masster 0.2.5__tar.gz → 0.3.0__tar.gz

masster-0.3.0/.github/workflows/publish.yml

@@ -0,0 +1,174 @@
+name: Create release and Publish to PyPI
+
+on:
+  workflow_dispatch:
+    inputs:
+      version:
+        description: 'Version to release (e.g., v1.0.0)'
+        required: true
+        type: string
+      test_pypi:
+        description: 'Publish to Test PyPI instead of PyPI'
+        required: false
+        default: false
+        type: boolean
+
+jobs:
+  create-release:
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v4
+      with:
+        fetch-depth: 0
+
+    - name: Set up Python
+      uses: actions/setup-python@v5
+      with:
+        python-version: "3.11"
+
+    - name: Update version in pyproject.toml
+      run: |
+        # Remove 'v' prefix if present
+        VERSION="${{ github.event.inputs.version }}"
+        VERSION=${VERSION#v}
+        
+        # Update version in pyproject.toml
+        sed -i "s/^version = \".*\"/version = \"$VERSION\"/" pyproject.toml
+        
+        # Verify the change
+        echo "Updated pyproject.toml version:"
+        grep "^version = " pyproject.toml
+
+    - name: Update version in _version.py
+      run: |
+        # Remove 'v' prefix if present
+        VERSION="${{ github.event.inputs.version }}"
+        VERSION=${VERSION#v}
+        
+        # Update version in _version.py
+        sed -i "s/__version__ = \".*\"/__version__ = \"$VERSION\"/" src/masster/_version.py
+        
+        # Verify the change
+        echo "Updated _version.py:"
+        grep "__version__ = " src/masster/_version.py
+
+    - name: Commit version updates
+      run: |
+        git config --local user.email "action@github.com"
+        git config --local user.name "GitHub Action"
+        git add pyproject.toml src/masster/_version.py
+        git commit -m "Update version to ${{ github.event.inputs.version }}" || echo "No changes to commit"
+        git push
+
+    - name: Create Release
+      id: create-release
+      uses: softprops/action-gh-release@v1
+      with:
+        tag_name: ${{ github.event.inputs.version }}
+        name: Release ${{ github.event.inputs.version }}
+        draft: false
+        prerelease: false
+        generate_release_notes: true
+      env:
+        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+  build:
+    needs: create-release
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v4
+      with:
+        fetch-depth: 0
+
+    - name: Pull latest changes
+      run: git pull origin ${{ github.ref_name }}
+
+    - name: Verify version synchronization
+      run: |
+        echo "Checking version synchronization..."
+        PYPROJECT_VERSION=$(grep "^version = " pyproject.toml | sed 's/version = "\(.*\)"/\1/')
+        VERSION_PY=$(grep "__version__ = " src/masster/_version.py | sed 's/__version__ = "\(.*\)"/\1/')
+        INPUT_VERSION="${{ github.event.inputs.version }}"
+        INPUT_VERSION=${INPUT_VERSION#v}
+        
+        echo "Input version: $INPUT_VERSION"
+        echo "pyproject.toml version: $PYPROJECT_VERSION"
+        echo "_version.py version: $VERSION_PY"
+        
+        if [ "$PYPROJECT_VERSION" != "$INPUT_VERSION" ] || [ "$VERSION_PY" != "$INPUT_VERSION" ]; then
+          echo "Version mismatch detected!"
+          exit 1
+        fi
+        echo "All versions synchronized correctly!"
+
+    - name: Set up Python
+      uses: actions/setup-python@v5
+      with:
+        python-version: "3.11"
+
+    - name: Install UV
+      uses: astral-sh/setup-uv@v3
+
+    - name: Install dependencies
+      run: |
+        uv sync --all-extras --dev
+
+    - name: Run tests
+      run: |
+        uv run pytest tests/ -v
+
+    - name: Build package
+      run: |
+        uv build
+
+    - name: Check package
+      run: |
+        uv run twine check dist/*
+
+    - name: Upload build artifacts
+      uses: actions/upload-artifact@v4
+      with:
+        name: dist
+        path: dist/
+
+  publish-test-pypi:
+    needs: build
+    runs-on: ubuntu-latest
+    if: github.event.inputs.test_pypi == 'true'
+    environment:
+      name: testpypi
+      url: https://test.pypi.org/p/masster
+    permissions:
+      id-token: write
+
+    steps:
+    - name: Download build artifacts
+      uses: actions/download-artifact@v4
+      with:
+        name: dist
+        path: dist/
+
+    - name: Publish to Test PyPI
+      uses: pypa/gh-action-pypi-publish@release/v1
+      with:
+        repository-url: https://test.pypi.org/legacy/
+
+  publish-pypi:
+    needs: build
+    runs-on: ubuntu-latest
+    if: github.event.inputs.test_pypi != 'true'
+    environment:
+      name: pypi
+      url: https://pypi.org/p/masster
+    permissions:
+      id-token: write
+
+    steps:
+    - name: Download build artifacts
+      uses: actions/download-artifact@v4
+      with:
+        name: dist
+        path: dist/
+
+    - name: Publish to PyPI
+      uses: pypa/gh-action-pypi-publish@release/v1

