lib-cli-exit-tools 2.1.0__tar.gz → 2.2.0__tar.gz

{lib_cli_exit_tools-2.1.0 → lib_cli_exit_tools-2.2.0}/.github/workflows/ci.yml

@@ -5,6 +5,9 @@ on:
     branches: [ main, master ]
   pull_request:
     branches: [ main, master ]
+  schedule:
+    # Run daily at 3:17 AM UTC (off-peak hours, odd minute to avoid congestion)
+    - cron: '17 3 * * *'
 
 jobs:
   test:
@@ -15,19 +18,32 @@ jobs:
       matrix:
         os: [ubuntu-latest, macos-latest, windows-latest]
         # Test against Python 3.13 and the latest 3.x available on Actions runners
-        python: ["3.13", "3.x"]
+        python: ["3.10","3.11","3.12","3.13", "3.x"]
+    env:
+      PYO3_USE_ABI3_FORWARD_COMPATIBILITY: "1"
+      PYTHONIOENCODING: "utf-8"
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - uses: actions/setup-python@v6
         with:
           python-version: ${{ matrix.python }}
+          cache: 'pip'
+          cache-dependency-path: 'pyproject.toml'
+      - name: Install uv
+        uses: astral-sh/setup-uv@v7
+        with:
+          enable-cache: true
       - name: Extract project metadata
         shell: python
         run: |
           import os
-          import tomllib
           from pathlib import Path
 
+          try:
+              import tomllib
+          except ModuleNotFoundError:
+              import pip._vendor.tomli as tomllib
+
           data = tomllib.loads(Path('pyproject.toml').read_text('utf-8'))
           project = data['project']['name']
           module = project.replace('-', '_')
@@ -45,6 +61,13 @@ jobs:
         run: |
           choco install -y make
           echo "C:\\ProgramData\\chocolatey\\bin" >> $env:GITHUB_PATH
+      - name: Install journald prerequisites
+        if: runner.os == 'Linux'
+        shell: bash
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y python3-systemd
+
       - name: Upgrade pip
         shell: bash
         run: python -m pip install --upgrade pip
@@ -52,13 +75,28 @@ jobs:
       - name: Install dev deps
         shell: bash
         run: |
-          pip install -e .[dev]
+          uv pip install -e .[dev] --system
 
       - name: Install Windows Event Log prerequisites
         if: runner.os == 'Windows'
         shell: bash
         run: |
-          pip install pywin32
+          uv pip install pywin32 --system
+      - name: Cache ruff
+        uses: actions/cache@v4
+        with:
+          path: .ruff_cache
+          key: ruff-${{ runner.os }}-${{ github.sha }}
+          restore-keys: |
+            ruff-${{ runner.os }}-
+      - name: Cache pyright
+        uses: actions/cache@v4
+        with:
+          path: .pyright
+          key: pyright-${{ runner.os }}-py${{ matrix.python }}-${{ github.sha }}
+          restore-keys: |
+            pyright-${{ runner.os }}-py${{ matrix.python }}-
+            pyright-${{ runner.os }}-
       - name: Run full test suite (lint, types, tests, coverage, codecov)
         shell: bash
         env:
@@ -79,17 +117,23 @@ jobs:
     name: pipx/uv verification (ubuntu)
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - uses: actions/setup-python@v6
         with:
           python-version: "3.13"
+          cache: 'pip'
+          cache-dependency-path: 'pyproject.toml'
       - name: Extract project metadata
         shell: python
         run: |
           import os
-          import tomllib
           from pathlib import Path
 
+          try:
+              import tomllib
+          except ModuleNotFoundError:
+              import pip._vendor.tomli as tomllib
+
           data = tomllib.loads(Path('pyproject.toml').read_text('utf-8'))
           project = data['project']['name']
           module = project.replace('-', '_')
@@ -123,10 +167,12 @@ jobs:
     name: Execute notebooks (ubuntu, Python 3.13)
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - uses: actions/setup-python@v6
         with:
           python-version: "3.13"
+          cache: 'pip'
+          cache-dependency-path: 'pyproject.toml'
       - name: Install notebook runner deps
         run: |
           python -m pip install --upgrade pip

{lib_cli_exit_tools-2.1.0 → lib_cli_exit_tools-2.2.0}/.github/workflows/codeql.yml

