mq-bridge-py-basic 0.2.20__tar.gz → 0.3.0__tar.gz

{mq_bridge_py_basic-0.2.20 → mq_bridge_py_basic-0.3.0}/.github/workflows/ci.yml

@@ -23,17 +23,13 @@ jobs:
         with:
           components: rustfmt, clippy
       
-      - name: Cache cargo registry
-        uses: actions/cache@v4
+      - name: Cache cargo build
+        uses: Swatinem/rust-cache@v2
         with:
-          path: |
-            ~/.cargo/bin/
-            ~/.cargo/registry/cache/
-            ~/.cargo/git/db/
-            target/
-          key: ${{ runner.os }}-cargo-${{ hashFiles('**/Cargo.lock') }}
-          restore-keys: |
-            ${{ runner.os }}-cargo-
+          # Differentiates the matrix `check` job per feature set; evaluates to an
+          # empty string (no-op) in non-matrix jobs. rust-cache already keys on the
+          # job id, OS, rustc version, and lockfiles automatically.
+          key: ${{ matrix.features }}
       
       - name: Check formatting
         run: cargo fmt --all -- --check
@@ -65,24 +61,20 @@ jobs:
       - name: Install Rust toolchain
         uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable
       
-      - name: Cache cargo registry
-        uses: actions/cache@v4
+      - name: Cache cargo build
+        uses: Swatinem/rust-cache@v2
         with:
-          path: |
-            ~/.cargo/bin/
-            ~/.cargo/registry/cache/
-            ~/.cargo/git/db/
-            target/
-          key: ${{ runner.os }}-cargo-${{ hashFiles('**/Cargo.lock') }}
-          restore-keys: |
-            ${{ runner.os }}-cargo-
+          # Differentiates the matrix `check` job per feature set; evaluates to an
+          # empty string (no-op) in non-matrix jobs. rust-cache already keys on the
+          # job id, OS, rustc version, and lockfiles automatically.
+          key: ${{ matrix.features }}
       
-      - name: Build
+      - name: Check
         run: |
           if [ -z "${{ matrix.features }}" ]; then
-            cargo build --release
+            cargo check --all-targets
           else
-            cargo build --release --features "${{ matrix.features }}"
+            cargo check --all-targets --features "${{ matrix.features }}"
           fi
 
   # Unit tests
@@ -95,24 +87,26 @@ jobs:
       - name: Install Rust toolchain
         uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable
       
-      - name: Cache cargo registry
-        uses: actions/cache@v4
+      - name: Cache cargo build
+        uses: Swatinem/rust-cache@v2
         with:
-          path: |
-            ~/.cargo/bin/
-            ~/.cargo/registry/cache/
-            ~/.cargo/git/db/
-            target/
-          key: ${{ runner.os }}-cargo-${{ hashFiles('**/Cargo.lock') }}
-          restore-keys: |
-            ${{ runner.os }}-cargo-
+          # Differentiates the matrix `check` job per feature set; evaluates to an
+          # empty string (no-op) in non-matrix jobs. rust-cache already keys on the
+          # job id, OS, rustc version, and lockfiles automatically.
+          key: ${{ matrix.features }}
       
       - name: Run unit tests
-        run: cargo test --lib --features=full 
+        run: cargo test --lib --features=full
 # currently - just random panic test
 #      - name: Run long-running unit tests
 #        run: cargo test --lib --features=full -- --ignored --nocapture
 
+      - name: Run non-Docker integration tests
+        run: cargo test --test ref_test --test sqlite_test --test tls_example --test websocket_test --features=full
+
+      - name: Memory leak soak (route commit-task JoinSet)
+        run: cargo test --test memory_leak_test --features=full -- --ignored --nocapture
+
   # Integration tests (requires Docker) split into parallel jobs
   integration-others:
     name: Integration — Others
@@ -127,17 +121,13 @@ jobs:
       - name: Install Rust toolchain
         uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable
       
-      - name: Cache cargo registry
-        uses: actions/cache@v4
+      - name: Cache cargo build
+        uses: Swatinem/rust-cache@v2
         with:
-          path: |
-            ~/.cargo/bin/
-            ~/.cargo/registry/cache/
-            ~/.cargo/git/db/
-            target/
-          key: ${{ runner.os }}-cargo-${{ hashFiles('**/Cargo.lock') }}
-          restore-keys: |
-            ${{ runner.os }}-cargo-
+          # Differentiates the matrix `check` job per feature set; evaluates to an
+          # empty string (no-op) in non-matrix jobs. rust-cache already keys on the
+          # job id, OS, rustc version, and lockfiles automatically.
+          key: ${{ matrix.features }}
       