masster-0.3.0/.github/workflows/security.yml

@@ -0,0 +1,88 @@
+name: Security Scan
+
+on:
+  workflow_dispatch:
+    inputs:
+      scan_type:
+        description: 'Type of security scan to run'
+        required: false
+        default: 'all'
+        type: choice
+        options:
+          - all
+          - safety-only
+          - bandit-only
+      upload_reports:
+        description: 'Upload security reports as artifacts'
+        required: false
+        default: true
+        type: boolean
+  schedule:
+    - cron: '0 3 * * 1'  # Weekly on Monday at 3 AM UTC
+
+jobs:
+  security:
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v4
+
+    - name: Set up Python
+      uses: actions/setup-python@v5
+      with:
+        python-version: "3.11"
+
+    - name: Install UV
+      uses: astral-sh/setup-uv@v3
+
+    - name: Install dependencies
+      run: |
+        uv sync --all-extras --dev
+
+    - name: Run safety check
+      if: github.event_name == 'schedule' || github.event.inputs.scan_type == 'all' || github.event.inputs.scan_type == 'safety-only'
+      run: |
+        echo "Running Safety security scan..."
+        uv run safety check --json --output safety-report.json || true
+        echo "Safety scan completed. Check safety-report.json for results."
+
+    - name: Run bandit security check
+      if: github.event_name == 'schedule' || github.event.inputs.scan_type == 'all' || github.event.inputs.scan_type == 'bandit-only'
+      run: |
+        echo "Running Bandit security scan..."
+        uv run bandit -r src/masster -f json -o bandit-report.json || true
+        echo "Bandit scan completed. Check bandit-report.json for results."
+
+    - name: Display scan summary
+      run: |
+        echo "=== Security Scan Summary ==="
+        if [ "${{ github.event_name }}" = "schedule" ]; then
+          echo "Scan type: all (scheduled run)"
+        else
+          echo "Scan type: ${{ github.event.inputs.scan_type || 'all' }}"
+        fi
+        
+        if [[ ("${{ github.event_name }}" == "schedule") || ("${{ github.event.inputs.scan_type }}" == "all" || "${{ github.event.inputs.scan_type }}" == "safety-only") ]] && [ -f safety-report.json ]; then
+          echo "Safety report generated: safety-report.json"
+          # Show summary if available
+          if command -v jq &> /dev/null && [ -s safety-report.json ]; then
+            echo "Safety vulnerabilities found: $(jq '.vulnerabilities | length' safety-report.json 2>/dev/null || echo 'Unable to parse')"
+          fi
+        fi
+        
+        if [[ ("${{ github.event_name }}" == "schedule") || ("${{ github.event.inputs.scan_type }}" == "all" || "${{ github.event.inputs.scan_type }}" == "bandit-only") ]] && [ -f bandit-report.json ]; then
+          echo "Bandit report generated: bandit-report.json"
+          # Show summary if available
+          if command -v jq &> /dev/null && [ -s bandit-report.json ]; then
+            echo "Bandit issues found: $(jq '.results | length' bandit-report.json 2>/dev/null || echo 'Unable to parse')"
+          fi
+        fi
+
+    - name: Upload security reports
+      if: github.event_name == 'schedule' || github.event.inputs.upload_reports == 'true'
+      uses: actions/upload-artifact@v4
+      with:
+        name: security-reports-${{ github.run_number }}
+        path: |
+          safety-report.json
+          bandit-report.json
+        retention-days: 30

