plexer-cli 0.1.15__tar.gz → 0.1.17__tar.gz

{plexer_cli-0.1.15 → plexer_cli-0.1.17}/.github/dependabot.yml

@@ -20,4 +20,4 @@ updates:
       include: "scope"
     labels:
       - "dependencies"
-      - "security"
+      - "security"

{plexer_cli-0.1.15 → plexer_cli-0.1.17}/.github/workflows/openssf_scorecard.yml

@@ -44,4 +44,4 @@ jobs:
       - name: "Upload to code-scanning"
         uses: github/codeql-action/upload-sarif@e46ed2cbd01164d986452f91f178727624ae40d7 # v4.35.3
         with:
-          sarif_file: results.sarif
+          sarif_file: results.sarif

{plexer_cli-0.1.15 → plexer_cli-0.1.17}/.github/workflows/release.yml

@@ -16,18 +16,14 @@ permissions:
   contents: read
 
 jobs:
-  release:
-    name: Generate New Release - ${{ github.ref_name }}
+  build_and_release_project:
+    name: Build and Release Project - ${{ github.ref_name }}
     runs-on: ubuntu-latest
     environment: release
 
     permissions:
-      artifact-metadata: write  # needed to push SBOM and provenance attestation (GHCR)
-      attestations: write
-      contents: write  # needed to create GH Release
       id-token: write  # IMPORTANT: this permission is mandatory for trusted publishing to PyPI
-      packages: write  # required for pushing image to GHCR
-    
+
     steps:
       - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8  # v6.0.1
         if: ${{ github.event_name == 'push' }}
@@ -40,7 +36,7 @@ jobs:
         with:
           ref: ${{ github.event.inputs.tag }}
           fetch-depth: 0
-      
+
       - name: Install uv
         uses: astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884  # v10.3.0
         with:
@@ -53,14 +49,14 @@ jobs:
 
       - name: Setup and run test suite
         run: uvx tox -vv -e test
-      
-      # build and publish
+
+      # build and upload Python packages
       - name: Install Hatch
         run: uvx pipx install hatch
 
       - name: Build dist artifacts
         run: hatch build
-      
+
       # PyPI Release
       # required instead of using hatch due to usage of trusted publishers
       - name: Publish to TestPyPI
@@ -75,7 +71,7 @@ jobs:
         uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33  # v1.14.2
         with:
           attestations: true
-      
+
       # Github Release
       - name: Create Github Release
         uses: softprops/action-gh-release@efb35369e0ad2afab669f228072c1b0d510eae64  # v3.0.3
@@ -86,16 +82,36 @@ jobs:
           fail_on_unmatched_files: true
           generate_release_notes: true
           make_latest: true
-      
-      # Docker Release
-      # REF: https://docs.github.com/en/actions/use-cases-and-examples/publishing-packages/publishing-docker-images#publishing-images-to-docker-hub-and-github-packages
-      ## Uploads to Docker.io and ghcr.io (GitHub Container Registry)
+
+#############
+
+  build_and_push_container:
+    name: Build and Push Container - ${{ github.ref_name }}
+    runs-on: ubuntu-latest
+    environment: release
+
+    permissions:
+      packages: write  # required for pushing image to GHCR
+
+    steps:
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8  # v6.0.1
+        if: ${{ github.event_name == 'push' }}
+        with:
+          ref: ${{ github.ref_name }}
+          fetch-depth: 0
+
+      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8  # v6.0.1
+        if: ${{ github.event_name == 'workflow_dispatch' }}
+        with:
+          ref: ${{ github.event.inputs.tag }}
+          fetch-depth: 0
+
       - name: Log in to Docker Hub
         uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f  # v4.6.0
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
-      
+
       - name: Log in to Github Container registry
         uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f  # v4.6.0
         with:
@@ -103,7 +119,7 @@ jobs:
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
-      - name: Extract metadata (tags, labels) for Docker
+      - name: Extract metadata (tags, labels)
         id: meta
         uses: docker/metadata-action@c299e40c65443455700f0fdfc63efafe5b349051  # v5.10.0
         with:
@@ -111,19 +127,44 @@ jobs:
             magneticstain/plexer
             ghcr.io/${{ github.repository }}
 
-      # required for automatic SBOM generation and provenance attestation
+      # required for multi-platform builds (e.g. arm64)
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@99012661954931238ded8c8b007157a8430204e1  # v4.4.0
+
+      # explicitly required for automatic SBOM generation and provenance attestation
       # REF: https://docs.docker.com/guides/gha
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069  # v4.4.1
 