       - name: Pre-pull docker images
         run: |
@@ -175,17 +165,13 @@ jobs:
       - name: Install Rust toolchain
         uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable
 
-      - name: Cache cargo registry
-        uses: actions/cache@v4
+      - name: Cache cargo build
+        uses: Swatinem/rust-cache@v2
         with:
-          path: |
-            ~/.cargo/bin/
-            ~/.cargo/registry/cache/
-            ~/.cargo/git/db/
-            target/
-          key: ${{ runner.os }}-cargo-${{ hashFiles('**/Cargo.lock') }}
-          restore-keys: |
-            ${{ runner.os }}-cargo-
+          # Differentiates the matrix `check` job per feature set; evaluates to an
+          # empty string (no-op) in non-matrix jobs. rust-cache already keys on the
+          # job id, OS, rustc version, and lockfiles automatically.
+          key: ${{ matrix.features }}
 
       - name: Pre-pull docker images
         run: |
@@ -223,17 +209,13 @@ jobs:
       - name: Install Rust toolchain
         uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable
 
-      - name: Cache cargo registry
-        uses: actions/cache@v4
+      - name: Cache cargo build
+        uses: Swatinem/rust-cache@v2
         with:
-          path: |
-            ~/.cargo/bin/
-            ~/.cargo/registry/cache/
-            ~/.cargo/git/db/
-            target/
-          key: ${{ runner.os }}-cargo-${{ hashFiles('**/Cargo.lock') }}
-          restore-keys: |
-            ${{ runner.os }}-cargo-
+          # Differentiates the matrix `check` job per feature set; evaluates to an
+          # empty string (no-op) in non-matrix jobs. rust-cache already keys on the
+          # job id, OS, rustc version, and lockfiles automatically.
+          key: ${{ matrix.features }}
 
       - name: Pre-pull docker images
         run: |
@@ -264,20 +246,13 @@ jobs:
       - name: Install Rust toolchain
         uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable
       
-      - name: Cache cargo registry
-        uses: actions/cache@v4
+      - name: Cache cargo build
+        uses: Swatinem/rust-cache@v2
         with:
-          path: |
-            ~/.cargo/bin/
-            ~/.cargo/registry/cache/
-            ~/.cargo/git/db/
-            target/
-          key: ${{ runner.os }}-cargo-${{ hashFiles('**/Cargo.lock') }}
-          restore-keys: |
-            ${{ runner.os }}-cargo-
-      
-      - name: Build documentation
-        run: cargo doc --all-features --no-deps
+          # Differentiates the matrix `check` job per feature set; evaluates to an
+          # empty string (no-op) in non-matrix jobs. rust-cache already keys on the
+          # job id, OS, rustc version, and lockfiles automatically.
+          key: ${{ matrix.features }}
       
-      - name: Check for broken links
-        run: cargo doc --all-features --no-deps 2>&1 | grep -i "warning\|error" && exit 1 || exit 0
+      - name: Build documentation (deny warnings)
+        run: RUSTDOCFLAGS="-D warnings" cargo doc --all-features --no-deps

{mq_bridge_py_basic-0.2.20 → mq_bridge_py_basic-0.3.0}/.github/workflows/ibm-mq.yml

