insightfactory-cli 1.1.0.dev22__py3-none-any.whl → 1.1.1.dev25__py3-none-any.whl

{insightfactory_cli-1.1.0.dev22.dist-info → insightfactory_cli-1.1.1.dev25.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: insightfactory-cli
-Version: 1.1.0.dev22
+Version: 1.1.1.dev25
 Summary: Profile-based authentication CLI for the InsightFactory Interfaces API
 Project-URL: Homepage, https://insightfactory.ai
 Author-email: "insightfactory.ai Support" <support@insightfactory.ai>
@@ -340,6 +340,35 @@ and publishes nothing.
 git tag v1.0.1 && git push origin v1.0.1
 ```
 
+The tag drafts the GitHub Release, uploads to PyPI, then publishes the Release.
+Everything comes from one build, so the wheel and sdist attached to the Release
+are the files that went to PyPI, and the draft means nobody sees `pip install
+insightfactory-cli==1.1.1` on a Release page before that version exists on PyPI.
+A failed upload leaves a draft rather than a published page pointing at a 404.
+
+The body comes from [`CHANGELOG.md`](CHANGELOG.md) via `tools/release_notes.py`.
+It covers the tagged version and any version opened since the last tag, because
+one version per PR means unreleased versions pile up between tags: if 1.1.1 and
+1.1.2 both merge and only `v1.1.2` is tagged, 1.1.1's code ships inside that
+artifact, so its notes belong on that Release. A checkout with no tags falls back
+to the tagged version's section alone.
+
+`develop` therefore carries the version the next release will use, and the
+`release-guard` job holds it there. A PR into `develop` must raise `version` in
+`pyproject.toml` above what `develop` already has, and must add that version's
+`CHANGELOG.md` section. `tools/check_release.py` runs both checks and is what
+fails the PR:
+
+```bash
+BASE=origin/develop python3 tools/check_release.py
+```
+
+One version per PR, then. The instinct is to let a second change join the
+section the first one opened, and the guard refuses that: the version would be
+tagged with notes that do not describe everything in it, and nothing stops the
+tag going out between the two merges. Bump the patch number again, or fold the
+second change into the first PR.
+
 Verify and build live in the reusable workflow
 [`if_s_insightfactory_cli.yml`](https://github.com/insightfactory-ai/if_sre_github_actions/blob/main/.github/workflows/if_s_insightfactory_cli.yml)
 in `insightfactory-ai/if_sre_github_actions`. This repository's
@@ -354,7 +383,7 @@ reusable workflow and uploads it with `pypa/gh-action-pypi-publish`.
 | Trigger | Published version | PyPI role |
 |---|---|---|
 | Push / merge to `develop` | `1.0.1.dev{N}` | pre-release (`pip install --pre`) |
-| Push of a `v*` tag | the version in `pyproject.toml`, which the tag must match | latest |
+| Push of a `v*` tag | the version in `pyproject.toml`, which the tag must match | latest, plus a GitHub Release |
 | Merge to `main` | nothing, CI only | none |
 
 `N` is `github.run_number` of the reusable workflow. It is a per-workflow

{insightfactory_cli-1.1.0.dev22.dist-info → insightfactory_cli-1.1.1.dev25.dist-info}/RECORD

@@ -27,8 +27,8 @@ if_cli/router/log.py,sha256=YLWeHUb05HUnS3XHubCwy7oLZAUEGAiHcZysz_YMAAo,412
 if_cli/router/policy.py,sha256=CclbjuOA5mwwoQiNDa17iQeN9eXRbfy11bS9JFd8gL4,2840
 if_cli/router/server.py,sha256=RkS6Ddann-vAU0ZQAe2QaEB9dLBvEC33V9O-G4WSIy8,12116
 if_cli/router/upstream.py,sha256=dmwS7qSLnHiY7dEYpVENkfYIHs3DxkhhMB1SV66lE2Y,13104
-insightfactory_cli-1.1.0.dev22.dist-info/METADATA,sha256=hZEYaHdEPNTWstSehIgS5b9xGiF8vIEfPhCGDBKcHVQ,17904
-insightfactory_cli-1.1.0.dev22.dist-info/WHEEL,sha256=zOwg4jB6zX2kU910N-cMawjivD6tO8NEWvE12je1bVk,87
-insightfactory_cli-1.1.0.dev22.dist-info/entry_points.txt,sha256=UlX854D7f-7dBj5F0wGdakVy6vopvP9hA1BN-gv739w,44
-insightfactory_cli-1.1.0.dev22.dist-info/licenses/LICENSE,sha256=8eZ1YAABL398qESVJc_FlK1voYQ0GAh-R_rNBQK6QH8,234
-insightfactory_cli-1.1.0.dev22.dist-info/RECORD,,
+insightfactory_cli-1.1.1.dev25.dist-info/METADATA,sha256=MhOT9TEnUHIqQLtN7W1dgVT0KJrHc7H3CHbLBV_XE9g,19502
+insightfactory_cli-1.1.1.dev25.dist-info/WHEEL,sha256=zOwg4jB6zX2kU910N-cMawjivD6tO8NEWvE12je1bVk,87
+insightfactory_cli-1.1.1.dev25.dist-info/entry_points.txt,sha256=UlX854D7f-7dBj5F0wGdakVy6vopvP9hA1BN-gv739w,44
+insightfactory_cli-1.1.1.dev25.dist-info/licenses/LICENSE,sha256=8eZ1YAABL398qESVJc_FlK1voYQ0GAh-R_rNBQK6QH8,234
+insightfactory_cli-1.1.1.dev25.dist-info/RECORD,,