@@ -23,7 +23,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: Initialize CodeQL
         uses: github/codeql-action/init@v4

{lib_cli_exit_tools-2.1.0 → lib_cli_exit_tools-2.2.0}/.github/workflows/release.yml

@@ -14,29 +14,37 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - name: Verify PyPI token is set
         run: |
           if [ -z "${{ secrets.PYPI_API_TOKEN }}" ]; then
-            echo "::error title=Missing PyPI token::Set the PYPI_API_TOKEN secret in GitHub repository settings to enable PyPI publishing on releases." 
-            echo "See: https://docs.github.com/en/actions/security-guides/using-secrets-in-github-actions" 
+            echo "::error title=Missing PyPI token::Set the PYPI_API_TOKEN secret in GitHub repository settings to enable PyPI publishing on releases."
+            echo "See: https://docs.github.com/en/actions/security-guides/using-secrets-in-github-actions"
             exit 1
           fi
       - uses: actions/setup-python@v6
         with:
           python-version: '3.13'
+          cache: 'pip'
+          cache-dependency-path: 'pyproject.toml'
+      - name: Install uv
+        uses: astral-sh/setup-uv@v7
+        with:
+          enable-cache: true
       - name: Build artifacts
         run: |
-          python -m pip install --upgrade pip build
+          python -m pip install --upgrade pip
+          uv pip install build --system
           python -m build
       - name: Publish to PyPI
         # Use the rolling major tag to get latest Twine/standards support (e.g., Core Metadata 2.4)
         uses: pypa/gh-action-pypi-publish@release/v1
         with:
           password: ${{ secrets.PYPI_API_TOKEN }}
+          attestations: false
           skip-existing: true
       - name: Upload artifacts
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
           name: dist
           path: dist/*

{lib_cli_exit_tools-2.1.0 → lib_cli_exit_tools-2.2.0}/.gitignore

@@ -178,3 +178,4 @@ result
 poetry.lock
 pdm.lock
 uv.lock
+/.github_bak/

{lib_cli_exit_tools-2.1.0 → lib_cli_exit_tools-2.2.0}/CHANGELOG.md

@@ -3,6 +3,30 @@
 All notable changes to this project are documented here. The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) and the project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 
+## [2.2.0] - 2025-12-11
+
+### Changed
+- Lowered minimum Python version from 3.13 to 3.10 for broader compatibility.
+- Updated ruff target-version to py310 to match the new baseline.
+
+### Security
+- Added setuptools vulnerability IDs (PYSEC-2022-43012, CVE-2024-6345, PYSEC-2025-49) to pip-audit ignore list. These are build-time dependencies managed by the CI environment, not runtime dependencies.
+
+## [2.1.1] - 2025-12-08
+
+### Changed
+- Enforced strict data architecture by introducing TypedDict classes (`RichClickSnapshot`, `CliContextState`, `ConfigSnapshot`, `SessionOverrides`) to eliminate raw dictionary access patterns.
+- Added `_is_posix_platform()` helper function to centralise platform detection and avoid string literal comparisons.
+- Replaced assert-based type guards with explicit conditional checks to satisfy Bandit security scanning.
+
+### Refactored
+- Comprehensive test suite refactoring following clean architecture principles:
+  - Each test now verifies exactly one behaviour with descriptive naming.
+  - Added OS-specific markers (`@pytest.mark.posix_only`, `@pytest.mark.windows_only`, `@pytest.mark.os_agnostic`) for platform-aware test execution.
+  - Centralised shared fixtures in `conftest.py` including `cli_runner`, `strip_ansi`, `reset_config`, and `sysexits_mode`.
+  - Prefer real behaviour tests over mocks where possible, particularly for signal handling.
+  - Organised tests into logical sections with clear header comments.
+
 ## [2.1.0] - 2025-10-13
 
 ### Changed

{lib_cli_exit_tools-2.1.0 → lib_cli_exit_tools-2.2.0}/INSTALL.md

@@ -27,7 +27,7 @@ The sections below cover more specialised workflows, from editable installs to a
 
 ## Supported Python Versions
 
-`lib_cli_exit_tools` targets Python 3.13 and newer. Wheels are published for CPython on Linux, macOS, and Windows. For alternative interpreters (PyPy) install from source using `pip install lib_cli_exit_tools`.
+`lib_cli_exit_tools` targets Python 3.10 and newer. Wheels are published for CPython on Linux, macOS, and Windows. For alternative interpreters (PyPy) install from source using `pip install lib_cli_exit_tools`.
 