@@ -54,10 +54,18 @@ jobs:
             ${{ runner.os }}-cargo-
       
       - name: Install IBM MQ Client Libraries
+        id: mqclient
         run: |
           archive_url="$IBM_MQ_REDIST_URL"
           archive_name="$(basename "$archive_url")"
-          curl -fsSLO "$archive_url"
+          # IBM's download host is occasionally unreachable from runners. Treat a
+          # download failure as infrastructure flakiness and skip the rest of the
+          # job (see `if:` guards below). Checksum/extract failures still fail.
+          if ! curl -fsSLO --retry 5 --retry-all-errors --retry-delay 5 --connect-timeout 30 "$archive_url"; then
+            echo "::warning::IBM MQ redist download failed (host unreachable); skipping IBM MQ build."
+            echo "available=false" >> "$GITHUB_OUTPUT"
+            exit 0
+          fi
           echo "${IBM_MQ_REDIST_SHA256}  ${archive_name}" | sha256sum -c -
           # The redist archive extracts a self-contained MQ install tree
           # (bin/, lib64/, inc/, ...) with no top-level mqm/ dir, so unpack
@@ -66,16 +74,20 @@ jobs:
           sudo tar -xzf "$archive_name" -C /opt/mqm
           echo "LD_LIBRARY_PATH=/opt/mqm/lib64:$LD_LIBRARY_PATH" >> $GITHUB_ENV
           echo "MQ_INSTALLATION_PATH=/opt/mqm" >> $GITHUB_ENV
-      
+          echo "available=true" >> "$GITHUB_OUTPUT"
+
       - name: Verify MQ client installation
+        if: steps.mqclient.outputs.available == 'true'
         run: |
           ls -la /opt/mqm/lib64/ || echo "MQ lib64 directory not found"
           echo "LD_LIBRARY_PATH=$LD_LIBRARY_PATH"
-      
+
       - name: Build with IBM MQ feature
+        if: steps.mqclient.outputs.available == 'true'
         run: cargo build --features ibm-mq
-      
+
       - name: Run clippy on IBM MQ code
+        if: steps.mqclient.outputs.available == 'true'
         run: cargo clippy --features ibm-mq -- -D warnings
 
   # Integration tests with Docker
@@ -102,10 +114,18 @@ jobs:
             ${{ runner.os }}-cargo-
       
       - name: Install IBM MQ Client Libraries
+        id: mqclient
         run: |
           archive_url="$IBM_MQ_REDIST_URL"
           archive_name="$(basename "$archive_url")"
-          curl -fsSLO "$archive_url"
+          # IBM's download host is occasionally unreachable from runners. Treat a
+          # download failure as infrastructure flakiness and skip the rest of the
+          # job (see `if:` guards below). Checksum/extract failures still fail.
+          if ! curl -fsSLO --retry 5 --retry-all-errors --retry-delay 5 --connect-timeout 30 "$archive_url"; then
+            echo "::warning::IBM MQ redist download failed (host unreachable); skipping IBM MQ integration tests."
+            echo "available=false" >> "$GITHUB_OUTPUT"
+            exit 0
+          fi
           echo "${IBM_MQ_REDIST_SHA256}  ${archive_name}" | sha256sum -c -
           # The redist archive extracts a self-contained MQ install tree
           # (bin/, lib64/, inc/, ...) with no top-level mqm/ dir, so unpack
@@ -114,23 +134,28 @@ jobs:
           sudo tar -xzf "$archive_name" -C /opt/mqm
           echo "LD_LIBRARY_PATH=/opt/mqm/lib64:$LD_LIBRARY_PATH" >> $GITHUB_ENV
           echo "MQ_INSTALLATION_PATH=/opt/mqm" >> $GITHUB_ENV
-      
+          echo "available=true" >> "$GITHUB_OUTPUT"
+
       - name: Install JDK (for keytool - TLS tests)
+        if: steps.mqclient.outputs.available == 'true'
         run: |
           sudo apt-get update
           sudo apt-get install -y default-jdk
-      
+
       - name: Generate TLS certificates
+        if: steps.mqclient.outputs.available == 'true'
         run: |
           chmod +x tests/integration/scripts/gen_certs.sh
           ./tests/integration/scripts/gen_certs.sh ibm-mq
-      
+
       - name: Pull IBM MQ Docker images
+        if: steps.mqclient.outputs.available == 'true'
         run: |
           docker compose -f tests/integration/docker-compose/ibm_mq.yml pull
           docker compose -f tests/integration/docker-compose/ibm_mq_tls.yml pull
-      
+
       - name: Run IBM MQ integration tests
+        if: steps.mqclient.outputs.available == 'true'
         run: |
           cargo test --test integration_test --features ibm-mq,test-utils,rustls-ring -- \
             --ignored --nocapture --test-threads=1 \
@@ -138,8 +163,9 @@ jobs:
             test_ibm_mq_performance_pipeline \
             test_ibm_mq_chaos \
             test_ibm_mq_status
-      
+
       - name: Run IBM MQ TLS tests
+        if: steps.mqclient.outputs.available == 'true'
         run: |
           cargo test --test integration_test --features ibm-mq,test-utils,rustls-ring -- \
             --ignored --nocapture --test-threads=1 \
@@ -171,7 +197,7 @@ jobs:
         run: |
           archive_url="$IBM_MQ_REDIST_URL"
           archive_name="$(basename "$archive_url")"
-          curl -fsSLO "$archive_url"
+          curl -fsSLO --retry 5 --retry-all-errors --retry-delay 5 --connect-timeout 30 "$archive_url"
           echo "${IBM_MQ_REDIST_SHA256}  ${archive_name}" | sha256sum -c -
           # The redist archive extracts a self-contained MQ install tree
           # (bin/, lib64/, inc/, ...) with no top-level mqm/ dir, so unpack

