python-semantic-release 9.4.0__py3-none-any.whl → 9.4.2__py3-none-any.whl

{python_semantic_release-9.4.0.dist-info → python_semantic_release-9.4.2.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: python-semantic-release
-Version: 9.4.0
+Version: 9.4.2
 Summary: Automatic Semantic Versioning for Python projects
 Author-email: Rolf Erik Lekang <me@rolflekang.com>
 License: MIT
@@ -30,19 +30,19 @@ Requires-Dist: tomlkit ~=0.11
 Requires-Dist: dotty-dict ~=1.3
 Requires-Dist: importlib-resources ~=6.0
 Requires-Dist: pydantic ~=2.0
-Requires-Dist: rich ~=12.5
+Requires-Dist: rich ~=13.0
 Requires-Dist: shellingham ~=1.5
 Provides-Extra: dev
 Requires-Dist: pre-commit ~=3.5 ; extra == 'dev'
 Requires-Dist: tox ~=4.11 ; extra == 'dev'
-Requires-Dist: ruff ==0.3.4 ; extra == 'dev'
+Requires-Dist: ruff ==0.3.5 ; extra == 'dev'
 Provides-Extra: docs
 Requires-Dist: Sphinx ~=6.0 ; extra == 'docs'
 Requires-Dist: sphinxcontrib-apidoc ==0.5.0 ; extra == 'docs'
 Requires-Dist: sphinx-autobuild ==2024.2.4 ; extra == 'docs'
-Requires-Dist: furo ~=2023.3 ; extra == 'docs'
+Requires-Dist: furo ~=2024.1 ; extra == 'docs'
 Provides-Extra: mypy
-Requires-Dist: mypy ==1.8.0 ; extra == 'mypy'
+Requires-Dist: mypy ==1.9.0 ; extra == 'mypy'
 Requires-Dist: types-requests ~=2.31.0 ; extra == 'mypy'
 Provides-Extra: test
 Requires-Dist: coverage[toml] ~=7.0 ; extra == 'test'

{python_semantic_release-9.4.0.dist-info → python_semantic_release-9.4.2.dist-info}/RECORD

