jiggle-version 2.2.0__tar.gz → 2.2.1__tar.gz

jiggle_version-2.2.1/.gitattributes

@@ -0,0 +1,27 @@
+# Normalize line endings: store as LF in the repo, check out native on each OS.
+* text=auto
+
+# Files that break with CRLF must always be LF, even on Windows checkouts.
+*.sh   text eol=lf
+*.bash text eol=lf
+Dockerfile*   text eol=lf
+*.dockerfile  text eol=lf
+
+# Windows-only scripts stay CRLF.
+*.bat text eol=crlf
+*.cmd text eol=crlf
+*.ps1 text eol=crlf
+
+# Common binaries: never touch.
+*.png  binary
+*.jpg  binary
+*.jpeg binary
+*.gif  binary
+*.ico  binary
+*.pdf  binary
+*.zip  binary
+*.gz   binary
+*.woff  binary
+*.woff2 binary
+*.ttf  binary
+*.eot  binary

{jiggle_version-2.2.0 → jiggle_version-2.2.1}/.github/workflows/build.yml

@@ -10,7 +10,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           persist-credentials: false
 
@@ -26,7 +26,7 @@ jobs:
         run: |
           pipx install uv && pipx install "coderoller" && \
           pipx install isort && pipx install black && pipx install bandit && \
-          pipx install pylint && pipx install pre-commit && pipx install poetry && pipx install hatch
+          pipx install pylint && pipx install poetry && pipx install hatch
 
       - name: Install Dependencies
         run: uv sync
@@ -35,7 +35,7 @@ jobs:
         run: chmod +x *.sh && uv run make check
 
       - name: Upload coverage reports to Codecov
-        uses: codecov/codecov-action@57e3a136b779b570ffcdbf80b3bdc90e7fab3de2 # v6.0.0
+        uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7.0.0
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
 

jiggle_version-2.2.1/.github/workflows/create_draft_release.yml

@@ -0,0 +1,32 @@
+---
+name: Create Draft Release
+concurrency: changelog
+on:
+  push:
+    branches: [main]
+  workflow_dispatch:
+permissions:
+  contents: read
+jobs:
+  release:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+    steps:
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
+        with:
+          fetch-depth: 0
+          persist-credentials: false
+      - name: Setup Python 3.14
+        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405  # v6.2.0
+        with: {python-version: '3.14'}
+      - name: Set up uv
+        uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39  # v8.2.0
+        with:
+          enable-cache: true
+      - name: Sync dependencies
+        run: uv sync --frozen --group dev
+      - name: Creating Draft release
+        env:
+          GITHUB_TOKEN: ${{ github.token }}
+        run: uv run changelogmanager github-release --repository ${{ github.repository }}