mq_bridge_py_basic-0.3.0/.github/workflows/node.yml

@@ -0,0 +1,69 @@
+name: Node
+
+on:
+  push:
+    branches: [main]
+    paths:
+      - ".github/workflows/node.yml"
+      - "node/mq-bridge-node/**"
+      - "Cargo.toml"
+      - "Cargo.lock"
+      - "src/**"
+  pull_request:
+    branches: [main, dev]
+    paths:
+      - ".github/workflows/node.yml"
+      - "node/mq-bridge-node/**"
+      - "Cargo.toml"
+      - "Cargo.lock"
+      - "src/**"
+  workflow_dispatch:
+
+env:
+  CARGO_TERM_COLOR: always
+
+jobs:
+  test:
+    name: Node binding smoke test
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+        with:
+          persist-credentials: false
+
+      - name: Install Rust toolchain
+        uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable
+
+      - name: Set up Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: "20"
+          cache: npm
+          cache-dependency-path: node/mq-bridge-node/package-lock.json
+
+      - name: Cache cargo registry
+        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
+        with:
+          path: |
+            ~/.cargo/bin/
+            ~/.cargo/registry/cache/
+            ~/.cargo/git/db/
+            target/
+          key: ${{ runner.os }}-node-cargo-${{ hashFiles('**/Cargo.lock') }}
+          restore-keys: |
+            ${{ runner.os }}-node-cargo-
+
+      - name: Install Node dependencies
+        working-directory: node/mq-bridge-node
+        run: npm ci
+
+      - name: Check Rust binding
+        run: cargo check -p mq-bridge-node --no-default-features --features "http middleware schema"
+
+      - name: Build native addon
+        working-directory: node/mq-bridge-node
+        run: npm run build:ci
+
+      - name: Run Node tests
+        working-directory: node/mq-bridge-node
+        run: npm test