@@ -1,8 +1,8 @@
-semantic_release/__init__.py,sha256=WXo3kBqr41p8SiuEqS2v7ET5zAKCTK4d5KJ7Zc0Sgs0,870
+semantic_release/__init__.py,sha256=PnqssXtNohSJYnHQls9mQ0VheM9Lx9YBzjCAXqFlefs,870
 semantic_release/__main__.py,sha256=vXOARLV7KHeVXgpOMU0Q-8wovpdsOrtTsycxulI5xIE,106
 semantic_release/const.py,sha256=Z1o2QNh60wSLeF-_1TemMBjU3ZXbV0XghnUFsbTVfOs,831
 semantic_release/enums.py,sha256=D5B_reQGGKQQT22HO5PUtvn2Bok3fkht6TfJtXkmAUg,1020
-semantic_release/errors.py,sha256=8cNiMhgUTNZC0CecokLyl9YWxREHEh9otm1cRs9kkbU,1001
+semantic_release/errors.py,sha256=070p5fRe4l2BYv1zbTZjnM5YwRcJmi9BVa8TdMFzvf0,1159
 semantic_release/helpers.py,sha256=d1jOX0SNyqPc_3wr14xR25FfpqhMd4Ev7MNBOWlScc0,5581
 semantic_release/changelog/__init__.py,sha256=Bg6Xe5Vt32rWoMscW-hd4sUwiZqzWmsg4CD1EhMesMY,262
 semantic_release/changelog/context.py,sha256=ItSz5Bon2mcJkLxyQZzBTukN0zEdcaVQ4iXvz3jGCLc,986
@@ -10,9 +10,9 @@ semantic_release/changelog/release_history.py,sha256=ShzZpxTjhxka6TMbzOzYzG3EuCH
 semantic_release/changelog/template.py,sha256=JqZcjdozM9-059Sa8PfiHxYNeyZFa0jxk_beyRLv5sU,4640
 semantic_release/cli/__init__.py,sha256=gwAYhZO-4TR0tKCkQ4GqutWsL--0CII2_dcbrElI4M4,419
 semantic_release/cli/common.py,sha256=cVQUI7Uaac_nJ7VEXuJ7Q9pVJpuMVRvE7bBl_i96g20,1439
-semantic_release/cli/config.py,sha256=lBkTlc2x4PkCj7aGJn6DahsF_LH7Fsy-5OiTW61wRzA,16070
+semantic_release/cli/config.py,sha256=9NhaxZ1F1ux-8Qu7_KeE7kLH3eCsllkPV4Hy5YI1tv4,17574
 semantic_release/cli/const.py,sha256=S8oNNpSaKdZxcAs7PAKEjQHic0czoJBGd7XHo57FOzw,39
-semantic_release/cli/github_actions_output.py,sha256=stGWcuMtelY0qM2E_-IfofP6UvsQ6czsO7qpMfnRJI4,2102
+semantic_release/cli/github_actions_output.py,sha256=Wy4jEIpSFgoMyJqq4FD7scIpgovivutFLZ7Fs4y2CUY,2110
 semantic_release/cli/masking_filter.py,sha256=DxqjiJyABlzwwwZ1r8JGQpb6QrF00StJFm0-2-s5Fv0,3071
 semantic_release/cli/util.py,sha256=FyXaBkeL7nXKjy3X9rQLEwvn7p46xPekp2V8Z-5MVrk,3755
 semantic_release/cli/commands/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
@@ -21,7 +21,7 @@ semantic_release/cli/commands/cli_context.py,sha256=fOLTUKb4UnZGQ6zVhftuvdfZ7fK7
 semantic_release/cli/commands/generate_config.py,sha256=2xZOu3NpyhBp0pWr7d8ugKl_kjqQgpSsSMHq5wHTfrE,1699
 semantic_release/cli/commands/main.py,sha256=LuL-O0LGonI5fQTZn0AUtYv2Ei_CYyNqYHMF_wN4InI,2900
 semantic_release/cli/commands/publish.py,sha256=_pz7rKx65tCH7J2uyWiBghQ61MmmIbxhF9bE4AkE0N8,1703
-semantic_release/cli/commands/version.py,sha256=jz3ao9AV0YeMAwZULSnnanl6OL-NWIc5rnr9E7BrZL0,22111
+semantic_release/cli/commands/version.py,sha256=H_I4AmZzBQdMzYejRKgCyvMtx55omzpSHJFWMz-uQRc,23015
 semantic_release/commit_parser/__init__.py,sha256=cv5HFBdw7OJd4Laj4Ex8ZZ5Tml8GwXgQcXW6Pasr2Ao,615
 semantic_release/commit_parser/_base.py,sha256=aDS0dhFosT5i11tA5Ez8BTeikk6jwXjSEpJnJC5D2cs,2609
 semantic_release/commit_parser/angular.py,sha256=bS7Wrzpg_6zFil5Y4GIZkeGDPhvWQdTlFdWTtGVcpp0,4393
@@ -33,11 +33,11 @@ semantic_release/commit_parser/util.py,sha256=vLcVDErZrExM55jMffos0hyMbNVQoJ-Pee
 semantic_release/data/templates/CHANGELOG.md.j2,sha256=GB3YJwgVrhlcb-g5ESdEh_Gsysb_Texxv-Ip2LjulC0,1066
