python-ort 0.9.5__tar.gz → 0.10.0__tar.gz

{python_ort-0.9.5 → python_ort-0.10.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: python-ort
-Version: 0.9.5
+Version: 0.10.0
 Summary: A Python Ort model serialization library
 License-Expression: MIT
 License-File: LICENSE
@@ -13,7 +13,7 @@ Classifier: Programming Language :: Python :: 3.12
 Classifier: Programming Language :: Python :: 3.13
 Classifier: Programming Language :: Python :: 3.14
 Classifier: Topic :: Software Development :: Libraries :: Python Modules
-Requires-Dist: click>=8.4.1
+Requires-Dist: click>=8.4.2
 Requires-Dist: license-expression>=30.4.4
 Requires-Dist: packageurl-python>=0.17.6
 Requires-Dist: pydantic>=2.13.4

{python_ort-0.9.5 → python_ort-0.10.0}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "python-ort"
-version = "0.9.5"
+version = "0.10.0"
 description = "A Python Ort model serialization library"
 readme = "README.md"
 requires-python = ">=3.10"
@@ -18,11 +18,11 @@ classifiers = [
   "Topic :: Software Development :: Libraries :: Python Modules",
 ]
 dependencies = [
-  "click>=8.4.1",
-  "license-expression>=30.4.4",
-  "packageurl-python>=0.17.6",
-  "pydantic>=2.13.4",
-  "pyyaml>=6.0.3",
+    "click>=8.4.2",
+    "license-expression>=30.4.4",
+    "packageurl-python>=0.17.6",
+    "pydantic>=2.13.4",
+    "pyyaml>=6.0.3",
 ]
 
 [project.scripts]
@@ -30,12 +30,12 @@ ort-validate = "tools.ort_validate:main"
 
 [dependency-groups]
 dev = [
-  "datamodel-code-generator[http]>=0.64.0",
-  "pytest>=9.1.0",
-  "rich>=15.0.0",
-  "ruff>=0.15.17",
-  "ty>=0.0.50",
-  "types-pyyaml>=6.0.12.20260518",
+    "datamodel-code-generator[http]>=0.71.0",
+    "pytest>=9.1.1",
+    "rich>=15.0.0",
+    "ruff>=0.16.0",
+    "ty>=0.0.64",
+    "types-pyyaml>=6.0.12.20260724",
 ]
 
 [build-system]
@@ -44,7 +44,8 @@ build-backend = "uv_build"
 
 [tool.codespell]
 skip = [
-  ".agents",
+  ".agents/*",
+
 ]
 
 [tool.pylint.messages_control]

{python_ort-0.9.5 → python_ort-0.10.0}/src/ort/models/config/scan_storage_configuration.py

@@ -38,7 +38,7 @@ class ScanStorageConfiguration(BaseModel):
     @classmethod
     def validate_provenance(cls, v):
         if not isinstance(v, dict):
-            raise ValueError("Config must be a dictionary.")
+            raise TypeError("Config must be a dictionary.")
         # Return the dict as-is; ScanStorageConfiguration with extra="allow"
         # will store all fields without needing to instantiate subclasses.
         return v

{python_ort-0.9.5 → python_ort-0.10.0}/src/ort/models/identifier.py

@@ -64,7 +64,7 @@ class Identifier(BaseModel):
         raise TypeError("Identifier must be a dict or a string in the correct format")
 
     def __str__(self) -> str:
-        return ":".join([self.orttype, self.namespace, self.name, self.version])
+        return f"{self.orttype}:{self.namespace}:{self.name}:{self.version}"
 
     @model_serializer(mode="plain")
     def serialize(self) -> str:

{python_ort-0.9.5 → python_ort-0.10.0}/src/ort/models/provenance.py

@@ -27,24 +27,18 @@ class UnknownProvenance(Provenance):
     Provenance information about the origin of source code.
     """
 
-    pass
-
 
 class KnownProvenance(Provenance):
     """
     Provenance information about the origin of source code.
     """
 
-    pass
-
 
 class RemoteProvenance(KnownProvenance):
     """
     Provenance information about the origin of source code.
     """
 
-    pass
-
 
 class ArtifactProvenance(RemoteProvenance):
     """

{python_ort-0.9.5 → python_ort-0.10.0}/src/ort/models/vulnerabilities/vulnerability.py

@@ -37,3 +37,9 @@ class Vulnerability(BaseModel):
         ...,
         description="A list with detailed information for this vulnerability obtained from different sources.",
     )
+
+    first_fixed_versions: set[str] = Field(
+        default_factory=set,
+        description="The first package versions that contain a fix for this [Vulnerability]. There could be multiple"
+        "first versions in case vulnerability fixes are back-ported to distinct release branches.",
+    )

{python_ort-0.9.5 → python_ort-0.10.0}/src/tools/ort_validate.py

@@ -9,7 +9,7 @@ from typing import TypeVar
 import click
 from pydantic import BaseModel, ValidationError
 
-from ort import RepositoryConfiguration, ort_yaml_load
+from ort import OrtResult, RepositoryConfiguration, ort_yaml_load
 from ort.models import LicenseClassifications
 
 logger = logging.getLogger()
@@ -40,7 +40,6 @@ def main(debug: bool = False) -> None:
     logging.basicConfig(level=logging.DEBUG)
     if debug:
         logging.basicConfig(level=logging.DEBUG)
-    pass
 
 
 @click.command()
@@ -55,8 +54,15 @@ def repository_configuration(datafile):
     load_and_validate(RepositoryConfiguration, datafile)
 
 
+@click.command()
+@click.argument("datafile")
+def ort_result(datafile):
+    load_and_validate(OrtResult, datafile)
+
+
 main.add_command(repository_configuration)
 main.add_command(license_classifications)
+main.add_command(ort_result)
 
 if __name__ == "__main__":
     main()

{python_ort-0.9.5 → python_ort-0.10.0}/src/ort/__init__.py

@@ -9,8 +9,8 @@ from .utils.yaml_loader import OrtYamlLoader, ort_yaml_load
 
 __all__ = [
     "AnalyzerResult",
+    "OrtResult",
     "OrtYamlLoader",
     "RepositoryConfiguration",
-    "OrtResult",
     "ort_yaml_load",
 ]

{python_ort-0.9.5 → python_ort-0.10.0}/src/ort/models/__init__.py

@@ -47,10 +47,10 @@ __all__ = [
     "DependencyGraphEdge",
     "DependencyGraphNode",
     "DependencyReference",
+    "Excludes",
     "Hash",
     "Identifier",
     "Includes",
-    "Excludes",
     "Issue",
     "LicenseClassifications",
     "OrtResult",
@@ -59,10 +59,10 @@ __all__ = [
     "PackageCurationData",
     "PackageLinkage",
     "PackageReference",
-    "PathExcludeReason",
-    "PathIncludeReason",
     "PathExclude",
+    "PathExcludeReason",
     "PathInclude",
+    "PathIncludeReason",
     "Project",
     "RemoteArtifact",
     "Repository",