pyOpenVBA 6.3.0__tar.gz → 6.3.1__tar.gz

{pyopenvba-6.3.0 → pyopenvba-6.3.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: pyOpenVBA
-Version: 6.3.0
+Version: 6.3.1
 Summary: Read and write VBA macros and Excel Power Query in pure Python, no dependencies.
 Project-URL: Homepage, https://github.com/WilliamSmithEdward/pyOpenVBA
 Project-URL: Repository, https://github.com/WilliamSmithEdward/pyOpenVBA
@@ -40,6 +40,7 @@ Description-Content-Type: text/markdown
 [![PyPI version](https://img.shields.io/pypi/v/pyOpenVBA.svg)](https://pypi.org/project/pyOpenVBA/)
 [![Python versions](https://img.shields.io/pypi/pyversions/pyOpenVBA.svg)](https://pypi.org/project/pyOpenVBA/)
 [![CI](https://github.com/WilliamSmithEdward/pyOpenVBA/actions/workflows/ci.yml/badge.svg)](https://github.com/WilliamSmithEdward/pyOpenVBA/actions/workflows/ci.yml)
+[![Security](https://github.com/WilliamSmithEdward/pyOpenVBA/actions/workflows/security.yml/badge.svg)](https://github.com/WilliamSmithEdward/pyOpenVBA/actions/workflows/security.yml)
 [![License: MIT](https://img.shields.io/badge/license-MIT-blue.svg)](https://github.com/WilliamSmithEdward/pyOpenVBA/blob/main/LICENSE.md)
 [![Downloads](https://static.pepy.tech/badge/pyOpenVBA/month)](https://pepy.tech/project/pyOpenVBA)
 
@@ -1104,7 +1105,18 @@ $env:RUN_LIVE_POWER_QUERY = "1"; pytest tests/test_live_powerquery_gate.py
 
 CI runs the test matrix on Python 3.10 through 3.14 on Linux, plus 3.12
 on Windows and macOS, on every push and pull request. Releases go to
-PyPI when a `v*.*.*` tag is pushed.
+PyPI when a `v*.*.*` tag is pushed and the tagged commit passes the
+security scans.
+
+## Security
+
+Please report a vulnerability privately with
+[Report a vulnerability](https://github.com/WilliamSmithEdward/pyOpenVBA/security/advisories/new),
+not in a public issue.
+[SECURITY.md](https://github.com/WilliamSmithEdward/pyOpenVBA/blob/main/SECURITY.md)
+says what to report, which versions get fixes and how the code is
+checked. CodeQL and Semgrep scan every push to main and every pull
+request, and every release carries its security report.
 
 ---
 

{pyopenvba-6.3.0 → pyopenvba-6.3.1}/README.md

@@ -3,6 +3,7 @@
 [![PyPI version](https://img.shields.io/pypi/v/pyOpenVBA.svg)](https://pypi.org/project/pyOpenVBA/)
 [![Python versions](https://img.shields.io/pypi/pyversions/pyOpenVBA.svg)](https://pypi.org/project/pyOpenVBA/)
 [![CI](https://github.com/WilliamSmithEdward/pyOpenVBA/actions/workflows/ci.yml/badge.svg)](https://github.com/WilliamSmithEdward/pyOpenVBA/actions/workflows/ci.yml)
+[![Security](https://github.com/WilliamSmithEdward/pyOpenVBA/actions/workflows/security.yml/badge.svg)](https://github.com/WilliamSmithEdward/pyOpenVBA/actions/workflows/security.yml)
 [![License: MIT](https://img.shields.io/badge/license-MIT-blue.svg)](https://github.com/WilliamSmithEdward/pyOpenVBA/blob/main/LICENSE.md)
 [![Downloads](https://static.pepy.tech/badge/pyOpenVBA/month)](https://pepy.tech/project/pyOpenVBA)
 
@@ -1067,7 +1068,18 @@ $env:RUN_LIVE_POWER_QUERY = "1"; pytest tests/test_live_powerquery_gate.py
 
 CI runs the test matrix on Python 3.10 through 3.14 on Linux, plus 3.12
 on Windows and macOS, on every push and pull request. Releases go to
-PyPI when a `v*.*.*` tag is pushed.
+PyPI when a `v*.*.*` tag is pushed and the tagged commit passes the
+security scans.
+
+## Security
+
+Please report a vulnerability privately with
+[Report a vulnerability](https://github.com/WilliamSmithEdward/pyOpenVBA/security/advisories/new),
+not in a public issue.
+[SECURITY.md](https://github.com/WilliamSmithEdward/pyOpenVBA/blob/main/SECURITY.md)
+says what to report, which versions get fixes and how the code is
+checked. CodeQL and Semgrep scan every push to main and every pull
+request, and every release carries its security report.
 
 ---
 

{pyopenvba-6.3.0 → pyopenvba-6.3.1}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "pyOpenVBA"
-version = "6.3.0"
+version = "6.3.1"
 description = "Read and write VBA macros and Excel Power Query in pure Python, no dependencies."
 readme = "README.md"
 license = { text = "MIT" }

{pyopenvba-6.3.0 → pyopenvba-6.3.1}/src/pyopenvba/__init__.py

@@ -293,4 +293,4 @@ def push_power_query(
     """
     return _push_queries(src_dir, workbook, out=out, encoding=encoding, remove_missing=remove_missing)
 
-__version__ = "6.3.0"
+__version__ = "6.3.1"