repomatic 6.25.0__tar.gz → 6.26.0__tar.gz

{repomatic-6.25.0 → repomatic-6.26.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: repomatic
-Version: 6.25.0
+Version: 6.26.0
 Summary: 🏭 Automate repository maintenance, releases, and CI/CD workflows
 Keywords: changelog-formatter,dependabot-alternative,github-actions,github-labels,github-workflow,gitignore,mailmap,mypy,nuitka,python-automation,release-automation,renovate,repository-automation,repository-management,reusable-workflows,software-factory,sphinx-doc,typo,uv,workflow-reusable
 Author: Kevin Deldycke
@@ -45,7 +45,6 @@ Classifier: Topic :: Utilities
 Classifier: Typing :: Typed
 Requires-Dist: backports-strenum>=1 ; python_full_version < '3.11'
 Requires-Dist: boltons>=25
-Requires-Dist: bump-my-version>=1.2.6
 Requires-Dist: click-extra>=7.19
 Requires-Dist: extra-platforms>=12.0.2
 Requires-Dist: packaging>=17
@@ -59,7 +58,7 @@ Requires-Dist: wcmatch>=10
 Requires-Python: >=3.10
 Project-URL: Changelog, https://github.com/kdeldycke/repomatic/blob/main/changelog.md
 Project-URL: Documentation, https://kdeldycke.github.io/repomatic
-Project-URL: Download, https://github.com/kdeldycke/repomatic/releases/tag/v6.25.0
+Project-URL: Download, https://github.com/kdeldycke/repomatic/releases/tag/v6.26.0
 Project-URL: Funding, https://github.com/sponsors/kdeldycke
 Project-URL: Homepage, https://github.com/kdeldycke/repomatic
 Project-URL: Issues, https://github.com/kdeldycke/repomatic/issues
@@ -73,8 +72,9 @@ Description-Content-Type: text/markdown
 [![Last release](https://img.shields.io/pypi/v/repomatic.svg)](https://pypi.org/project/repomatic/)
 [![Python versions](https://img.shields.io/pypi/pyversions/repomatic.svg)](https://pypi.org/project/repomatic/)
 [![Downloads](https://static.pepy.tech/badge/repomatic/month)](https://pepy.tech/projects/repomatic)
-[![Unittests status](https://github.com/kdeldycke/repomatic/actions/workflows/tests.yaml/badge.svg?branch=main)](https://github.com/kdeldycke/repomatic/actions/workflows/tests.yaml?query=branch%3Amain)
+[![Unittests status](https://img.shields.io/github/actions/workflow/status/kdeldycke/repomatic/tests.yaml?branch=main&label=%F0%9F%94%AC%20Tests)](https://github.com/kdeldycke/repomatic/actions/workflows/tests.yaml?query=branch%3Amain)
 [![Coverage status](https://codecov.io/gh/kdeldycke/repomatic/branch/main/graph/badge.svg)](https://app.codecov.io/gh/kdeldycke/repomatic)
+[![Documentation status](https://img.shields.io/github/actions/workflow/status/kdeldycke/repomatic/docs.yaml?branch=main&label=%F0%9F%93%9A%20Docs)](https://github.com/kdeldycke/repomatic/actions/workflows/docs.yaml?query=branch%3Amain)
 
 A Python CLI and `pyproject.toml` configuration that let you **release Python packages multiple times a day with only 2-clicks**. Designed for `uv`-based Python projects, but usable for other projects too. The CLI operates through reusable GitHub Actions workflows as its CI delivery mechanism.
 