 ## Installation Flows
 

{lib_cli_exit_tools-2.1.0 → lib_cli_exit_tools-2.2.0}/Makefile

@@ -3,7 +3,7 @@ SHELL := /bin/bash
 PYTHON ?= python3
 SCRIPTS ?= $(PYTHON) -m scripts
 
-.PHONY: help install dev test run clean build push release coverage version-current bump bump-patch bump-minor bump-major menu
+.PHONY: help install dev test run clean build push release coverage version-current bump bump-patch bump-minor bump-major dependencies dependencies-update menu
 
 help:
 	$(SCRIPTS) help
@@ -50,5 +50,11 @@ build:
 release:
 	$(SCRIPTS) release
 
+dependencies:
+	$(SCRIPTS) dependencies
+
+dependencies-update:
+	$(SCRIPTS) dependencies-update
+
 menu:
 	$(SCRIPTS) menu

{lib_cli_exit_tools-2.1.0 → lib_cli_exit_tools-2.2.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: lib_cli_exit_tools
-Version: 2.1.0
+Version: 2.2.0
 Summary: CLI exit handling helpers: clean signals, exit codes, and error printing
 Project-URL: Homepage, https://github.com/bitranox/lib_cli_exit_tools
 Project-URL: Repository, https://github.com/bitranox/lib_cli_exit_tools.git
@@ -15,22 +15,23 @@ Classifier: Operating System :: OS Independent
 Classifier: Programming Language :: Python :: 3
 Classifier: Programming Language :: Python :: 3 :: Only
 Classifier: Typing :: Typed
-Requires-Python: >=3.13
-Requires-Dist: rich-click>=1.9.3
+Requires-Python: >=3.10
+Requires-Dist: rich-click>=1.9.4
 Provides-Extra: dev
-Requires-Dist: bandit>=1.8.6; extra == 'dev'
+Requires-Dist: bandit>=1.9.2; extra == 'dev'
 Requires-Dist: build>=1.3.0; extra == 'dev'
-Requires-Dist: codecov-cli>=11.2.3; extra == 'dev'
-Requires-Dist: coverage[toml]>=7.10.7; extra == 'dev'
-Requires-Dist: hypothesis>=6.140.3; extra == 'dev'
-Requires-Dist: import-linter>=2.5.2; extra == 'dev'
-Requires-Dist: pip-audit>=2.9.0; extra == 'dev'
-Requires-Dist: pyright>=1.1.406; extra == 'dev'
-Requires-Dist: pytest-asyncio>=1.2.0; extra == 'dev'
+Requires-Dist: codecov-cli>=11.2.6; extra == 'dev'
+Requires-Dist: coverage[toml]>=7.13.0; extra == 'dev'
+Requires-Dist: hypothesis>=6.148.7; extra == 'dev'
+Requires-Dist: import-linter>=2.8; extra == 'dev'
+Requires-Dist: pip-audit>=2.10.0; extra == 'dev'
+Requires-Dist: pyright>=1.1.407; extra == 'dev'
+Requires-Dist: pytest-asyncio>=1.3.0; extra == 'dev'
 Requires-Dist: pytest-cov>=7.0.0; extra == 'dev'
-Requires-Dist: pytest>=8.4.2; extra == 'dev'
-Requires-Dist: ruff>=0.14.0; extra == 'dev'
-Requires-Dist: textual>=6.3.0; extra == 'dev'
+Requires-Dist: pytest>=9.0.2; extra == 'dev'
+Requires-Dist: ruff>=0.14.8; extra == 'dev'
+Requires-Dist: textual>=6.8.0; extra == 'dev'
+Requires-Dist: tomli>=2.3.0; (python_version < '3.11') and extra == 'dev'
 Requires-Dist: twine>=6.2.0; extra == 'dev'
 Description-Content-Type: text/markdown
 
