python-neva 3.6.0__tar.gz → 3.7.0__tar.gz

python_neva-3.7.0/.gitlab-ci.yml

@@ -0,0 +1,79 @@
+---
+variables:
+  PYTHON_VERSION: "3.12"
+  UV_VERSION: "0.9.28"
+  BASE_LAYER: bookworm-slim
+  UV_LINK_MODE: copy
+  UV_CACHE_DIR: .cache/uv
+
+stages:
+  - code_qa
+  - test
+  - deps
+
+##### Deps #####
+.uv_base:
+  image: ghcr.io/astral-sh/uv:$UV_VERSION-python$PYTHON_VERSION-$BASE_LAYER
+  cache:
+    key:
+      files:
+        - uv.lock
+    paths:
+      - .cache/uv
+      - .venv
+  before_script:
+    - uv sync --frozen --all-extras
+
+.default_rules:
+  rules:
+    - if: $CI_PIPELINE_SOURCE == "merge_request_event"
+    - if: $CI_COMMIT_BRANCH == "main"
+
+##### Code QA #####
+ruff:lint:
+  extends: [.uv_base, .default_rules]
+  stage: code_qa
+  script:
+    - uv run --frozen ruff check .
+
+ruff:format:
+  extends: [.uv_base, .default_rules]
+  stage: code_qa
+  script:
+    - uv run --frozen ruff format --check .
+
+pyrefly:
+  extends: [.uv_base, .default_rules]
+  stage: code_qa
+  script:
+    - uv run --frozen pyrefly check
+
+##### Test #####
+pytest:
+  extends: [.uv_base, .default_rules]
+  stage: test
+  script:
+    - uv run --frozen pytest
+
+##### Deps contract #####
+# Resolves every direct dependency at its declared floor, so a `>=` lower than
+# what the code needs fails here instead of in a user's install. Three things
+# keep this job honest, and dropping any one makes it pass without testing
+# anything: it must not extend .uv_base, whose before_script installs the
+# committed lock; --upgrade discards that lock as a preference set, without
+# which uv reuses it and lowers nothing; --frozen on sync and run stops uv
+# re-resolving at the default highest strategy and discarding the floors it
+# just computed. Rewriting uv.lock here is expected and must never be
+# committed.
+deps:floors:
+  extends: .default_rules
+  image: ghcr.io/astral-sh/uv:$UV_VERSION-python$PYTHON_VERSION-$BASE_LAYER
+  stage: deps
+  cache:
+    key: floors
+    paths:
+      - .cache/uv
+  script:
+    - uv lock --upgrade --resolution lowest-direct
+    - uv sync --frozen --all-extras
+    - uv run --frozen pytest

{python_neva-3.6.0 → python_neva-3.7.0}/.pre-commit-config.yaml

@@ -16,7 +16,7 @@ repos:
       - id: debug-statements
 
   - repo: https://github.com/astral-sh/ruff-pre-commit
-    rev: v0.15.6
+    rev: v0.16.5
     hooks:
       - id: ruff
         args: [--fix, --exit-non-zero-on-fix]

{python_neva-3.6.0 → python_neva-3.7.0}/CHANGELOG.md

@@ -1,3 +1,21 @@
+## 3.7.0 (2026-08-28)
+
+### ✨ Features
+
+- **deps**: require only what the core imports
+
+### 🐛🚑️ Fixes
+
+- **deps**: declare starlette directly
+
+### 💚👷 CI & Build
+
+- add the pipeline with a lowest-direct floors gate
+
+### 📌➕⬇️➖⬆️ Dependencies
+
+- upgrade all dependencies and adapt to ruff 0.16
+
 ## 3.6.0 (2026-08-28)
 
