pyannotators-patterns 0.6.7__tar.gz → 0.6.11__tar.gz

{pyannotators_patterns-0.6.7 → pyannotators_patterns-0.6.11}/.gitignore

@@ -130,3 +130,4 @@ dmypy.json
 .groovylintrc.json
 .emailNotif
 uv.lock
+audit-report.json

{pyannotators_patterns-0.6.7 → pyannotators_patterns-0.6.11}/Jenkinsfile

@@ -107,7 +107,7 @@ pipeline {
         stage('Install dependencies') {
           steps {
             sh 'pip install uv'
-            sh 'uv sync --extra test'
+            sh 'uv sync --no-cache --extra test'
           }
         }
 

{pyannotators_patterns-0.6.7 → pyannotators_patterns-0.6.11}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: pyannotators-patterns
-Version: 0.6.7
+Version: 0.6.11
 Summary: Annotator based on Presidio pattern recognizer
 Project-URL: Homepage, https://github.com/oterrier/pyannotators_patterns/
 Author-email: Olivier Terrier <olivier.terrier@kairntech.com>
@@ -50,12 +50,14 @@ Provides-Extra: dev
 Requires-Dist: bump2version; extra == 'dev'
 Requires-Dist: pre-commit; extra == 'dev'
 Provides-Extra: docs
-Requires-Dist: jupyter-sphinx; extra == 'docs'
 Requires-Dist: lxml-html-clean; extra == 'docs'
 Requires-Dist: m2r2; extra == 'docs'
 Requires-Dist: sphinx; extra == 'docs'
 Requires-Dist: sphinx-rtd-theme; extra == 'docs'
 Requires-Dist: sphinxcontrib-apidoc; extra == 'docs'
+Provides-Extra: sbom
+Requires-Dist: cyclonedx-bom; extra == 'sbom'
+Requires-Dist: pip-audit; extra == 'sbom'
 Provides-Extra: test
 Requires-Dist: dirty-equals; extra == 'test'
 Requires-Dist: pip; extra == 'test'
@@ -127,3 +129,29 @@ uv run --extra docs sphinx-build docs docs/_build
 ```
 
 The built documentation is available at `docs/_build/index.html`.
+
+## SBOM & vulnerability check
+
+Install the SBOM dependencies:
+
+```
+uv sync --extra sbom
+```
+
+Generate a CycloneDX SBOM from the current environment:
+
+```
+uv run cyclonedx-py environment -o sbom.cdx.json --output-format json
+```
+
+Audit dependencies for known vulnerabilities:
+
+```
+uv run pip-audit --format json --output audit-report.json
+```
+
+To fail on any known vulnerability (useful in CI):
+
+```
+uv run pip-audit --strict
+```

{pyannotators_patterns-0.6.7 → pyannotators_patterns-0.6.11}/README.md

@@ -60,3 +60,29 @@ uv run --extra docs sphinx-build docs docs/_build
 ```
 
 The built documentation is available at `docs/_build/index.html`.
+
+## SBOM & vulnerability check
+
+Install the SBOM dependencies:
+
+```
+uv sync --extra sbom
+```
+
+Generate a CycloneDX SBOM from the current environment:
+
+```
+uv run cyclonedx-py environment -o sbom.cdx.json --output-format json
+```
+
+Audit dependencies for known vulnerabilities:
+
+```
+uv run pip-audit --format json --output audit-report.json
+```
+
+To fail on any known vulnerability (useful in CI):
+
+```
+uv run pip-audit --strict
+```

{pyannotators_patterns-0.6.7 → pyannotators_patterns-0.6.11}/pyproject.toml

@@ -56,7 +56,6 @@ docs = [
     "sphinx-rtd-theme",
     "m2r2",
     "sphinxcontrib.apidoc",
-    "jupyter_sphinx",
     "lxml_html_clean",
 ]
 dev = [
@@ -64,6 +63,8 @@ dev = [
     "bump2version",
 ]
 
+sbom = ["cyclonedx-bom", "pip-audit"]
+
 [tool.hatch.version]
 path = "src/pyannotators_patterns/__init__.py"
 

{pyannotators_patterns-0.6.7 → pyannotators_patterns-0.6.11}/src/pyannotators_patterns/__init__.py

@@ -1,3 +1,3 @@
 """Annotator based on Presidio pattern recognizer"""
 
-__version__ = "0.6.7"
+__version__ = "0.6.11"