jiggle_version-2.2.1/.github/workflows/release.yml

@@ -0,0 +1,155 @@
+---
+name: Release
+concurrency: changelog
+on:
+  release:
+    types: [released]
+permissions:
+  contents: read
+jobs:
+  bump:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      pull-requests: write
+    outputs:
+      branch: ${{ steps.push.outputs.branch }}
+      version: ${{ steps.release.outputs.version }}
+    steps:
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
+        with:
+          ref: ${{ github.event.release.target_commitish }}
+          fetch-depth: 0
+          persist-credentials: false
+      - name: Set up Python 3.14
+        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405  # v6.2.0
+        with: {python-version: '3.14'}
+      - name: Set up uv
+        uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39  # v8.2.0
+        with:
+          enable-cache: false
+      - name: Sync dependencies
+        run: uv sync --frozen --group dev
+      - name: Bump changelog and version files
+        id: release
+        env:
+          RELEASE_VERSION: ${{ github.event.release.tag_name }}
+        run: |
+          VERSION="${RELEASE_VERSION#v}"
+          uv run changelogmanager release \
+            --override-version "$VERSION" \
+            --bump-versions \
+            --yes
+          echo "version=${VERSION}" >> "$GITHUB_OUTPUT"
+      - name: Commit and push bump branch
+        id: push
+        env:
+          GITHUB_TOKEN: ${{ github.token }}
+          RELEASE_ID: ${{ github.event.release.id }}
+          REPO: ${{ github.repository }}
+          RELEASE_VERSION: ${{ steps.release.outputs.version }}
+        run: |
+          BRANCH="release/bump-${RELEASE_ID}"
+          git config user.name "github-actions[bot]"
+          git config user.email "github-actions[bot]@users.noreply.github.com"
+          git checkout -b "${BRANCH}"
+          git add CHANGELOG.md pyproject.toml jiggle_version/__about__.py
+          git add -u
+          if git diff --cached --quiet; then
+            echo "::warning::No files changed after release --bump-versions; is the version already bumped?"
+            exit 1
+          fi
+          git commit -m "chore: release ${RELEASE_VERSION}"
+          git remote set-url origin "https://x-access-token:${GITHUB_TOKEN}@github.com/${REPO}.git"
+          REMOTE_SHA="$(git ls-remote --heads origin "${BRANCH}" | awk '{print $1}')"
+          if [ -n "${REMOTE_SHA}" ]; then
+            git push \
+              --force-with-lease="refs/heads/${BRANCH}:${REMOTE_SHA}" \
+              origin \
+              "HEAD:refs/heads/${BRANCH}"
+          else
+            git push origin "HEAD:refs/heads/${BRANCH}"
+          fi
+          echo "branch=${BRANCH}" >> "$GITHUB_OUTPUT"
+      - name: Open pull request
+        env:
+          GITHUB_TOKEN: ${{ github.token }}
+          RELEASE_VERSION: ${{ steps.release.outputs.version }}
+          BASE_BRANCH: ${{ github.event.release.target_commitish }}
+          REPO: ${{ github.repository }}
+          BUMP_BRANCH: ${{ steps.push.outputs.branch }}
+        run: |
+          uv run changelogmanager github-pr \
+            --repository "${REPO}" \
+            --head "${BUMP_BRANCH}" \
+            --base "${BASE_BRANCH}" \
+            --title "chore: release ${RELEASE_VERSION}" \
+            --body "$(cat <<EOF
+          Automated release PR for **${RELEASE_VERSION}**.
+          Changes:
+          - \`CHANGELOG.md\`: promoted \`[Unreleased]\` to \`${RELEASE_VERSION}\`
+          - \`pyproject.toml\`: version bumped to \`${RELEASE_VERSION}\`
+          - Source version strings updated to \`${RELEASE_VERSION}\`
+          This PR was opened automatically by the Release workflow.
+          Merge it once the PyPI publish below succeeds.
+          EOF
+          )"
+  build:
+    runs-on: ubuntu-latest
+    needs: bump
+    steps:
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
+        with:
+          ref: ${{ needs.bump.outputs.branch }}
+          fetch-depth: 0
+          persist-credentials: false
+      - name: Set up Python 3.14
+        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405  # v6.2.0
+        with: {python-version: '3.14'}
+      - name: Set up uv
+        uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39  # v8.2.0
+        with:
+          enable-cache: false
+      - name: Sync dependencies
+        run: uv sync --frozen
+      - name: Build
+        run: uv build --no-sources
+      - name: Verify dist version matches release
+        env:
+          EXPECTED: ${{ needs.bump.outputs.version }}
+        run: |
+          WHEEL=$(ls dist/*.whl 2>/dev/null | head -1)
+          if [ -z "$WHEEL" ]; then
+            echo "::error::No wheel found in dist/"
+            exit 1
+          fi
+          if ! echo "$WHEEL" | grep -q "${EXPECTED}"; then
+            echo "::error::Wheel ${WHEEL} does not contain expected version ${EXPECTED}"
+            exit 1
+          fi
+          echo "Verified: ${WHEEL} matches version ${EXPECTED}"
+      - name: Upload artifact
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a  # v7.0.1
+        with:
+          name: packages
+          path: dist/
+          if-no-files-found: error
+          retention-days: 1
+  publish:
+    runs-on: ubuntu-latest
+    needs: build
+    permissions:
+      id-token: write
+    environment:
+      name: pypi
+      url: https://pypi.org/p/jiggle-version
+    steps:
+      - name: Download artifact
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c  # v8.0.1
+        with:
+          name: packages
+          path: dist/
+      - name: Publish to PyPI
+        uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b  # v1.14.0
+        with:
+          verbose: 'true'