@@ -47,6 +48,7 @@ Description-Content-Type: text/markdown
 [![codecov](https://codecov.io/gh/bitranox/lib_cli_exit_tools/graph/badge.svg?token=z1D8JSjWEH)](https://codecov.io/gh/bitranox/lib_cli_exit_tools)
 [![Maintainability](https://qlty.sh/gh/bitranox/projects/lib_cli_exit_tools/maintainability.svg)](https://qlty.sh/gh/bitranox/projects/lib_cli_exit_tools)
 [![Known Vulnerabilities](https://snyk.io/test/github/bitranox/lib_cli_exit_tools/badge.svg)](https://snyk.io/test/github/bitranox/lib_cli_exit_tools)
+[![security: bandit](https://img.shields.io/badge/security-bandit-yellow.svg)](https://github.com/PyCQA/bandit)
 
 Small helpers for robust CLI exit handling:
 - Portable signal handling (SIGINT, SIGTERM/SIGBREAK)
@@ -55,7 +57,7 @@ Small helpers for robust CLI exit handling:
 
 ## Install
 
-Requires Python 3.13 or newer.
+Requires Python 3.10 or newer.
 
 ```bash
 pip install lib_cli_exit_tools
@@ -581,7 +583,7 @@ When installed, the generated console scripts (`lib-cli-exit-tools`, `cli-exit-t
 
 ## Modern Python Toolchain
 
-- Targets Python 3.13+ exclusively—no runtime shims or compatibility branches remain.
+- Targets Python 3.10+ for modern language features and broad compatibility.
 - Development extras track the latest stable releases published on PyPI so quality gates match local and CI environments.
 - GitHub Actions workflows rely on the current major releases of `actions/checkout`, `actions/setup-python`, and `astral-sh/setup-uv`, aligning the automation stack with the 2025 runner images.
 

{lib_cli_exit_tools-2.1.0 → lib_cli_exit_tools-2.2.0}/README.md

@@ -11,6 +11,7 @@
 [![codecov](https://codecov.io/gh/bitranox/lib_cli_exit_tools/graph/badge.svg?token=z1D8JSjWEH)](https://codecov.io/gh/bitranox/lib_cli_exit_tools)
 [![Maintainability](https://qlty.sh/gh/bitranox/projects/lib_cli_exit_tools/maintainability.svg)](https://qlty.sh/gh/bitranox/projects/lib_cli_exit_tools)
 [![Known Vulnerabilities](https://snyk.io/test/github/bitranox/lib_cli_exit_tools/badge.svg)](https://snyk.io/test/github/bitranox/lib_cli_exit_tools)
+[![security: bandit](https://img.shields.io/badge/security-bandit-yellow.svg)](https://github.com/PyCQA/bandit)
 
 Small helpers for robust CLI exit handling:
 - Portable signal handling (SIGINT, SIGTERM/SIGBREAK)
@@ -19,7 +20,7 @@ Small helpers for robust CLI exit handling:
 
 ## Install
 
-Requires Python 3.13 or newer.
+Requires Python 3.10 or newer.
 
 ```bash
 pip install lib_cli_exit_tools
@@ -545,7 +546,7 @@ When installed, the generated console scripts (`lib-cli-exit-tools`, `cli-exit-t
 
 ## Modern Python Toolchain
 
-- Targets Python 3.13+ exclusively—no runtime shims or compatibility branches remain.
+- Targets Python 3.10+ for modern language features and broad compatibility.
 - Development extras track the latest stable releases published on PyPI so quality gates match local and CI environments.
 - GitHub Actions workflows rely on the current major releases of `actions/checkout`, `actions/setup-python`, and `astral-sh/setup-uv`, aligning the automation stack with the 2025 runner images.
 