 semantic_release/data/templates/release_notes.md.j2,sha256=27uIHgG6iYmqdMaoWFP5LJRZcrO-3paqFzHHHsGpXXE,465
 semantic_release/hvcs/__init__.py,sha256=ulesZslSG4Lu8Iz3YzOrPXpdgvgbADq_MV17B-bSYQA,379
-semantic_release/hvcs/_base.py,sha256=VnsEz01W9t3DQ2QHGnsbuAB9jYfZT3hIXRRsCUnhS0g,5635
-semantic_release/hvcs/bitbucket.py,sha256=pGZksLht66zLJXbPIgRz4hntsa-F1A02xl4JNRCXE0o,4626
-semantic_release/hvcs/gitea.py,sha256=FbS5AQTyjBTGk0RLR0Lky3TBoHGtLgjr83N1uje5bn4,9146
-semantic_release/hvcs/github.py,sha256=L29AaUmmtdJTNDJqD6ro3YVcDNr8OMwqTx5ofujOZz8,10710
-semantic_release/hvcs/gitlab.py,sha256=qSvNdQK40QM20-HDh3eIO6Rz8Lo3PEND_4kluugVx4w,6154
+semantic_release/hvcs/_base.py,sha256=qjjlU3rI-sOhIY_FfXsZ9OQGthNYxgzpL4PhlGSXEuA,5232
+semantic_release/hvcs/bitbucket.py,sha256=6vGOcRG7WexxG8SzLcWDIzp7zNpB0ruDLUTQ9GE2jGM,11004
+semantic_release/hvcs/gitea.py,sha256=OTThBTZ93xUP9am7tNIE0UVchhJwG9ASvI6zuiG8oLE,11450
+semantic_release/hvcs/github.py,sha256=qOEGFRYjhGhFfeL7l8adrAUBfi2yd8AUFlARjym383s,16297
+semantic_release/hvcs/gitlab.py,sha256=qmowL22DCNOFa7RwmMTmNmno3BS0dyNYT9L36ujgZ8A,7409
 semantic_release/hvcs/token_auth.py,sha256=ZjT56-NIPB4OKIt1qwHCu1TavXnrWFIBl9ARlg56hgU,663
 semantic_release/hvcs/util.py,sha256=PNKXApgL2np9lpnKjAbo77toRgElLPXrbS1q7621waI,2886
 semantic_release/version/__init__.py,sha256=CLhtGQry9dLIij5XyRa9ZevxU_1p8tjMTSQ-K_GMpWM,270
@@ -45,10 +45,10 @@ semantic_release/version/algorithm.py,sha256=-9ulTy1z4u-jUvbc-FrvEdFL7Omc3O3HhaP
 semantic_release/version/declaration.py,sha256=f6Ld7hIhrqvDrRBapJHr-KDimuyo-4IG8009Zu9BIgU,7357
 semantic_release/version/translator.py,sha256=P1noIsVBn8u6zNOFjG0xKYOWapxqf_PHSMvMeLJ9kXg,3050
 semantic_release/version/version.py,sha256=6PCtSbLP88U1daoxnCwHc--YguZo4waGNLqJ5JfeczE,14175
-python_semantic_release-9.4.0.dist-info/AUTHORS.rst,sha256=XOReVvpymEFUPsS2QPH97jlfJBVrxwS2eu8-jVAe4gk,230
-python_semantic_release-9.4.0.dist-info/LICENSE,sha256=NE85nszX252sdQdu0xgS9qwfYES0k8qS6gW3uO4jRGE,1083
-python_semantic_release-9.4.0.dist-info/METADATA,sha256=GU4p2nEh2IoCvk4nUGldohgzWQyMTCxfWAD8eAXbyyw,5335
-python_semantic_release-9.4.0.dist-info/WHEEL,sha256=GJ7t_kWBFywbagK5eo9IoUwLW6oyOeTKmQ-9iHFVNxQ,92
-python_semantic_release-9.4.0.dist-info/entry_points.txt,sha256=qojUBx_Ywf4u7KgP6NWlDaBDymZVUGQ7m5wF2duC2F0,95
-python_semantic_release-9.4.0.dist-info/top_level.txt,sha256=qYA24nyg3eP-ti5UW7Vuj2aXVmM0wqVHx4mREdRZNAA,17
-python_semantic_release-9.4.0.dist-info/RECORD,,
+python_semantic_release-9.4.2.dist-info/AUTHORS.rst,sha256=XOReVvpymEFUPsS2QPH97jlfJBVrxwS2eu8-jVAe4gk,230
+python_semantic_release-9.4.2.dist-info/LICENSE,sha256=NE85nszX252sdQdu0xgS9qwfYES0k8qS6gW3uO4jRGE,1083
+python_semantic_release-9.4.2.dist-info/METADATA,sha256=9MVGGhT1GY66GdrYc8oVvYaGV2gUS4skpG-DuPd5XIE,5335
+python_semantic_release-9.4.2.dist-info/WHEEL,sha256=GJ7t_kWBFywbagK5eo9IoUwLW6oyOeTKmQ-9iHFVNxQ,92
+python_semantic_release-9.4.2.dist-info/entry_points.txt,sha256=qojUBx_Ywf4u7KgP6NWlDaBDymZVUGQ7m5wF2duC2F0,95
+python_semantic_release-9.4.2.dist-info/top_level.txt,sha256=qYA24nyg3eP-ti5UW7Vuj2aXVmM0wqVHx4mREdRZNAA,17
+python_semantic_release-9.4.2.dist-info/RECORD,,

