pychrony 2.0.1__tar.gz → 2.0.2__tar.gz

{pychrony-2.0.1 → pychrony-2.0.2}/.github/workflows/ci.yml

@@ -22,6 +22,7 @@ jobs:
   # Keep this matrix in sync with the classifiers and the cibuildwheel
   # `build` allowlist in pyproject.toml, and with release.yml.
   test:
+    name: Tests (Python ${{ matrix.python-version }})
     runs-on: ubuntu-latest
     timeout-minutes: 10
     strategy:
@@ -49,6 +50,7 @@ jobs:
   # Lint and type checking. Results do not vary by interpreter, so this
   # runs once rather than once per matrix entry.
   lint:
+    name: Lint and type check
     runs-on: ubuntu-latest
     timeout-minutes: 10
     steps:
@@ -75,6 +77,7 @@ jobs:
         run: uv run ty check src/
 
   docs:
+    name: Docs build
     runs-on: ubuntu-latest
     timeout-minutes: 10
 
@@ -102,6 +105,7 @@ jobs:
   # Full suite in Docker with libchrony - the only place integration
   # tests run against a live chronyd.
   docker-tests:
+    name: Integration tests (Docker)
     runs-on: ubuntu-latest
     timeout-minutes: 20
     steps:
@@ -123,15 +127,24 @@ jobs:
           cache-from: type=gha
           cache-to: type=gha,mode=max
 
+      # chronyd answers commands before it has resolved its pool and server
+      # names, and the source list grows as each name resolves. Tests that
+      # walk the source list race that growth, so wait until no source has an
+      # unresolved address. chronyc also fails until the command socket is up.
       - name: Run tests
         run: |
           docker run --rm --cap-add=SYS_TIME pychrony-test:latest sh -c '
             chronyd
             i=0
-            until chronyc -n tracking >/dev/null 2>&1; do
+            until chronyc -n activity 2>/dev/null | grep -q "^0 sources with unknown address"; do
               i=$((i + 1))
-              if [ "$i" -ge 40 ]; then echo "chronyd not ready after 20s"; exit 1; fi
+              if [ "$i" -ge 40 ]; then
+                echo "chronyd sources not resolved after 20s"
+                chronyc -n activity
+                exit 1
+              fi
               sleep 0.5
             done
+            echo "chronyd sources resolved after $i polls"
             pytest tests/ -v --tb=short
           '

{pychrony-2.0.1 → pychrony-2.0.2}/.github/workflows/docs.yml

@@ -6,7 +6,7 @@ on:
     tags: [ 'v*' ]
 
 permissions:
-  contents: write
+  contents: read
 
 concurrency:
   group: docs-deploy
@@ -14,8 +14,11 @@ concurrency:
 
 jobs:
   deploy:
+    name: Deploy documentation
     runs-on: ubuntu-latest
     timeout-minutes: 15
+    permissions:
+      contents: write  # mike pushes the built site to the gh-pages branch
 
     steps:
     - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

{pychrony-2.0.1 → pychrony-2.0.2}/.github/workflows/release.yml

@@ -8,6 +8,12 @@ on:
 permissions:
   contents: read
 
+# Never cancel a release in progress: a half-finished run can leave Test PyPI
+# holding a version that production PyPI never gets.
+concurrency:
+  group: release-${{ github.ref }}
+  cancel-in-progress: false
+
 jobs:
   build-wheels:
     name: Build wheels (${{ matrix.arch }})
@@ -76,7 +82,7 @@ jobs:
     timeout-minutes: 15
     permissions:
       contents: read
-      id-token: write
+      id-token: write  # OIDC token for Test PyPI Trusted Publishing
 
     steps:
     - name: Download all artifacts
@@ -146,3 +152,30 @@ jobs:
         assert pychrony.__version__ == expected, \
             f'Version mismatch: {pychrony.__version__} != {expected}'
         "
+
+  # Production publish lives in this workflow, after verification, so it can
+  # only ever upload the artifacts this tag-push run built and Test PyPI served.
+  # The `pypi` environment's required reviewer gates it. To retry a failed
+  # publish, re-run this job from the Release run.
+  publish-pypi:
+    name: Publish to Production PyPI
+    needs: verify-testpypi
+    runs-on: ubuntu-latest
+    environment: pypi
+    timeout-minutes: 15
+    permissions:
+      contents: read
+      id-token: write  # OIDC token for PyPI Trusted Publishing
+
+    steps:
+    - name: Download all artifacts
+      uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+      with:
+        path: dist/
+        merge-multiple: true
+
+    - name: List artifacts
+      run: ls -la dist/
+
+    - name: Publish to PyPI
+      uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # v1.14.2