 ### ✨ Features

{python_neva-3.6.0 → python_neva-3.7.0}/PKG-INFO

@@ -1,22 +1,26 @@
 Metadata-Version: 2.5
 Name: python-neva
-Version: 3.6.0
+Version: 3.7.0
 Summary: Add your description here
 Requires-Python: >=3.12
 Requires-Dist: aiosqlite>=0.20.0
 Requires-Dist: asyncpg>=0.30.0
 Requires-Dist: cryptography>=46.0.3
 Requires-Dist: dishka>=1.10.0
-Requires-Dist: fastapi[all]>=0.129.0
-Requires-Dist: faststream>=0.6.6
 Requires-Dist: opentelemetry-instrumentation-sqlalchemy>=0.62b0
 Requires-Dist: pwdlib[argon2,bcrypt]>=0.3.0
+Requires-Dist: pydantic>=2.7
 Requires-Dist: pyinstrument>=5.1.1
 Requires-Dist: sqlalchemy[asyncio]>=2.0.0
+Requires-Dist: starlette>=0.41
 Requires-Dist: structlog>=25.5.0
-Requires-Dist: typer>=0.21.1
+Requires-Dist: typing-extensions>=4.13
 Provides-Extra: fastapi
-Requires-Dist: neva-fastapi>=1.0.0; extra == 'fastapi'
+Requires-Dist: neva-fastapi>=1.1.1; extra == 'fastapi'
+Provides-Extra: faststream
+Requires-Dist: faststream>=0.6.6; extra == 'faststream'
+Provides-Extra: polyfactory
+Requires-Dist: polyfactory>=3.1.0; extra == 'polyfactory'
 Provides-Extra: testing
 Requires-Dist: pytest-asyncio>=0.25.3; extra == 'testing'
 Requires-Dist: pytest>=9.0.2; extra == 'testing'

{python_neva-3.6.0 → python_neva-3.7.0}/neva/database/connection.py

@@ -100,7 +100,7 @@ class ConnectionManager:
 
     @property
     def engine(self) -> asyncio.AsyncEngine:
-        """Returns the underlying engine."""
+        """The underlying engine."""
         return self._engine
 
     async def dispose(self) -> None:

{python_neva-3.6.0 → python_neva-3.7.0}/neva/database/transaction.py

@@ -134,7 +134,7 @@ class BoundTransaction(Transaction):
 
     @property
     def is_accessible_from_current_task(self) -> bool:
-        """Return True if the current asyncio task may use this transaction's session.
+        """Whether the current asyncio task may use this transaction's session.
 
         Returns:
             True if the transaction was created by the current task, or if

{python_neva-3.6.0 → python_neva-3.7.0}/neva/support/strategy.py

@@ -74,12 +74,12 @@ class StrategyResolver[T](ABC):
 
     @property
     def strategies(self) -> dict[str, T]:
-        """Return the created drivers."""
+        """The created drivers."""
         return self._strategies
 
     @property
     def app(self) -> Application:
-        """Return the underlying container."""
+        """The underlying container."""
         return self._app
 
     def set_container(self, app: Application) -> None:

{python_neva-3.6.0 → python_neva-3.7.0}/pyproject.toml

@@ -1,21 +1,21 @@
 [project]
 name = "python-neva"
-version = "3.6.0"
+version = "3.7.0"
 description = "Add your description here"
 readme = "README.md"
 requires-python = ">=3.12"
 dependencies = [
   "cryptography>=46.0.3",
   "dishka>=1.10.0",
-  "fastapi[all]>=0.129.0",
-  "faststream>=0.6.6",
   "pwdlib[argon2,bcrypt]>=0.3.0",
+  "pydantic>=2.7",
   "pyinstrument>=5.1.1",
   "structlog>=25.5.0",
   "sqlalchemy[asyncio]>=2.0.0",
+  "starlette>=0.41",
+  "typing-extensions>=4.13",
   "asyncpg>=0.30.0",
   "aiosqlite>=0.20.0",
-  "typer>=0.21.1",
   "opentelemetry-instrumentation-sqlalchemy>=0.62b0",
 ]
 
@@ -32,12 +32,16 @@ dev = [
   "pytest-asyncio>=0.25.3",
   "pytest-benchmark>=5.2.3",
   "pytest-cov>=7.0.0",
+  "httpx>=0.27",
+  "httpx2>=0.1.0",
   "ruff>=0.15.6",
 ]
 