{jiggle_version-2.2.0 → jiggle_version-2.2.1}/.github/workflows/zizmor.yml

@@ -23,7 +23,7 @@ jobs:
       security-events: write
     steps:
       - name: Checkout repository
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           persist-credentials: false
 
@@ -36,7 +36,7 @@ jobs:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Upload SARIF file
-        uses: github/codeql-action/upload-sarif@68bde559dea0fdcac2102bfdf6230c5f70eb485e # v4.35.4
+        uses: github/codeql-action/upload-sarif@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2
         with:
           # Path to SARIF file relative to the root of the repository
           sarif_file: results.sarif

jiggle_version-2.2.1/CHANGELOG.md

@@ -0,0 +1,111 @@
+# Changelog
+All notable changes to this project will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [2.2.1] - 2026-07-04
+### Fixed
+- Version discovery now honors nested `.gitignore` files and skips directories tagged with a `CACHEDIR.TAG` marker, so project-local caches (e.g. uv's `./.uv/`) no longer leak installed-package version files and cause false version-conflict errors.
+
+## [2.2.0] - 2026-05-24
+### Added
+- Git tag checking via `check --git-tag` command: compares the agreed source version against the most recent git tag reachable from HEAD (`git describe --tags --abbrev=0`). A leading `v`/`V` is stripped before comparison. Exits `102` on mismatch; exits `0` with an informational note when no tags exist. Opt-in flag; existing pipelines are unaffected.
+
+### Fixed
+- Version discovery no longer walks into virtual-environment roots. Any directory containing a `pyvenv.cfg` file (the standard venv marker written by pip, uv, and virtualenv) is skipped entirely, eliminating false version-conflict errors from installed-package `_version.py` / `__version__.py` files in ad-hoc venvs not covered by `.gitignore`. `site-packages` and `node_modules` are also added to the unconditional prune list.
+
+## [2.1.1] - 2026-03-27
+### Added
+- Quiet option
+
+### Fixed
+- UTF-8 error on printing output
+
+## [2.1.0] - 2025-10-20
+### Added
+- Python 3.14 support
+- Checks PyPI to see if current version is published. Skips bump if version is unpublished to avoid version number gaps when running on every Makefile or Justfile invocation.
+
+### Fixed
+- Missing packaging library dependency
+
+## [2.0.1] - 2025-10-06
+### Fixed
+- Missing dependency in pyproject.toml
+
+## [2.0.0] - 2025-10-06
+### Added
+- 100% code rewrite with new commands
+
+### Changed
+- Command signature changed
+
+### Removed
+- Removed current command, replaced with others
+
+## [1.2.0] - 2025-10-05
+### Added
+- Python 3.14 compatibility
+
+### Changed
+- Replace die() utility with JiggleVersionException for cleaner error propagation
+- Switch version metadata to __about__.py and use Path-based arguments internally
+- Fix keyword typo in package metadata (verision-numbers → version-numbers)
+
+## [1.1.0] - 2023-05-28
+### Added
+- Update to Python 3.11 and Actions
+- MyPyC compilation support
+
+### Changed
+- Build script improvements
+
+## [1.0.77] - 2021-12-11
+### Added
+- Vendor versio library (comparable_mixin, version, version_scheme) to support version comparison logic
+
+## [1.0.76] - 2021-12-06
+### Added
+- New build script
+
+### Changed
+- Documentation improvements
+
+## [1.0.71] - 2020-05-23
+### Fixed
+- Close file handles
+
+## [1.0.70] - 2020-02-09
+### Added
+- Python 3 only support
+
+### Fixed
+- Fix formatting issues
+
+## [1.0.68] - 2019-01-11
+### Added
+- Force choice of module option
+- Init feature for version file initialization
+
+### Fixed
+- Fix bug causing incorrect behavior on certain path configurations
+- Remove extraneous PyCharm IDE files accidentally included in the PyPI distribution
+
+## [0.1.2] - 2025-10-05
+### Fixed
+- Python 3.13 support
+- Last version before complete rewrite
+
+[2.2.0]: https://github.com/matthewdeanmartin/jiggle_version/compare/v2.1.1...v2.2.0
+[2.1.1]: https://github.com/matthewdeanmartin/jiggle_version/compare/v2.1.0...v2.1.1
+[2.1.0]: https://github.com/matthewdeanmartin/jiggle_version/compare/v2.0.1...v2.1.0
+[2.0.1]: https://github.com/matthewdeanmartin/jiggle_version/compare/v2.0.0...v2.0.1
+[2.0.0]: https://github.com/matthewdeanmartin/jiggle_version/compare/v1.2.0...v2.0.0
+[1.2.0]: https://github.com/matthewdeanmartin/jiggle_version/compare/v1.1.0...v1.2.0
+[1.1.0]: https://github.com/matthewdeanmartin/jiggle_version/compare/v1.0.77...v1.1.0
+[1.0.77]: https://github.com/matthewdeanmartin/jiggle_version/compare/v1.0.76...v1.0.77
+[1.0.76]: https://github.com/matthewdeanmartin/jiggle_version/compare/v1.0.71...v1.0.76
+[1.0.71]: https://github.com/matthewdeanmartin/jiggle_version/compare/v1.0.70...v1.0.71
+[1.0.70]: https://github.com/matthewdeanmartin/jiggle_version/compare/v1.0.68...v1.0.70
+[1.0.68]: https://github.com/matthewdeanmartin/jiggle_version/releases/tag/v1.0.68