{pychrony-2.0.1/src/pychrony.egg-info → pychrony-2.0.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: pychrony
-Version: 2.0.1
+Version: 2.0.2
 Summary: Python bindings for chrony NTP client
 Author-email: arunderwood <arunderwood@users.noreply.github.com>
 License-Expression: MIT AND LGPL-2.1-or-later

{pychrony-2.0.1 → pychrony-2.0.2/src/pychrony.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: pychrony
-Version: 2.0.1
+Version: 2.0.2
 Summary: Python bindings for chrony NTP client
 Author-email: arunderwood <arunderwood@users.noreply.github.com>
 License-Expression: MIT AND LGPL-2.1-or-later

{pychrony-2.0.1 → pychrony-2.0.2}/src/pychrony.egg-info/SOURCES.txt

@@ -22,7 +22,6 @@ uv.lock
 .github/dependabot.yml
 .github/workflows/ci.yml
 .github/workflows/docs.yml
-.github/workflows/publish.yml
 .github/workflows/release.yml
 .specify/memory/constitution.md
 .specify/scripts/bash/check-prerequisites.sh

{pychrony-2.0.1 → pychrony-2.0.2}/src/pychrony.egg-info/scm_file_list.json

@@ -13,7 +13,6 @@
     ".github/dependabot.yml",
     ".github/workflows/ci.yml",
     ".github/workflows/docs.yml",
-    ".github/workflows/publish.yml",
     ".github/workflows/release.yml",
     ".gitignore",
     ".gitmodules",

{pychrony-2.0.1 → pychrony-2.0.2}/src/pychrony.egg-info/scm_version.json

@@ -1,7 +1,7 @@
 {
-  "tag": "2.0.1",
+  "tag": "2.0.2",
   "distance": 0,
-  "node": "g55fad8e9674fe3fd8c2746e533b8819e7799c87c",
+  "node": "g8cd3694007006be9e3da9440e32efb2c4ee38058",
   "dirty": false,
   "branch": "HEAD",
   "node_date": "2026-09-24"

pychrony-2.0.1/.github/workflows/publish.yml

@@ -1,69 +0,0 @@
-name: Publish to PyPI
-
-on:
-  # Auto-trigger after successful Release workflow
-  workflow_run:
-    workflows: ["Release"]
-    types: [completed]
-  # Manual fallback
-  workflow_dispatch:
-    inputs:
-      release_tag:
-        description: 'Release tag to publish (e.g., v0.1.0)'
-        required: true
-        type: string
-
-permissions:
-  contents: read
-
-jobs:
-  publish-pypi:
-    name: Publish to Production PyPI
-    runs-on: ubuntu-latest
-    environment: pypi
-    permissions:
-      contents: read
-      id-token: write
-    timeout-minutes: 15
-    # workflow_run matches by workflow *name*, so a fork PR that adds its own
-    # "Release" workflow on pull_request would also trigger this job. Accept only
-    # runs from a push (a tag, for the real Release) in this repository.
-    if: >
-      (github.event_name == 'workflow_run' &&
-       github.event.workflow_run.conclusion == 'success' &&
-       github.event.workflow_run.event == 'push' &&
-       github.event.workflow_run.head_repository.full_name == github.repository) ||
-      github.event_name == 'workflow_dispatch'
-
-    steps:
-    - name: Download artifacts (from triggering workflow_run)
-      if: github.event_name == 'workflow_run'
-      uses: dawidd6/action-download-artifact@d63b86af1b34672e53c440b1b83979861906bad7 # v24
-      with:
-        workflow: release.yml
-        run_id: ${{ github.event.workflow_run.id }}
-        name: ^(wheels-.*|sdist)$
-        name_is_regexp: true
-        path: dist/
-        merge_multiple: true
-        if_no_artifact_found: fail
-
-    - name: Download artifacts (from manual dispatch)
-      if: github.event_name == 'workflow_dispatch'
-      uses: dawidd6/action-download-artifact@d63b86af1b34672e53c440b1b83979861906bad7 # v24
-      with:
-        workflow: release.yml
-        name: ^(wheels-.*|sdist)$
-        name_is_regexp: true
-        path: dist/
-        merge_multiple: true
-        search_artifacts: true
-        workflow_conclusion: success
-        branch: ${{ github.event.inputs.release_tag }}
-        if_no_artifact_found: fail
-
-    - name: List artifacts
-      run: ls -la dist/
-
-    - name: Publish to PyPI
-      uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # v1.14.2