mq_bridge_py_basic-0.3.0/.github/workflows/publish-node.yml

@@ -0,0 +1,251 @@
+name: Publish Node Package
+
+# Publishes the napi-rs addon as the standard layout: a thin root package
+# `mq-bridge` plus one binary package per platform
+# (`mq-bridge-darwin-arm64`, `mq-bridge-linux-x64-gnu`, ...). The root lists the
+# platform packages as optionalDependencies, so each consumer downloads only its
+# own ~20MB binary; the napi loader (native.js) requires the matching one.
+#
+# Linux is built inside a Debian 11 (glibc 2.31) container so the binaries run on
+# RHEL 9 (glibc 2.34), Debian 11/12 and Ubuntu 20.04+ — covering the priority
+# server targets. macOS/Windows build natively.
+#
+# Auth: token-or-OIDC. If the `NPM_TOKEN` secret is set it is used (needed for the
+# one-time bootstrap that creates the 5 platform packages, since npm has no
+# pending-publisher concept). Once all six packages exist and trusted publishing
+# is configured for them, remove the secret and publishing continues via OIDC
+# (id-token) with provenance — no token.
+
+on:
+  release:
+    types:
+      - published
+  workflow_dispatch:
+
+env:
+  CARGO_TERM_COLOR: always
+
+jobs:
+  build-linux:
+    name: Build ${{ matrix.target }}
+    runs-on: ${{ matrix.runner }}
+    permissions:
+      contents: read
+    container:
+      # Debian 11 bullseye => glibc 2.31 baseline (runs on RHEL 9 / Debian 11+ /
+      # Ubuntu 20.04+). Pulled natively per arch on the matching runner.
+      image: node:20-bullseye
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - runner: ubuntu-22.04
+            target: x86_64-unknown-linux-gnu
+          - runner: ubuntu-22.04-arm
+            target: aarch64-unknown-linux-gnu
+    steps:
+      - uses: actions/checkout@v4
+
+      # rdkafka builds librdkafka from source (cc/make) and aws-lc-sys needs
+      # cmake; the slim node image lacks these.
+      - name: Install build toolchain
+        run: |
+          apt-get update -qq
+          apt-get install -y --no-install-recommends build-essential cmake perl pkg-config
+
+      - name: Install Rust toolchain
+        run: |
+          curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh -s -- -y --profile minimal
+          echo "$HOME/.cargo/bin" >> "$GITHUB_PATH"
+
+      - name: Install Node dependencies
+        working-directory: node/mq-bridge-node
+        run: npm ci
+
+      - name: Build native addon (full)
+        working-directory: node/mq-bridge-node
+        env:
+          CARGO_NET_RETRY: "5"
+          CARGO_NET_GIT_FETCH_WITH_CLI: "true"
+        run: >-
+          npx napi build --platform --release --strip
+          --target ${{ matrix.target }}
+          --js native.js --dts native.d.ts
+
+      - name: Upload addon
+        uses: actions/upload-artifact@v4
+        with:
+          name: bindings-${{ matrix.target }}
+          path: node/mq-bridge-node/*.node
+          if-no-files-found: error
+
+      # The root package ships the generated loader; upload it once.
+      - name: Upload loader
+        if: matrix.target == 'x86_64-unknown-linux-gnu'
+        uses: actions/upload-artifact@v4
+        with:
+          name: loader
+          path: |
+            node/mq-bridge-node/native.js
+            node/mq-bridge-node/native.d.ts
+          if-no-files-found: error
+
+  build-native:
+    name: Build ${{ matrix.target }}
+    runs-on: ${{ matrix.runner }}
+    permissions:
+      contents: read
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - runner: macos-15-intel
+            target: x86_64-apple-darwin
+          - runner: macos-latest
+            target: aarch64-apple-darwin
+          - runner: windows-latest
+            target: x86_64-pc-windows-msvc
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: "20"
+          cache: npm
+          cache-dependency-path: node/mq-bridge-node/package-lock.json
+
+      - name: Install Rust toolchain
+        uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable
+        with:
+          targets: ${{ matrix.target }}
+
+      - name: Install Node dependencies
+        working-directory: node/mq-bridge-node
+        run: npm ci
+
+      - name: Build native addon (full)
+        working-directory: node/mq-bridge-node
+        env:
+          CARGO_NET_RETRY: "5"
+          CARGO_NET_GIT_FETCH_WITH_CLI: "true"
+        run: >-
+          npx napi build --platform --release --strip
+          --target ${{ matrix.target }}
+          --js native.js --dts native.d.ts
+
+      - name: Upload addon
+        uses: actions/upload-artifact@v4
+        with:
+          name: bindings-${{ matrix.target }}
+          path: node/mq-bridge-node/*.node
+          if-no-files-found: error
+
+  publish:
+    name: Publish to npm
+    runs-on: ubuntu-latest
+    needs: [build-linux, build-native]
+    permissions:
+      contents: read
+      id-token: write # OIDC trusted publishing + provenance
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: "20"
+          registry-url: "https://registry.npmjs.org"
+          cache: npm
+          cache-dependency-path: node/mq-bridge-node/package-lock.json
+
+      # Trusted publishing (OIDC) requires npm >= 11.5.1.
+      - name: Update npm
+        run: npm install -g npm@11.5.1
+
+      - name: Install Node dependencies
+        working-directory: node/mq-bridge-node
+        run: npm ci
+
+      - name: Sync version from Cargo workspace
+        working-directory: node/mq-bridge-node
+        run: npm run sync-version
+
+      - name: Download loader into package root
+        uses: actions/download-artifact@v4
+        with:
+          name: loader
+          path: node/mq-bridge-node
+
+      - name: Download platform addons
+        uses: actions/download-artifact@v4
+        with:
+          pattern: bindings-*
+          path: node/mq-bridge-node/artifacts
+
+      - name: Create per-platform npm dirs
+        working-directory: node/mq-bridge-node
+        run: npx napi create-npm-dirs
+
+      - name: Distribute addons into npm dirs
+        working-directory: node/mq-bridge-node
+        run: npx napi artifacts -d artifacts
+
+      - name: List npm dirs
+        working-directory: node/mq-bridge-node
+        run: ls -R npm
+
+      # The default per-platform README is ~88 bytes; paired with a 50-67MB
+      # binary that low-content signature trips npm's new-package spam filter
+      # (E403 "Package name triggered spam detection"). Give each stub a real
+      # README plus description/homepage/keywords so it doesn't read as a
+      # placeholder. (Server-side heuristic; reduces but cannot guarantee a pass.)
+      - name: Enrich platform package metadata
+        working-directory: node/mq-bridge-node
+        run: |
+          set -e
+          for dir in npm/*/; do
+            name=$(node -p "require('./$dir/package.json').name")
+            cat > "$dir/README.md" <<EOF
+          # $name
+
+          Prebuilt native binary for the [\`mq-bridge\`](https://github.com/marcomq/mq-bridge)
+          Node.js addon (napi-rs). This is a platform-specific dependency of the
+          \`mq-bridge\` package and is selected automatically via optionalDependencies —
+          you install \`mq-bridge\`, not this package directly.
+          EOF
+            node -e "const p='./$dir/package.json',j=require(p);j.description='Prebuilt '+j.name+' binary for the mq-bridge Node.js addon';j.homepage='https://github.com/marcomq/mq-bridge#readme';j.keywords=['mq-bridge','napi','native','prebuilt','addon'];require('fs').writeFileSync(p,JSON.stringify(j,null,2)+'\n')"
+          done
+
+      - name: Publish platform packages and root
+        working-directory: node/mq-bridge-node
+        env:
+          # Empty when the secret is unset -> npm falls back to OIDC.
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+          NPM_CONFIG_PROVENANCE: "true"
+        run: |
+          set -e
+          publish() {
+            local dir="$1" name ver
+            name=$(node -p "require('./$dir/package.json').name")
+            ver=$(node -p "require('./$dir/package.json').version")
+            # Skip if this exact version is already on the registry; a re-run
+            # after a partial publish must not fail on already-published dirs.
+            if npm view "$name@$ver" version >/dev/null 2>&1; then
+              echo "Skipping $name@$ver (already published)"
+              return 0
+            fi
+            echo "Publishing $dir ($name@$ver)"
+            npm publish "$dir" --access public
+          }
+          for dir in npm/*/; do
+            publish "$dir"
+          done
+          echo "Publishing root package"
+          root_name=$(node -p "require('./package.json').name")
+          root_ver=$(node -p "require('./package.json').version")
+          if npm view "$root_name@$root_ver" version >/dev/null 2>&1; then
+            echo "Skipping $root_name@$root_ver (already published)"
+          else
+            npm publish --access public
+          fi

