nthlayer-core 3.0.0__tar.gz → 3.0.2__tar.gz

{nthlayer_core-3.0.0 → nthlayer_core-3.0.2}/PKG-INFO

@@ -1,10 +1,10 @@
 Metadata-Version: 2.4
 Name: nthlayer-core
-Version: 3.0.0
+Version: 3.0.2
 Summary: NthLayer core — reliability-critical verdict store, case management, and HTTP API
 Requires-Python: >=3.11
 Description-Content-Type: text/markdown
-Requires-Dist: nthlayer-common<6.0.0,>=5.0.0
+Requires-Dist: nthlayer-common<6.0.0,>=5.3.0
 Requires-Dist: starlette>=0.40
 Requires-Dist: uvicorn>=0.30
 Requires-Dist: httpx>=0.27

{nthlayer_core-3.0.0 → nthlayer_core-3.0.2}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "nthlayer-core"
-version = "3.0.0"
+version = "3.0.2"
 description = "NthLayer core — reliability-critical verdict store, case management, and HTTP API"
 readme = "README.md"
 requires-python = ">=3.11"
@@ -20,7 +20,10 @@ dependencies = [
     # every threshold entry [opensrm-7zpz]; catalogue.manifest_to_dict
     # serialises each threshold via threshold_to_v2_entry, common's validated
     # emitter of the v2 spec.judgment_threshold entry, never a hand-copy.
-    "nthlayer-common>=5.0.0,<6.0.0",
+    # WHY 5.3.0 (opensrm-pnmv): the version this repo is now built and tested
+    # against (rule 10: the floor is the installed sibling). Bump it on
+    # every nthlayer-common minor release: the floor guard fails until you do.
+    "nthlayer-common>=5.3.0,<6.0.0",
     "starlette>=0.40",
     "uvicorn>=0.30",
     "httpx>=0.27",

{nthlayer_core-3.0.0 → nthlayer_core-3.0.2}/src/nthlayer_core.egg-info/PKG-INFO

@@ -1,10 +1,10 @@
 Metadata-Version: 2.4
 Name: nthlayer-core
-Version: 3.0.0
+Version: 3.0.2
 Summary: NthLayer core — reliability-critical verdict store, case management, and HTTP API
 Requires-Python: >=3.11
 Description-Content-Type: text/markdown
-Requires-Dist: nthlayer-common<6.0.0,>=5.0.0
+Requires-Dist: nthlayer-common<6.0.0,>=5.3.0
 Requires-Dist: starlette>=0.40
 Requires-Dist: uvicorn>=0.30
 Requires-Dist: httpx>=0.27

{nthlayer_core-3.0.0 → nthlayer_core-3.0.2}/src/nthlayer_core.egg-info/requires.txt

@@ -1,4 +1,4 @@
-nthlayer-common<6.0.0,>=5.0.0
+nthlayer-common<6.0.0,>=5.3.0
 starlette>=0.40
 uvicorn>=0.30
 httpx>=0.27

{nthlayer_core-3.0.0 → nthlayer_core-3.0.2}/tests/test_dependency_declarations.py

@@ -261,3 +261,26 @@ def test_declared_ceiling_is_exactly_the_next_major(name):
         f"is {installed}, so the ceiling must be '<{expected}'. A wider ceiling "
         f"publishes a major nothing here has run."
     )
+
+
+def test_uv_lock_records_this_projects_version():
+    """uv.lock's own [[package]] entry must carry pyproject's version.
+
+    release-please bumps pyproject.toml; a toml extra-files updater in
+    release-please-config.json bumps this entry in the same release PR. That
+    updater only WARNS when its jsonpath matches nothing (a renamed package, a
+    lock-format change), so without this test the lock would silently go stale
+    again and every `uv sync` after a release would dirty it [opensrm-g35i].
+    Release PRs run CI, so a skipped bump fails here, on the release PR.
+    """
+    root = Path(__file__).resolve().parents[1]
+    project = tomllib.loads((root / "pyproject.toml").read_text())["project"]
+    lock = tomllib.loads((root / "uv.lock").read_text())
+    entries = [p for p in lock.get("package", []) if p.get("name") == project["name"]]
+    assert len(entries) == 1, (
+        f"uv.lock has {len(entries)} [[package]] entries named {project['name']!r}"
+    )
+    assert entries[0].get("version") == project["version"], (
+        f"uv.lock records {project['name']} {entries[0].get('version')}, pyproject says "
+        f"{project['version']}: run `uv lock` (and check release-please-config.json extra-files)"
+    )