` is the login GitHub
+        credits with the release and ``author_subject`` its numeric user id,
+        which the host resolves to an Imbi user through the identity plugins
+        on the same service.
         """
         if _releases_forbidden(client):
             return None
@@ -1227,8 +1228,46 @@ class GitHubDeployment(DeploymentCapability):
             data = typing.cast(dict[str, typing.Any], resp.json())
         except ValueError:
             return None
+        author: dict[str, typing.Any] = data.get('author') or {}
+        login = author.get('login')
+        subject = author.get('id')
         body = data.get('body')
-        return str(body) if body else None
+        name = data.get('name')
+        html_url = data.get('html_url')
+        return RemoteRelease(
+            tag=ref,
+            name=str(name) if name else None,
+            body_markdown=str(body) if body else None,
+            author=str(login) if login else None,
+            author_subject=str(subject) if subject is not None else None,
+            html_url=str(html_url) if html_url else None,
+            published_at=_parse_iso(data.get('published_at')),
+        )
+
+    async def get_release(
+        self,
+        ctx: PluginContext,
+        credentials: dict[str, str],
+        tag: str,
+    ) -> RemoteRelease | None:
+        """Return the GitHub release for ``tag`` with its author."""
+        async with self._client(ctx, credentials) as client:
+            return await self._release_for_ref(client, tag)
+
+    async def _release_notes_for_ref(
+        self, client: httpx.AsyncClient, ref: str
+    ) -> str | None:
+        """Return the GitHub release notes body for a deployed ref.
+
+        A deployment created against a semver tag has a matching GitHub
+        release whose ``body`` is the "What's Changed" markdown the host
+        persists on the ``Release`` node.  Refs that aren't a release tag
+        (branches, raw SHAs) 404 in :meth:`_release_for_ref` and yield
+        ``None`` -- resync is never blocked by a missing or unreadable
+        release.
+        """
+        release = await self._release_for_ref(client, ref)
+        return release.body_markdown if release else None
 
     async def _latest_status(
         self, client: httpx.AsyncClient, deployment_id: str

{imbi_plugin_github-2.21.0 → imbi_plugin_github-2.21.1}/tests/test_deployment.py

@@ -1555,6 +1555,66 @@ class GetReleaseNotesTestCase(unittest.IsolatedAsyncioTestCase):
         notes = await plugin.get_release_notes(_ctx(), _CREDS, '9.9.9')
         self.assertIsNone(notes)
 
+    @respx.mock
+    async def test_get_release_carries_the_remote_author(self) -> None:
+        # Attribution comes from GitHub: the login it credits with the
+        # release, plus the numeric id the host resolves to an Imbi user.
+        respx.get(
+            'https://api.github.com/repos/octo/demo/releases/tags/3.23.4'
+        ).mock(
+            return_value=httpx.Response(
+                200,
+                json={
+                    'tag_name': '3.23.4',
+                    'name': 'Release 3.23.4',
+                    'body': '## Fixed\n- the thing',
+                    'html_url': 'https://github.com/octo/demo/releases/3.23.4',
+                    'published_at': '2026-07-29T12:00:00Z',
+                    'author': {'login': 'octocat', 'id': 583231},
+                },
+            )
+        )
+        plugin = GitHubDeployment()
+        release = await plugin.get_release(_ctx(), _CREDS, '3.23.4')
+        assert release is not None
+        self.assertEqual('octocat', release.author)
+        self.assertEqual('583231', release.author_subject)
+        self.assertEqual('Release 3.23.4', release.name)
+        self.assertEqual('## Fixed\n- the thing', release.body_markdown)
+        self.assertEqual(
+            'https://github.com/octo/demo/releases/3.23.4', release.html_url
+        )
+        self.assertEqual(
+            datetime.datetime(2026, 7, 29, 12, 0, tzinfo=datetime.UTC),
+            release.published_at,
+        )
+
+    @respx.mock
+    async def test_get_release_returns_none_when_no_release(self) -> None:
+        respx.get(
+            'https://api.github.com/repos/octo/demo/releases/tags/9.9.9'
+        ).mock(return_value=httpx.Response(404, json={'message': 'Not Found'}))
+        plugin = GitHubDeployment()
+        self.assertIsNone(await plugin.get_release(_ctx(), _CREDS, '9.9.9'))
+
+    @respx.mock
+    async def test_get_release_tolerates_a_missing_author(self) -> None:
+        # A release with no author (a tag-only release, or a deleted
+        # account) still yields its body rather than failing the lookup.
+        respx.get(
+            'https://api.github.com/repos/octo/demo/releases/tags/1.0.0'
+        ).mock(
+            return_value=httpx.Response(
+                200, json={'tag_name': '1.0.0', 'body': 'notes'}
+            )
+        )
+        plugin = GitHubDeployment()
+        release = await plugin.get_release(_ctx(), _CREDS, '1.0.0')
+        assert release is not None
+        self.assertIsNone(release.author)
+        self.assertIsNone(release.author_subject)
+        self.assertEqual('notes', release.body_markdown)
+
 
 class CheckStatusTestCase(unittest.IsolatedAsyncioTestCase):
     @respx.mock