plexdo 1.1.18__tar.gz

plexdo-1.1.18/.github/workflows/ci.yml

@@ -0,0 +1,60 @@
+name: CI
+
+on:
+  push:
+    branches: [main, master]
+  pull_request:
+  workflow_dispatch:
+
+jobs:
+  check:
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        python-version: ["3.11", "3.12", "3.13", "3.14"]
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-python@v5
+        with:
+          python-version: ${{ matrix.python-version }}
+
+      - name: Install
+        run: |
+          python -m pip install --upgrade pip
+          pip install -e ".[dev]"
+
+      - name: Full check
+        run: make check
+
+  shells:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Install shells and roff
+        run: sudo apt-get update && sudo apt-get install -y zsh fish groff-base
+
+      - name: Completions parse
+        run: |
+          bash -n completions/plexdo.bash
+          zsh  -n completions/_plexdo
+          fish -n completions/plexdo.fish
+
+      - name: Manual page is clean
+        run: groff -man -Tutf8 -ww -z man/plexdo.1
+
+  powershell:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: PowerShell completion parses
+        shell: pwsh
+        run: |
+          $errs = $null
+          [System.Management.Automation.Language.Parser]::ParseFile(
+              "completions/plexdo.ps1", [ref]$null, [ref]$errs) | Out-Null
+          if ($errs) { $errs | ForEach-Object { $_.Message }; exit 1 }
+          Write-Host "no parse errors"

plexdo-1.1.18/.github/workflows/publish.yml

@@ -0,0 +1,120 @@
+name: Publish
+
+# Publishes to PyPI through Trusted Publishing (OIDC), so no API token is
+# stored anywhere. Configure the publisher once at
+# https://pypi.org/manage/project/plexdo/settings/publishing/ with:
+#
+#   owner:            sidusnare
+#   repository:       plexdo
+#   workflow:         publish.yml
+#   environment:      pypi          (and test-pypi for the dry run)
+#
+# Publishing to TestPyPI is manual: run this workflow from the Actions tab.
+# Publishing to PyPI happens when a GitHub release is published.
+
+on:
+  release:
+    types: [published]
+  workflow_dispatch:
+    inputs:
+      target:
+        description: Where to publish
+        required: true
+        default: testpypi
+        type: choice
+        options: [testpypi, pypi]
+
+# Nothing here needs write access to the repository itself; the two publish
+# jobs raise only id-token, which is what OIDC needs.
+permissions:
+  contents: read
+
+jobs:
+  build:
+    name: Build and verify
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+
+      - name: Install
+        run: |
+          python -m pip install --upgrade pip
+          pip install -e ".[dev]"
+
+      # Everything that gates a normal pull request also gates a release:
+      # version consistency across the three places it appears, packaged
+      # assets matching their sources, the smoke test, the suite, pylint,
+      # the build itself, and twine's metadata check.
+      - name: Full check
+        run: make check
+
+      # A release tagged v1.2.3 must contain version 1.2.3. Without this the
+      # wheel would upload under whatever version the source happened to
+      # carry, and PyPI would accept it: uploads are immutable, so the
+      # mistake could not be taken back.
+      - name: Tag matches package version
+        if: github.event_name == 'release'
+        run: |
+          tag="${GITHUB_REF_NAME#v}"
+          version="$(python -c 'import plexdo; print(plexdo.__version__)')"
+          if [ "$tag" != "$version" ]; then
+            echo "::error::tag $GITHUB_REF_NAME does not match version $version"
+            exit 1
+          fi
+          echo "tag $GITHUB_REF_NAME matches version $version"
+
+      - name: Upload distributions
+        uses: actions/upload-artifact@v4
+        with:
+          name: dist
+          path: dist/
+          if-no-files-found: error
+
+  testpypi:
+    name: Publish to TestPyPI
+    needs: build
+    if: github.event_name == 'workflow_dispatch' && inputs.target == 'testpypi'
+    runs-on: ubuntu-latest
+    environment:
+      name: test-pypi
+      url: https://test.pypi.org/p/plexdo
+    permissions:
+      id-token: write        # the OIDC token trusted publishing exchanges
+    steps:
+      - uses: actions/download-artifact@v4
+        with:
+          name: dist
+          path: dist/
+
+      - uses: pypa/gh-action-pypi-publish@release/v1
+        with:
+          repository-url: https://test.pypi.org/legacy/
+          # TestPyPI often already holds this version from an earlier dry
+          # run, and that should not fail the workflow.
+          skip-existing: true
+
+  pypi:
+    name: Publish to PyPI
+    needs: build
+    if: >-
+      github.event_name == 'release' ||
+      (github.event_name == 'workflow_dispatch' && inputs.target == 'pypi')
+    runs-on: ubuntu-latest
+    environment:
+      name: pypi
+      url: https://pypi.org/p/plexdo
+    permissions:
+      id-token: write
+    steps:
+      - uses: actions/download-artifact@v4
+        with:
+          name: dist
+          path: dist/
+
+      # Signs the distributions and publishes the attestations alongside
+      # them, so PyPI can show they were built by this workflow.
+      - uses: pypa/gh-action-pypi-publish@release/v1