masster-0.3.0/.github/workflows/test.yml

@@ -0,0 +1,164 @@
+name: Test Suite
+
+on:
+  workflow_dispatch:
+    inputs:
+      run_all_tests:
+        description: 'Run tests on all OS and Python versions'
+        required: false
+        default: true
+        type: boolean
+      target_os:
+        description: 'Target OS for testing (if not running all)'
+        required: false
+        default: 'ubuntu-latest'
+        type: choice
+        options:
+          - ubuntu-latest
+          - windows-latest
+          - macos-latest
+      python_version:
+        description: 'Python version for testing (if not running all)'
+        required: false
+        default: '3.11'
+        type: choice
+        options:
+          - '3.11'
+          - '3.12'
+          - '3.13'
+  schedule:
+    - cron: '0 2 * * 1'  # Weekly on Monday at 2 AM UTC
+
+jobs:
+  test-all:
+    if: github.event_name == 'schedule' || github.event.inputs.run_all_tests == 'true'
+    runs-on: ${{ matrix.os }}
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [ubuntu-latest, windows-latest, macos-latest]
+        python-version: ["3.11", "3.12", "3.13"]
+        exclude:
+          # Exclude macOS with Python 3.11 and 3.12 to reduce CI costs
+          - os: macos-latest
+            python-version: "3.11"
+          - os: macos-latest
+            python-version: "3.12"
+          # Exclude Windows with Python 3.12 to reduce CI costs
+          - os: windows-latest
+            python-version: "3.12"
+
+    steps:
+    - uses: actions/checkout@v4
+
+    - name: Set up Python ${{ matrix.python-version }}
+      uses: actions/setup-python@v5
+      with:
+        python-version: ${{ matrix.python-version }}
+
+    - name: Install UV
+      uses: astral-sh/setup-uv@v3
+      with:
+        enable-cache: true
+        cache-dependency-glob: "uv.lock"
+
+    - name: Install dependencies
+      run: |
+        uv sync --all-extras --dev
+
+    - name: Lint with flake8
+      run: |
+        uv run flake8 src/masster tests --count --select=E9,F63,F7,F82 --show-source --statistics
+        uv run flake8 src/masster tests --count --exit-zero --max-complexity=10 --max-line-length=88 --statistics
+
+    - name: Type check with mypy
+      run: |
+        uv run mypy src/masster --ignore-missing-imports --no-strict-optional
+
+    - name: Test with pytest
+      run: |
+        uv run pytest tests/ -v --cov=masster --cov-report=xml --cov-report=term-missing
+
+    - name: Upload coverage to Codecov
+      if: matrix.os == 'ubuntu-latest' && matrix.python-version == '3.11'
+      uses: codecov/codecov-action@v3
+      with:
+        file: ./coverage.xml
+        flags: unittests
+        name: codecov-umbrella
+
+  test-selective:
+    if: github.event_name == 'workflow_dispatch' && github.event.inputs.run_all_tests != 'true'
+    runs-on: ${{ github.event.inputs.target_os || 'ubuntu-latest' }}
+
+    steps:
+    - uses: actions/checkout@v4
+
+    - name: Set up Python ${{ github.event.inputs.python_version || '3.11' }}
+      uses: actions/setup-python@v5
+      with:
+        python-version: ${{ github.event.inputs.python_version || '3.11' }}
+
+    - name: Install UV
+      uses: astral-sh/setup-uv@v3
+      with:
+        enable-cache: true
+        cache-dependency-glob: "uv.lock"
+
+    - name: Install dependencies
+      run: |
+        uv sync --all-extras --dev
+
+    - name: Lint with flake8
+      run: |
+        uv run flake8 src/masster tests --count --select=E9,F63,F7,F82 --show-source --statistics
+        uv run flake8 src/masster tests --count --exit-zero --max-complexity=10 --max-line-length=88 --statistics
+
+    - name: Type check with mypy
+      run: |
+        uv run mypy src/masster --ignore-missing-imports --no-strict-optional
+
+    - name: Test with pytest
+      run: |
+        uv run pytest tests/ -v --cov=masster --cov-report=xml --cov-report=term-missing
+
+    - name: Upload coverage to Codecov
+      if: github.event.inputs.target_os == 'ubuntu-latest' && github.event.inputs.python_version == '3.11'
+      uses: codecov/codecov-action@v3
+      with:
+        file: ./coverage.xml
+        flags: unittests
+        name: codecov-umbrella
+
+  build:
+    needs: [test-all, test-selective]
+    if: always() && (needs.test-all.result == 'success' || needs.test-selective.result == 'success')
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v4
+
+    - name: Set up Python
+      uses: actions/setup-python@v5
+      with:
+        python-version: "3.11"
+
+    - name: Install UV
+      uses: astral-sh/setup-uv@v3
+
+    - name: Install dependencies
+      run: |
+        uv sync --all-extras --dev
+
+    - name: Build package
+      run: |
+        uv build
+
+    - name: Check package
+      run: |
+        uv run twine check dist/*
+
+    - name: Upload build artifacts
+      uses: actions/upload-artifact@v4
+      with:
+        name: dist
+        path: dist/