semantic_release/__init__.py

@@ -24,7 +24,7 @@ from semantic_release.version import (
     tags_and_versions,
 )
 
-__version__ = "9.4.0"
+__version__ = "9.4.2"
 
 
 def setup_hook(argv: list[str]) -> None:

semantic_release/cli/commands/version.py

@@ -11,6 +11,7 @@ import click
 import shellingham  # type: ignore[import]
 from click_option_group import MutuallyExclusiveOptionGroup, optgroup
 from git.exc import GitCommandError
+from requests import HTTPError
 
 from semantic_release.changelog import ReleaseHistory, environment, recursive_render
 from semantic_release.changelog.context import make_changelog_context
@@ -23,6 +24,7 @@ from semantic_release.cli.github_actions_output import VersionGitHubActionsOutpu
 from semantic_release.cli.util import indented, noop_report, rprint
 from semantic_release.const import DEFAULT_SHELL, DEFAULT_VERSION
 from semantic_release.enums import LevelBump
+from semantic_release.errors import UnexpectedResponse
 from semantic_release.version import Version, next_version, tags_and_versions
 
 log = logging.getLogger(__name__)
@@ -633,6 +635,21 @@ def version(  # noqa: C901
                     release_notes=release_notes,
                     prerelease=new_version.is_prerelease,
                 )
+            except HTTPError as err:
+                log.exception(err)
+                ctx.fail(str.join("\n", [str(err), "Failed to create release!"]))
+            except UnexpectedResponse as err:
+                log.exception(err)
+                ctx.fail(
+                    str.join(
+                        "\n",
+                        [
+                            str(err),
+                            "Unexpected response from remote VCS!",
+                            "Before re-running, make sure to clean up any artifacts on the hvcs that may have already been created.",
+                        ],
+                    )
+                )
             except Exception as e:
                 log.exception(e)
                 ctx.fail(str(e))
@@ -641,6 +658,9 @@ def version(  # noqa: C901
                 log.info("Uploading asset %s", asset)
                 try:
                     hvcs_client.upload_asset(release_id, asset)
+                except HTTPError as err:
+                    log.exception(err)
+                    ctx.fail(str.join("\n", [str(err), "Failed to upload asset!"]))
                 except Exception as e:
                     log.exception(e)
                     ctx.fail(str(e))

semantic_release/cli/config.py

@@ -12,10 +12,18 @@ from typing import Any, ClassVar, Dict, List, Literal, Optional, Tuple, Type, Un
 from git import Actor, InvalidGitRepositoryError
 from git.repo.base import Repo
 from jinja2 import Environment
-from pydantic import BaseModel, Field, RootModel, ValidationError, model_validator
+from pydantic import (
+    BaseModel,
+    Field,
+    RootModel,
+    ValidationError,
+    field_validator,
+    model_validator,
+)
 