{jiggle_version-2.2.0 → jiggle_version-2.2.1}/Makefile

@@ -83,7 +83,7 @@ bandit: .build_history/bandit
 # for when using -j (jobs, run in parallel)
 .NOTPARALLEL: .build_history/isort .build_history/black
 
-check: mypy test pylint bandit pre-commit
+check: mypy test pylint bandit
 
 #.PHONY: publish_test
 #publish_test:
@@ -140,3 +140,26 @@ issues:
 
 pin_actions:
 	pinact run --update .github/workflows/build.yml .github/workflows/publish_to_pypi.yml .github/workflows/zizmor.yml
+
+# ── Dogfooding targets (independent, not wired into check) ───────────────────
+
+.PHONY: version-check
+version-check:
+	@uv run jiggle_version check
+
+.PHONY: dev-status
+dev-status:
+	@uv run troml-dev-status validate .
+
+.PHONY: prerelease-check
+prerelease-check: version-check dev-status
+	@echo "Pre-release checks passed."
+
+.PHONY: dont-be-lazy
+dont-be-lazy:
+	@uv run dont_be_lazy --root . --no-color summary
+	@uv run dont_be_lazy --root . --no-color scan jiggle_version --no-config-suppressions || true
+
+.PHONY: pydoc-docs
+pydoc-docs:
+	@uv run pydoc_fork jiggle_version -o ./pydoc/

{jiggle_version-2.2.0 → jiggle_version-2.2.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: jiggle_version
-Version: 2.2.0
+Version: 2.2.1
 Summary: Increment version number found in source code without regex
 Author-email: Matthew Martin <matthewdeanmartin@gmail.com>
 License-Expression: MIT
@@ -14,10 +14,9 @@ Classifier: Programming Language :: Python :: 3.9
 Classifier: Programming Language :: Python :: 3.10
 Classifier: Programming Language :: Python :: 3.11
 Classifier: Programming Language :: Python :: 3.12
-Classifier: Programming Language :: Python :: 3.13
 Classifier: Programming Language :: Python :: 3.14
 Classifier: Programming Language :: Python :: 3.15
-Requires-Python: >=3.8
+Requires-Python: >=3.9
 Requires-Dist: packaging>=25.0
 Requires-Dist: pathspec>=0.12
 Requires-Dist: requests>=2.32.4
@@ -326,3 +325,10 @@ This is a CLI-first tool. Internal modules may change. If you import, prefer:
 
 * `jiggle_version.__about__.__version__`
 * Running via `python -m jiggle_version`
+
+## Project Links
+
+- [GitHub](https://github.com/matthewdeanmartin/jiggle_version)
+- [PyPI](https://pypi.org/project/jiggle-version/)
+- [Bug Tracker](https://github.com/matthewdeanmartin/jiggle_version/issues)
+- [Change Log](https://github.com/matthewdeanmartin/jiggle_version/blob/main/CHANGELOG.md)