 [project.optional-dependencies]
 testing = ["pytest>=9.0.2", "pytest-asyncio>=0.25.3"]
-fastapi = ["neva-fastapi>=1.0.0"]
+fastapi = ["neva-fastapi>=1.1.1"]
+faststream = ["faststream>=0.6.6"]
+polyfactory = ["polyfactory>=3.1.0"]
 
 [build-system]
 requires = ["hatchling"]

python_neva-3.7.0/ruff.toml

@@ -0,0 +1,47 @@
+target-version = "py312"
+line-length = 88
+
+[lint]
+select = [
+  "ANN",
+  "ASYNC",
+  "S",
+  "FBT",
+  "B",
+  "A",
+  "C4",
+  "DTZ",
+  "ISC",
+  "ICN",
+  "SIM",
+  "SLOT",
+  "I",
+  "E",
+  "W",
+  "DOC",
+  "D",
+  "F",
+  "RUF",
+]
+preview = true
+ignore = [
+  "explicit-string-concatenation", # enforce explicit string concatenation
+  "undocumented-public-init",      # Allow missing docstrings in __init__
+  "undocumented-public-module",    # Allow missing docstrings in public modules
+  "unused-async",
+]
+
+[lint.per-file-ignores]
+"tests/*" = ["D", "assert"]
+
+[lint.isort]
+force-single-line = false
+lines-after-imports = 2
+
+[lint.pydocstyle]
+convention = "google"
+
+[format]
+# ruff 0.16 formats Python blocks inside Markdown; the wiki guides rely on
+# hand-aligned trailing comments the formatter would re-flow.
+exclude = ["*.md"]

{python_neva-3.6.0 → python_neva-3.7.0}/tests/arch/test_registration.py

@@ -98,9 +98,7 @@ class TestRegisterAfterBoot:
         async with app.lifespan():
             assert app.register(WidgetProvider).is_ok
 
-    async def test_registration_reopens_after_shutdown(
-        self, app: Application
-    ) -> None:
+    async def test_registration_reopens_after_shutdown(self, app: Application) -> None:
         async with app.lifespan():
             pass
 
@@ -137,9 +135,7 @@ class TestLifespanCleanup:
 
         assert torn_down == ["resource"]
 
-    async def test_facade_is_unset_when_the_body_raises(
-        self, app: Application
-    ) -> None:
+    async def test_facade_is_unset_when_the_body_raises(self, app: Application) -> None:
         with pytest.raises(RuntimeError, match="boom"):
             async with app.lifespan():
                 raise RuntimeError("boom")

{python_neva-3.6.0 → python_neva-3.7.0}/tests/config/test_loader.py

@@ -101,9 +101,7 @@ class TestLoadAll:
 class TestModuleNamespacing:
     """Config files are data, and must not displace real modules."""
 
-    def test_a_config_file_does_not_shadow_a_core_module(
-        self, tmp_path: Path
-    ) -> None:
+    def test_a_config_file_does_not_shadow_a_core_module(self, tmp_path: Path) -> None:
         config_dir = tmp_path / "config"
         config_dir.mkdir()
         _ = (config_dir / "repository.py").write_text("""config = {"x": 1}""")
@@ -117,9 +115,7 @@ class TestModuleNamespacing:
             config_dir / "repository.py"
         )
 
-    def test_config_modules_are_not_left_in_sys_modules(
-        self, tmp_path: Path
-    ) -> None:
+    def test_config_modules_are_not_left_in_sys_modules(self, tmp_path: Path) -> None:
         config_dir = tmp_path / "config"
         config_dir.mkdir()
         _ = (config_dir / "app.py").write_text("""config = {"name": "X"}""")

{python_neva-3.6.0 → python_neva-3.7.0}/tests/events/conftest.py

@@ -16,7 +16,7 @@ from neva.events.event_registry import EventRegistry
 class OrderPlaced(Event[int]):
     """An immediate event used across test modules."""
 