-# For Python 3.8, 3.9, 3.10 compatibility
+# typing_extensions is for Python 3.8, 3.9, 3.10 compatibility
 from typing_extensions import Annotated, Self
+from urllib3.util.url import parse_url
 
 from semantic_release import hvcs
 from semantic_release.changelog import environment
@@ -111,12 +119,23 @@ class BranchConfig(BaseModel):
 
 class RemoteConfig(BaseModel):
     name: str = "origin"
-    token: MaybeFromEnv = ""
-    url: Optional[MaybeFromEnv] = None
+    token: Optional[str] = None
+    url: Optional[str] = None
     type: HvcsClient = HvcsClient.GITHUB
     domain: Optional[str] = None
     api_domain: Optional[str] = None
     ignore_token_for_push: bool = False
+    insecure: bool = False
+
+    @field_validator("url", "domain", "api_domain", "token", mode="before")
+    @classmethod
+    def resolve_env_vars(cls, val: Any) -> str | None:
+        ret_val = (
+            val
+            if not isinstance(val, dict)
+            else (EnvConfigVar.model_validate(val).getvalue())
+        )
+        return ret_val or None
 
     @model_validator(mode="after")
     def set_default_token(self) -> Self:
@@ -124,9 +143,51 @@ class RemoteConfig(BaseModel):
         if not self.token and self.type in _known_hvcs:
             default_token_name = _known_hvcs[self.type].DEFAULT_ENV_TOKEN_NAME
             if default_token_name:
-                self.token = EnvConfigVar(env=default_token_name)
+                env_token = EnvConfigVar(env=default_token_name).getvalue()
+                if env_token:
+                    self.token = env_token
         return self
 
+    @model_validator(mode="after")
+    def check_url_scheme(self) -> Self:
+        if self.url and isinstance(self.url, str):
+            self.check_insecure_flag(self.url, "url")
+
+        if self.domain and isinstance(self.domain, str):
+            self.check_insecure_flag(self.domain, "domain")
+
+        if self.api_domain and isinstance(self.api_domain, str):
+            self.check_insecure_flag(self.api_domain, "api_domain")
+
+        return self
+
+    def check_insecure_flag(self, url_str: str, field_name: str) -> None:
+        if not url_str:
+            return
+
+        scheme = parse_url(url_str).scheme
+        if scheme == "http" and not self.insecure:
+            raise ValueError(
+                str.join(
+                    "\n",
+                    [
+                        "Insecure 'HTTP' URL detected and disabled by default.",
+                        "Set the 'insecure' flag to 'True' to enable insecure connections.",
+                    ],
+                )
+            )
+
+        if scheme == "https" and self.insecure:
+            log.warning(
+                str.join(
+                    "\n",
+                    [
+                        f"'{field_name}' starts with 'https://' but the 'insecure' flag is set.",
+                        "This flag is only necessary for 'http://' URLs.",
+                    ],
+                )
+            )
+
 
 class PublishConfig(BaseModel):
     dist_glob_patterns: Tuple[str, ...] = ("dist/*",)
@@ -370,35 +431,24 @@ class RuntimeContext:
 
             version_declarations.append(pd)
 
-        # hvcs_client
-        hvcs_client_cls = _known_hvcs[raw.remote.type]
-        raw_remote_url = raw.remote.url
-        resolved_remote_url = cls.resolve_from_env(raw_remote_url)
-        remote_url = (
-            resolved_remote_url
-            if resolved_remote_url is not None
-            else repo.remote(raw.remote.name).url
-        )
-
-        token = cls.resolve_from_env(raw.remote.token)
-        if (
-            isinstance(raw.remote.token, EnvConfigVar)
-            and not raw.remote.ignore_token_for_push
-            and not token
-        ):
-            log.warning(
-                "the token for the remote VCS is configured as stored in the %s "
-                "environment variable, but it is empty",
-                raw.remote.token.env,
-            )
-        elif not token:
+        # Provide warnings if the token is missing
+        if not raw.remote.token:
             log.debug("hvcs token is not set")
 