{jiggle_version-2.2.0 → jiggle_version-2.2.1}/README.md

@@ -298,3 +298,10 @@ This is a CLI-first tool. Internal modules may change. If you import, prefer:
 
 * `jiggle_version.__about__.__version__`
 * Running via `python -m jiggle_version`
+
+## Project Links
+
+- [GitHub](https://github.com/matthewdeanmartin/jiggle_version)
+- [PyPI](https://pypi.org/project/jiggle-version/)
+- [Bug Tracker](https://github.com/matthewdeanmartin/jiggle_version/issues)
+- [Change Log](https://github.com/matthewdeanmartin/jiggle_version/blob/main/CHANGELOG.md)

{jiggle_version-2.2.0 → jiggle_version-2.2.1}/build.py

@@ -334,8 +334,6 @@ def bandit() -> None:
     do_bandit(IS_SHELL_SCRIPT_LIKE)
 
 
-
-
 @task()
 @skip_if_no_change("mccabe")
 @timed()
@@ -573,6 +571,7 @@ def package() -> None:
     """
     subprocess.run(["poetry", "build"])
 
+
 @task()
 @timed()
 @skip_if_no_change("parallel_checks")
@@ -587,7 +586,7 @@ def parallel_checks() -> None:
         vulture,
         do_lint,
         do_bandit,
-        do_mccabe
+        do_mccabe,
     ]
     if IS_GITLAB:
         # other tasks assume there will be a LOC file by now.
@@ -684,7 +683,6 @@ def upload_package() -> None:
     do_upload_package()
 
 
-
 # FAST. FATAL ERRORS. DON'T CHANGE THINGS THAT CHECK IN
 @task(mypy, detect_secrets, git_secrets, check_package, vulture)
 @skip_if_no_change("pre_commit_hook")

jiggle_version-2.2.1/dead_code/setup.py

@@ -0,0 +1,13 @@
+from mypyc.build import mypycify
+from setuptools import setup
+
+setup(
+    name="jiggle_version",
+    packages=["jiggle_version"],
+    ext_modules=mypycify(
+        [
+            "--disallow-untyped-defs",  # Pass a mypy flag
+            "jiggle_version",
+        ]
+    ),
+)

{jiggle_version-2.2.0 → jiggle_version-2.2.1}/fetch_raw_data/pypi_versions.py

@@ -1,6 +1,7 @@
 """
 Get some sample version strings from the wild.
 """
+
 # https://python-forum.io/Thread-pip-list-available-packages
 
 # download file
@@ -48,7 +49,7 @@ def package_info(rows):
             if ".zip" in url or ".gz" in url:
                 print(url)
                 last = url
-        except: # noqa
+        except:  # noqa
             pass
     return last
 
@@ -74,7 +75,7 @@ def read_packages():
                 print(package_name + " done")
                 continue
             print(url)
-        except: # noqa
+        except:  # noqa
             continue
 
         response = requests.get(url)

{jiggle_version-2.2.0 → jiggle_version-2.2.1}/historical/jiggle_version/__about__.py

@@ -11,7 +11,7 @@ __all__ = [
 ]
 
 __title__ = "jiggle_version"
-__version__ = "1.2.0"
+__version__ = "2.2.1"
 __description__ = "Increment version number found in source code without regex"
 __readme__ = "README.md"
 __keywords__ = ["version", "version-numbers"]

{jiggle_version-2.2.0 → jiggle_version-2.2.1}/historical/jiggle_version/parse_version/parse_dunder_version.py

@@ -29,8 +29,6 @@ version_tokens = [
 ]
 
 
-
-
 def find_by_ast(line: str, version_token: str = "__version__") -> Optional[str]:
     """
     Parses a line of Python code to find a version string using the `ast` module.

jiggle_version-2.2.1/historical/test/sample_lib/__version__.py

@@ -0,0 +1,5 @@
+"""
+Init
+"""
+
+__version__ = "2.2.1"

{jiggle_version-2.2.0 → jiggle_version-2.2.1}/jiggle_version/__about__.py

@@ -12,7 +12,7 @@ __all__ = [
 ]
 