-    id: int = pydantic.Field(default=randint(0, 200))  # noqa: S311
+    id: int = pydantic.Field(default=randint(0, 200))  # ruff: ignore[suspicious-non-cryptographic-random-usage]
     order_id: int
 
 

{python_neva-3.6.0 → python_neva-3.7.0}/tests/events/test_listen_on_parent_class.py

@@ -8,7 +8,7 @@ from neva.support import Ok, Result
 
 
 class OrderEvent(Event[int]):
-    id: int = pydantic.Field(default=randint(0, 200))  # noqa: S311
+    id: int = pydantic.Field(default=randint(0, 200))  # ruff: ignore[suspicious-non-cryptographic-random-usage]
     order_id: int
 
 

{python_neva-3.6.0 → python_neva-3.7.0}/tests/security/test_encrypter.py

@@ -70,7 +70,7 @@ class TestEncryptDecryptRoundTrip(TestCase):
         assert math.isclose(cast(float, decrypted), 3.14)
 
     async def test_encrypt_decrypt_boolean(self) -> None:
-        encrypted = Crypt.encrypt(True).unwrap()  # noqa: FBT003
+        encrypted = Crypt.encrypt(True).unwrap()  # ruff: ignore[boolean-positional-value-in-call]
         decrypted = Crypt.decrypt(encrypted).unwrap()
 
         assert decrypted is True

{python_neva-3.6.0 → python_neva-3.7.0}/tests/security/test_hash_manager.py

@@ -52,22 +52,22 @@ config = {
         return config_dir
 
     async def test_hash_manager_creates_with_default_driver(self) -> None:
-        password = "secret_password"  # noqa: S105
+        password = "secret_password"  # ruff: ignore[hardcoded-password-string]
         hashed = Hash.make(password)
 
         assert hashed.startswith("$2b$")
         assert Hash.check(password, hashed)
 
     async def test_hash_manager_can_use_specific_hasher(self) -> None:
-        password = "another_password"  # noqa: S105
+        password = "another_password"  # ruff: ignore[hardcoded-password-string]
         hashed = Hash.make(password, hasher="argon2")
 
         assert hashed.startswith("$argon2")
         assert Hash.check(password, hashed, hasher="argon2")
 
     async def test_hash_manager_check_password(self) -> None:
-        password = "test_password"  # noqa: S105
-        wrong_password = "wrong_password"  # noqa: S105
+        password = "test_password"  # ruff: ignore[hardcoded-password-string]
+        wrong_password = "wrong_password"  # ruff: ignore[hardcoded-password-string]
 
         hashed = Hash.make(password)
 
@@ -75,7 +75,7 @@ config = {
         assert not Hash.check(wrong_password, hashed)
 
     async def test_hash_manager_needs_rehash(self) -> None:
-        password = "test_password"  # noqa: S105
+        password = "test_password"  # ruff: ignore[hardcoded-password-string]
         hashed = Hash.make(password)
 
         assert not Hash.needs_rehash(hashed)
@@ -116,7 +116,7 @@ config = {"providers": [SecurityProvider]}
         return config_dir
 
     async def test_bcrypt_works_without_a_bcrypt_namespace(self) -> None:
-        password = "secret_password"  # noqa: S105
+        password = "secret_password"  # ruff: ignore[hardcoded-password-string]
 
         hashed = Hash.make(password)
 
@@ -124,7 +124,7 @@ config = {"providers": [SecurityProvider]}
         assert Hash.check(password, hashed)
 
     async def test_argon2_works_without_an_argon_namespace(self) -> None:
-        password = "secret_password"  # noqa: S105
+        password = "secret_password"  # ruff: ignore[hardcoded-password-string]
 
         hashed = Hash.make(password, hasher="argon2")
 
@@ -168,7 +168,7 @@ config = {"providers": [SecurityProvider]}
         return config_dir
 
     async def test_make_async_round_trips(self) -> None:
-        password = "secret_password"  # noqa: S105
+        password = "secret_password"  # ruff: ignore[hardcoded-password-string]
 
         hashed = await Hash.make_async(password)