+            if not raw.remote.ignore_token_for_push:
+                log.warning("Token value is missing!")
+
+        # retrieve remote url
+        remote_url = raw.remote.url or repo.remote(raw.remote.name).url
+
+        # hvcs_client
+        hvcs_client_cls = _known_hvcs[raw.remote.type]
         hvcs_client = hvcs_client_cls(
             remote_url=remote_url,
-            hvcs_domain=cls.resolve_from_env(raw.remote.domain),
-            hvcs_api_domain=cls.resolve_from_env(raw.remote.api_domain),
-            token=token,
+            hvcs_domain=raw.remote.domain,
+            hvcs_api_domain=raw.remote.api_domain,
+            token=raw.remote.token,
+            allow_insecure=raw.remote.insecure,
         )
 
         # changelog_file

semantic_release/cli/github_actions_output.py

@@ -62,7 +62,8 @@ class VersionGitHubActionsOutput:
             "version": str(self.version),
             "tag": self.tag,
         }
-        return "\n".join(f"{key}={value!s}" for key, value in outputs.items())
+
+        return str.join("", [f"{key}={value!s}\n" for key, value in outputs.items()])
 
     def write_if_possible(self, filename: str | None = None) -> None:
         output_file = filename or os.getenv(self.OUTPUT_ENV_VAR)

semantic_release/errors.py

@@ -38,3 +38,10 @@ class MissingMergeBaseError(SemanticReleaseBaseError):
     Raised when the merge base cannot be found with the current history. Generally
     because of a shallow git clone.
     """
+
+
+class UnexpectedResponse(Exception):
+    """
+    Raised when an HTTP response cannot be parsed properly or the expected structure
+    is not found.
+    """

semantic_release/hvcs/_base.py

@@ -5,11 +5,15 @@ from __future__ import annotations
 import logging
 import warnings
 from functools import lru_cache
+from typing import TYPE_CHECKING
 
 from semantic_release.helpers import parse_git_url
-from semantic_release.hvcs.token_auth import TokenAuth
-from semantic_release.hvcs.util import build_requests_session
 
+if TYPE_CHECKING:
+    from typing import Any
+
+
+# Globals
 logger = logging.getLogger(__name__)
 
 
@@ -32,23 +36,13 @@ class HvcsBase:
     (i.e. without raising an exception) return _not_supported, and can be overridden
     to provide an implementation in subclasses. This is more straightforward than
     checking for NotImplemented around every method call.
+
     """
 
     DEFAULT_ENV_TOKEN_NAME = "HVCS_TOKEN"  # noqa: S105
 
-    def __init__(
-        self,
-        remote_url: str,
-        hvcs_domain: str | None = None,
-        hvcs_api_domain: str | None = None,
-        token: str | None = None,
-    ) -> None:
-        self.hvcs_domain = hvcs_domain
-        self.hvcs_api_domain = hvcs_api_domain
-        self.token = token
-        auth = None if not self.token else TokenAuth(self.token)
+    def __init__(self, remote_url: str, *args: Any, **kwargs: Any) -> None:
         self._remote_url = remote_url
-        self.session = build_requests_session(auth=auth)
 
     @lru_cache(maxsize=1)
     def _get_repository_owner_and_name(self) -> tuple[str, str]:
@@ -72,10 +66,13 @@ class HvcsBase:
     def compare_url(self, from_rev: str, to_rev: str) -> str:
         """
         Get the comparison link between two version tags.
+
         :param from_rev: The older version to compare. Can be a commit sha, tag or
-                        branch name.
+        branch name.
+
         :param to_rev: The newer version to compare. Can be a commit sha, tag or
-                       branch name.
+        branch name.
+
         :return: Link to view a comparison between the two versions.
         """
         _not_supported(self, "compare_url")