 __title__ = "jiggle_version"
-__version__ = "2.2.0"
+__version__ = "2.2.1"
 __description__ = "Increment version number found in source code without regex"
 __readme__ = "README.md"
 __keywords__ = ["version", "version-numbers"]

{jiggle_version-2.2.0 → jiggle_version-2.2.1}/jiggle_version/discover.py

@@ -9,10 +9,14 @@ import logging
 from pathlib import Path
 
 # Use the new gitignore API
+from pathspec import PathSpec
+from pathspec.patterns import GitWildMatchPattern
+
 from .gitignore import (
-    collect_default_spec,
+    build_gitignore_spec,
     is_path_explicitly_ignored,
     is_path_gitignored,
+    nested_gitignore_patterns,
 )
 
 # Files to search for recursively in the project root.
@@ -36,6 +40,12 @@ DEFAULT_IGNORE_DIRS = {
 # the project's own version declarations).
 VENV_MARKER_FILES = {"pyvenv.cfg"}
 
+# Cache Directory Tagging Standard (https://bford.info/cachedir/). A directory
+# containing a CACHEDIR.TAG with this signature is a cache (uv, pip, mypy, ruff,
+# hatch, ...) and should be skipped entirely.
+CACHEDIR_TAG_FILE = "CACHEDIR.TAG"
+CACHEDIR_TAG_SIGNATURE = "Signature: 8a477f597d28d172789f06886806bc55"
+
 LOGGER = logging.getLogger(__name__)
 
 
@@ -56,8 +66,9 @@ def find_source_files(
     LOGGER.debug("project root %s, ignore_paths %s", project_root, ignore_paths)
     found_files: set[Path] = set()
 
-    # Build a single PathSpec with repo/global ignores and any future extras
-    spec = collect_default_spec(project_root)
+    # Build the base spec with repo/global ignores. Nested .gitignore files are
+    # layered on top as the walk descends into the directories that contain them.
+    base_spec = build_gitignore_spec(project_root)
 
     # Resolve user-provided ignore paths to absolute form for reliable comparison
     explicit_ignore_set = {(project_root / p).resolve() for p in (ignore_paths or [])}
@@ -66,13 +77,27 @@ def find_source_files(
         current_dir=project_root,
         project_root=project_root,
         found_files=found_files,
-        spec=spec,
+        spec=base_spec,
         explicit_ignore_set=explicit_ignore_set,
     )
 
     return sorted(found_files)
 
 
+def _is_cache_dir(directory: Path) -> bool:
+    """Return True if `directory` contains a valid CACHEDIR.TAG marker file."""
+    tag = directory / CACHEDIR_TAG_FILE
+    try:
+        if not tag.is_file():
+            return False
+        with tag.open("r", encoding="utf-8", errors="replace") as fh:
+            first_line = fh.readline().rstrip("\n").rstrip("\r")
+        return first_line == CACHEDIR_TAG_SIGNATURE
+    except OSError as exc:
+        LOGGER.warning("Skipping unreadable cache tag %s: %s", tag, exc)
+        return False
+
+
 def _walk_and_discover(
     *,
     current_dir: Path,
@@ -82,6 +107,14 @@ def _walk_and_discover(
     explicit_ignore_set: set[Path],
 ) -> None:
     """Recursively walk directories to find source files."""
+    # Layer any nested .gitignore in this directory onto the active spec, matching
+    # git's cascading semantics (e.g. uv drops `./.uv/.gitignore` containing `*`).
+    nested = nested_gitignore_patterns(current_dir, project_root)
+    if nested:
+        spec = PathSpec(
+            list(spec.patterns) + list(PathSpec.from_lines(GitWildMatchPattern, nested).patterns)
+        )
+
     try:
         items = list(current_dir.iterdir())
     except OSError as exc:
@@ -110,6 +143,11 @@ def _walk_and_discover(
                 LOGGER.debug("Skipping venv root: %s", item)
                 continue
 
+            # Skip cache directories tagged per the Cache Directory Tagging Standard.
+            if _is_cache_dir(item):
+                LOGGER.debug("Skipping tagged cache dir: %s", item)
+                continue
+
             # If top-level package dir has __init__.py, include it
             init_file = item / "__init__.py"
             try: