openapi-cli4ai 0.4.0__tar.gz → 0.5.1__tar.gz

{openapi_cli4ai-0.4.0 → openapi_cli4ai-0.5.1}/.github/dependabot.yml

@@ -10,7 +10,7 @@ updates:
       actions:
         patterns: ["*"]
 
-  - package-ecosystem: "pip"
+  - package-ecosystem: "uv"
     directory: "/"
     schedule:
       interval: "weekly"

openapi_cli4ai-0.5.1/.github/workflows/ci.yml

@@ -0,0 +1,48 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+
+permissions:
+  contents: read
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        python-version: ["3.11", "3.12", "3.13"]
+    steps:
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0
+        with:
+          enable-cache: true
+      - name: Set up Python ${{ matrix.python-version }}
+        run: uv python install ${{ matrix.python-version }}
+      - name: Sync dependencies
+        run: uv sync --locked --python ${{ matrix.python-version }}
+      - name: Run unit tests with coverage
+        run: uv run --python ${{ matrix.python-version }} pytest tests/ -m "not integration" -v --cov=openapi_cli4ai --cov-report=term-missing
+
+  lint:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0
+      - name: Ruff check
+        run: uvx ruff check .
+      - name: Ruff format check
+        run: uvx ruff format --check .
+
+  typecheck:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0
+      - name: Sync dependencies
+        run: uv sync --locked
+      - name: Run mypy
+        run: uv run mypy src/openapi_cli4ai/ --ignore-missing-imports

{openapi_cli4ai-0.4.0 → openapi_cli4ai-0.5.1}/.github/workflows/codeql.yml

@@ -16,8 +16,8 @@ jobs:
   analyze:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-      - uses: github/codeql-action/init@38697555549f1db7851b81482ff19f1fa5c4fedc # v4.34.1
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: github/codeql-action/init@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a # v4.36.3
         with:
           languages: python
-      - uses: github/codeql-action/analyze@38697555549f1db7851b81482ff19f1fa5c4fedc # v4.34.1
+      - uses: github/codeql-action/analyze@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a # v4.36.3

{openapi_cli4ai-0.4.0 → openapi_cli4ai-0.5.1}/.github/workflows/publish.yml

@@ -13,12 +13,12 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-      - uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0
       - name: Build sdist and wheel
         run: uv build
       - name: Upload artifacts
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: dist
           path: dist/
@@ -42,8 +42,8 @@ jobs:
           name: dist
           path: dist/
       - name: Generate attestations
-        uses: actions/attest-build-provenance@a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32 # v4.1.0
+        uses: actions/attest-build-provenance@0f67c3f4856b2e3261c31976d6725780e5e4c373 # v4.1.1
         with:
           subject-path: dist/*
       - name: Publish to PyPI
-        uses: pypa/gh-action-pypi-publish@release/v1
+        uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b # v1.14.0

{openapi_cli4ai-0.4.0 → openapi_cli4ai-0.5.1}/.gitignore

@@ -41,3 +41,11 @@ profiles.yaml
 .pytest_cache/
 .coverage
 htmlcov/
+
+# Project-specific
+CLAUDE.md
+graphify-out/
+
+# Claude Code
+.claude/settings.json
+.mcp.json

openapi_cli4ai-0.5.1/.pre-commit-config.yaml

@@ -0,0 +1,7 @@
+repos:
+  - repo: https://github.com/astral-sh/ruff-pre-commit
+    rev: 971923581912ef60a6b70dbf0c3e9a39563c9d47  # v0.11.4
+    hooks:
+      - id: ruff
+        args: [--fix]
+      - id: ruff-format

{openapi_cli4ai-0.4.0 → openapi_cli4ai-0.5.1}/CHANGELOG.md

@@ -4,6 +4,41 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/).
 
+## [0.5.1] - 2026-07-04
+
+### Fixed
+
+- Ingest YAML OpenAPI specs served as `application/vnd.oai.openapi` (e.g. Codecov's schema endpoint), with a YAML fallback when a body advertised as JSON fails to decode (#22)
+- `--version` now derives from installed package metadata instead of a hardcoded literal that had drifted from the real version (#22)
+
+### Changed
+
+- Commit `uv.lock` and use `uv sync --locked` in CI for reproducible builds; Dependabot now updates the lockfile via the `uv` ecosystem (#20)
+- Dependency updates: `typer` 0.26 (with test adjustments for its vendored `click`), plus the python-deps and GitHub Actions groups (#21, #19, #16)
+
+## [0.5.0] - 2026-04-21
+
+### Added
+
+- `--force-login` flag to bypass cached tokens (#9)
+- Non-interactive `init` flags for scripted profile creation (#9)
+- Security hardening across CLI surfaces (#10)
+- OpenAPI spec composition support (#10)
+- `py.typed` marker for downstream type checkers (#13)
+
+### Changed
+
+- SHA-pinned publish workflow and simplified CI (#13)
+- Dependency updates: `rich` (#12), GitHub Actions group (#11)
+
+## [0.4.0] - 2026-04-15
+
+### Added
+
+- OIDC Device Flow auth type for headless/SSH environments
+- Token exchange and auto-discovery of OIDC endpoints
+- Token injection from environment for CI use cases
+
 ## [0.3.0] - 2026-03-28
 
 ### Added

{openapi_cli4ai-0.4.0 → openapi_cli4ai-0.5.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: openapi-cli4ai
-Version: 0.4.0
+Version: 0.5.1
 Summary: Turn any REST API with an OpenAPI spec into an AI-ready CLI
 Project-URL: Homepage, https://github.com/dbgorilla/openapi-cli4ai
 Project-URL: Repository, https://github.com/dbgorilla/openapi-cli4ai
@@ -21,7 +21,7 @@ Requires-Python: >=3.11
 Requires-Dist: httpx<1,>=0.28
 Requires-Dist: python-dotenv<2,>=1.0
 Requires-Dist: pyyaml<7,>=6
-Requires-Dist: rich<15,>=13
+Requires-Dist: rich<16,>=13
 Requires-Dist: tomli-w<2,>=1.0
 Requires-Dist: typer<1,>=0.24
 Description-Content-Type: text/markdown

{openapi_cli4ai-0.4.0 → openapi_cli4ai-0.5.1}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "openapi-cli4ai"
-version = "0.4.0"
+version = "0.5.1"
 description = "Turn any REST API with an OpenAPI spec into an AI-ready CLI"
 readme = "README.md"
 license = "MIT"
@@ -26,7 +26,7 @@ classifiers = [
 dependencies = [
     "typer>=0.24,<1",
     "httpx>=0.28,<1",
-    "rich>=13,<15",
+    "rich>=13,<16",
     "pyyaml>=6,<7",
     "python-dotenv>=1.0,<2",
     "tomli-w>=1.0,<2",
@@ -40,6 +40,15 @@ Issues = "https://github.com/dbgorilla/openapi-cli4ai/issues"
 [project.scripts]
 openapi-cli4ai = "openapi_cli4ai.cli:app"
 
+[dependency-groups]
+dev = [
+    "pytest>=8",
+    "pytest-cov>=5",
+    "click>=8,<9",
+    "mypy>=1.10,<3",
+    "types-PyYAML>=6,<7",
+]
+
 [tool.hatch.build.targets.wheel]
 packages = ["src/openapi_cli4ai"]
 
@@ -50,3 +59,17 @@ target-version = "py311"
 [tool.pytest.ini_options]
 testpaths = ["tests"]
 markers = ["integration: live API tests (may be slow)"]
+
+[tool.mypy]
+python_version = "3.11"
+warn_return_any = false
+warn_unused_configs = true
+disallow_untyped_defs = false
+check_untyped_defs = true
+
+[tool.coverage.run]
+source = ["openapi_cli4ai"]
+
+[tool.coverage.report]
+show_missing = true
+skip_empty = true