{lib_cli_exit_tools-2.1.0 → lib_cli_exit_tools-2.2.0}/pyproject.toml

@@ -1,10 +1,10 @@
 [project]
 name = "lib_cli_exit_tools"
-version = "2.1.0"
+version = "2.2.0"
 description = "CLI exit handling helpers: clean signals, exit codes, and error printing"
 readme = "README.md"
-requires-python = ">=3.13"
-dependencies = ["rich-click>=1.9.3"]
+requires-python = ">=3.10"
+dependencies = ["rich-click>=1.9.4"]
 license = { text = "MIT" }
 authors = [{ name = "bitranox", email = "bitranox@gmail.com" }]
 keywords = ["cli", "exit", "signals", "errors", "click"]
@@ -25,18 +25,19 @@ Issues = "https://github.com/bitranox/lib_cli_exit_tools/issues"
 [project.optional-dependencies]
 dev = [
   "build>=1.3.0",
-  "codecov-cli>=11.2.3",
-  "coverage[toml]>=7.10.7",
-  "hypothesis>=6.140.3",
-  "import-linter>=2.5.2",
-  "bandit>=1.8.6",
-  "pip-audit>=2.9.0",
-  "pyright>=1.1.406",
-  "pytest>=8.4.2",
-  "pytest-asyncio>=1.2.0",
+  "codecov-cli>=11.2.6",
+  "coverage[toml]>=7.13.0",
+  "hypothesis>=6.148.7",
+  "import-linter>=2.8",
+  "bandit>=1.9.2",
+  "pip-audit>=2.10.0",
+  "pyright>=1.1.407",
+  "pytest>=9.0.2",
+  "pytest-asyncio>=1.3.0",
   "pytest-cov>=7.0.0",
-  "ruff>=0.14.0",
-  "textual>=6.3.0",
+  "ruff>=0.14.8",
+  "textual>=6.8.0",
+  "tomli>=2.3.0;python_version<'3.11'",
   "twine>=6.2.0"
 ]
 
@@ -47,7 +48,7 @@ cli-exit-tools = "lib_cli_exit_tools.cli:main"
 lib-cli-exit-tools = "lib_cli_exit_tools.cli:main"
 
 [build-system]
-requires = ["hatchling>=1.27.0"]
+requires = ["hatchling>=1.28.0"]
 build-backend = "hatchling.build"
 
 [tool.hatch.build.targets.wheel]
@@ -56,7 +57,7 @@ include = ["src/lib_cli_exit_tools/py.typed"]
 
 [tool.ruff]
 line-length = 160
-target-version = "py313"
+target-version = "py310"
 
 [tool.ruff.lint.per-file-ignores]
 # ignore the "unused import sys" in the jupyter notebook - which we need (it is a linter hickup)
@@ -70,6 +71,7 @@ exclude = [
 
 [tool.pytest.ini_options]
 addopts = ["--doctest-modules"]
+pythonpath = ["src"]
 doctest_optionflags = ["ELLIPSIS", "NORMALIZE_WHITESPACE"]
 markers = [
   "os_agnostic: test exercises behavior that is the same on every operating system",
@@ -91,6 +93,39 @@ omit = [
 fail_under = 85
 show_missing = true
 
+[tool.clean]
+# Patterns to remove when running `make clean` or `python -m scripts clean`
+patterns = [
+  ".hypothesis",
+  ".import_linter_cache",
+  ".pytest_cache",
+  ".ruff_cache",
+  ".pyright",
+  ".mypy_cache",
+  ".tox",
+  ".nox",
+  ".eggs",
+  "*.egg-info",
+  "build",
+  "dist",
+  "htmlcov",
+  ".coverage",
+  "coverage.xml",
+  "codecov.sh",
+  ".cache",
+  "result",
+]
+
+[tool.git]
+# Default git remote for push/release commands
+default-remote = "origin"
+
+
+[tool.scripts.test]
+# Configuration for scripts/test.py test runner
+pytest-verbosity = "-vv"
+coverage-report-file = "coverage.xml"
+src-path = "src"
 [tool.importlinter]
 root_package = "lib_cli_exit_tools"
 
@@ -116,3 +151,18 @@ source_modules = [
 forbidden_modules = [
   "lib_cli_exit_tools.cli",
 ]
+
+[tool.pip-audit]
+# Known vulnerabilities to ignore (unfixable or accepted risk)
+# GHSA-4xh5-x5gv-qwph: py library ReDoS (no fix available, low risk)
+# PYSEC-2022-42969: same as above (alias)
+# PYSEC-2022-43012, CVE-2024-6345, PYSEC-2025-49: setuptools vulnerabilities
+#   These are build-time dependencies only, not runtime. The virtual environment
+#   setuptools version is managed by the CI environment/pip itself.
+ignore-vulns = [
+  "GHSA-4xh5-x5gv-qwph",
+  "PYSEC-2022-42969",
+  "PYSEC-2022-43012",
+  "CVE-2024-6345",
+  "PYSEC-2025-49",
+]