-      - name: Build and push Docker images to all registries
+      - name: Validate Docker build configuration
+        uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc  # v7.4.0
+        with:
+          call: check
+
+      # required for reproducible builds
+      # REF: https://docs.docker.com/build/ci/github-actions/reproducible-builds/
+      - name: Get Git commit timestamps
+        run: echo "TIMESTAMP=$(git log -1 --pretty=%ct)" >> $GITHUB_ENV
+
+      - name: Build and push Docker image
         id: push
         uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc  # v7.4.0
+        env:
+          SOURCE_DATE_EPOCH: ${{ env.TIMESTAMP }}
         with:
           context: .
           push: true
-          provenance: mode=max
-          sbom: true
+          platforms: linux/amd64,linux/arm64
+          annotations: ${{ steps.meta.outputs.annotations }}
           tags: ${{ steps.meta.outputs.tags }}
           labels: ${{ steps.meta.outputs.labels }}
-      
+          provenance: mode=max
+          sbom: true
+
+      - name: Generate artifact attestation for GHCR container image
+        uses: actions/attest@1e69f48acb82d1966a394da916b4c1698aa569d6  # v4.2.2
+        with:
+          subject-name: ghcr.io/${{ github.repository }}
+          subject-digest: ${{ steps.push.outputs.digest }}
+          sbom-path: "sbom.spdx.json"  # REF: https://docs.docker.com/build/metadata/attestations/sbom/#verify-sbom-attestations
+          push-to-registry: true

{plexer_cli-0.1.15 → plexer_cli-0.1.17}/.github/workflows/run_full_test_suite.yml

@@ -14,7 +14,7 @@ jobs:
   unit-test:
     name: Run unit tests with version ${{ matrix.py }} on ${{ matrix.os }}
     runs-on: ${{ matrix.os }}
-    
+
     strategy:
       matrix:
         py:
@@ -31,7 +31,7 @@ jobs:
       - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8  # v6.0.1
         with:
           fetch-depth: 0
-      
+
       - name: Install uv and set python versions
         uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d  # v10.0.1
         with:

plexer_cli-0.1.17/.pre-commit-config.yaml

@@ -0,0 +1,29 @@
+repos:
+  - repo: https://github.com/pre-commit/pre-commit-hooks
+    rev: v6.0.0
+    hooks:
+      - id: debug-statements
+      - id: end-of-file-fixer
+      - id: forbid-submodules
+      - id: mixed-line-ending
+      - id: name-tests-test
+        args: [ --pytest-test-first ]
+      - id: trailing-whitespace
+
+  - repo: https://github.com/astral-sh/ruff-pre-commit
+    rev: v0.17.2
+    hooks:
+      - id: ruff-format
+      - id: ruff-check
+        args: [ --fix ]
+
+  # REF: https://docs.astral.sh/uv/guides/integration/pre-commit/
+  - repo: https://github.com/astral-sh/uv-pre-commit
+    rev: 0.13.5
+    hooks:
+      - id: uv-lock
+
+  - repo: https://github.com/rhysd/actionlint
+    rev: v1.7.12
+    hooks:
+      - id: actionlint

plexer_cli-0.1.17/.tool-versions

@@ -0,0 +1,3 @@
+actionlint 1.7.9
+pre-commit 4.5.0
+uv 0.10.2

{plexer_cli-0.1.15 → plexer_cli-0.1.17}/.vscode/launch.json

@@ -1,7 +1,7 @@
 {
     "version": "0.2.0",
     "configurations": [
-        
+
         {
             "name": "Run w/ Tmp Dirs",
             "type": "debugpy",
@@ -39,4 +39,4 @@
             "justMyCode": true,
         }
     ]
-}
+}

{plexer_cli-0.1.15 → plexer_cli-0.1.17}/.vscode/plexer-cli.code-workspace

@@ -8,4 +8,4 @@
 		"trivy.useIgnoreFile": true,
 		"trivy.secretScanning": true
 	}
-}
+}

{plexer_cli-0.1.15 → plexer_cli-0.1.17}/.vscode/settings.json

@@ -4,4 +4,4 @@
     ],
     "python.testing.unittestEnabled": false,
     "python.testing.pytestEnabled": true
-}
+}

{plexer_cli-0.1.15 → plexer_cli-0.1.17}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: plexer_cli
-Version: 0.1.15
+Version: 0.1.17
 Summary: Normalize media files and directories for use with Plex Media Server
 Project-URL: Repository, https://github.com/magneticstain/plexer
 Project-URL: Documentation, https://github.com/magneticstain/plexer-cli/wiki

{plexer_cli-0.1.15 → plexer_cli-0.1.17}/src/plexer_cli/main.py

@@ -6,15 +6,16 @@ Main App Entrypoint
 """
 
 __author__ = "magneticstain"
-__version__ = "0.1.15"
+__version__ = "0.1.17"
 __license__ = "MIT"
 
 import argparse
+
 import logzero
 from logzero import logger
+
 # yes, docs suggest importing it twice:
 # https://logzero.readthedocs.io/en/latest/#advanced-usage-examples
-
 from plexer_cli.file_manager import FileManager
 
 

plexer_cli-0.1.15/.pre-commit-config.yaml

@@ -1,12 +0,0 @@
-repos:
-  - repo: https://github.com/astral-sh/ruff-pre-commit
-    rev: v0.15.1
-    hooks:
-      - id: ruff-format
-      - id: ruff-check
-        args: [ --fix ]
-  # REF: https://docs.astral.sh/uv/guides/integration/pre-commit/
-  - repo: https://github.com/astral-sh/uv-pre-commit
-    rev: 0.10.2
-    hooks:
-      - id: uv-lock

plexer_cli-0.1.15/.tool-versions

@@ -1 +0,0 @@
-uv 0.10.2