{mq_bridge_py_basic-0.2.20 → mq_bridge_py_basic-0.3.0}/.github/workflows/publish-python.yml

@@ -114,6 +114,12 @@ jobs:
 
       - name: Build wheels
         uses: PyO3/maturin-action@v1
+        env:
+          # Work around intermittent "HTTP2 framing layer" curl errors when
+          # cargo downloads crates inside the manylinux container.
+          CARGO_HTTP_MULTIPLEXING: "false"
+          CARGO_NET_RETRY: "5"
+          CARGO_NET_GIT_FETCH_WITH_CLI: "true"
         with:
           working-directory: python/mq-bridge-py
           command: build

{mq_bridge_py_basic-0.2.20 → mq_bridge_py_basic-0.3.0}/.github/workflows/python.yml

@@ -67,3 +67,16 @@ jobs:
       - name: Smoke test import
         working-directory: python/mq-bridge-py
         run: uv run python -c "from mq_bridge import Message, Publisher, Route; print(Message, Publisher, Route)"
+
+      - name: Run no-default feature regression tests
+        run: |
+          cargo test -p mq-bridge-py --no-default-features --features http,rustls-ring test_config_schema_is_always_available
+          cargo test -p mq-bridge-py --no-default-features --features http,rustls-ring test_module_init_installs_rustls_provider
+
+      - name: Rebuild extension with lean no-default feature set
+        working-directory: python/mq-bridge-py
+        run: uv run maturin develop --no-default-features -F http -F rustls-ring -F pyo3/extension-module
+
+      - name: Run lean no-default public API tests
+        working-directory: python/mq-bridge-py
+        run: uv run pytest -q tests/test_public_api.py tests/test_config_types.py