{repomatic-6.25.0 → repomatic-6.26.0}/pyproject.toml

@@ -5,7 +5,7 @@ requires = [ "uv-build>=0.9" ]
 [project]
 # Docs: https://packaging.python.org/en/latest/guides/writing-pyproject-toml/
 name = "repomatic"
-version = "6.25.0"
+version = "6.26.0"
 description = "🏭 Automate repository maintenance, releases, and CI/CD workflows"
 readme = "readme.md"
 keywords = [
@@ -79,9 +79,6 @@ dependencies = [
   "backports-strenum>=1; python_version<'3.11'",
   # boltons 25.0.0 dropped Python 3.9, matching our requires-python >= 3.10.
   "boltons>=25",
-  # bumpversion.config.files.find_config_file() and bumpversion.show.resolve_name()
-  # stabilized in 1.x; 1.2.6 fixes Click compatibility affecting our CLI integration.
-  "bump-my-version>=1.2.6",
   # Click Extra 7.19.0 ships the `click-extra man --output-dir DIR SCRIPT` CLI
   # the release engine's manpages job shells out to.
   "click-extra>=7.19",
@@ -126,7 +123,7 @@ repomatic = "repomatic.__main__:main"
 [project.urls]
 "Changelog" = "https://github.com/kdeldycke/repomatic/blob/main/changelog.md"
 "Documentation" = "https://kdeldycke.github.io/repomatic"
-"Download" = "https://github.com/kdeldycke/repomatic/releases/tag/v6.25.0"
+"Download" = "https://github.com/kdeldycke/repomatic/releases/tag/v6.26.0"
 "Funding" = "https://github.com/sponsors/kdeldycke"
 "Homepage" = "https://github.com/kdeldycke/repomatic"
 "Issues" = "https://github.com/kdeldycke/repomatic/issues"
@@ -185,16 +182,6 @@ typing = [
 [tool.uv]
 # Docs group requires Python >= 3.14 for recent MyST-Parser and click-extra features.
 dependency-groups.docs = { requires-python = ">= 3.14" }
-# bump-my-version 1.3.0 caps click at <8.4, which conflicts with click-extra
-# 7.19.0's click>=8.4.1 floor. Override the cap until upstream relaxes it
-# (callowayproject/bump-my-version#382 was the last bump, to <8.4). We only
-# import bump-my-version's config-loading helpers (get_configuration,
-# find_config_file, resolve_name), none of which touch click 8.4-sensitive
-# Sentinel handling, so the override is safe in practice.
-# NOTE: [tool.uv] override-dependencies is NOT read by `uvx --from .`
-# (tool invocations are isolated from project settings). Workflows propagate
-# this override via UV_OVERRIDE=uv-overrides.txt. See uv-overrides.txt.
-override-dependencies = [ "click>=8.4.1" ]
 # Cooldown period: 7-day buffer before using newly released packages.
 # Relative dates are fine here: uv 0.11.8+ writes a sentinel timestamp to
 # uv.lock for relative spans, so re-resolving never produces churn.
@@ -217,7 +204,7 @@ copyright = "Kevin Deldycke <kevin@deldycke.com> and contributors. Distributed u
 file-description = "🏭 Automate repository maintenance, releases, and CI/CD workflows"
 # Numeric only: Nuitka rejects PEP 440 .devN suffixes. Kept in sync with the
 # package version by the dedicated [tool.bumpversion] rule that strips the suffix.
-file-version = "6.25.0"
+file-version = "6.26.0"
 include-data-dir = [
   "repomatic/data/awesome_template=repomatic/data/awesome_template",
 ]
@@ -235,7 +222,7 @@ include-package-data = [ "click_extra" ]
 linux-icon = "docs/assets/icon.png"
 macos-app-icon = "docs/assets/icon.icns"
 product-name = "Repomatic"
-product-version = "6.25.0"
+product-version = "6.26.0"
 windows-icon-from-ico = "docs/assets/icon.ico"
 
 [tool.ruff]
@@ -319,7 +306,7 @@ run.source = [ "repomatic" ]
 report.precision = 2
 
 [tool.bumpversion]
-current_version = "6.25.0"
+current_version = "6.26.0"
 allow_dirty = true
 ignore_missing_files = true
 # Parse versions with an optional .devN suffix (PEP 440).

{repomatic-6.25.0 → repomatic-6.26.0}/readme.md

@@ -5,8 +5,9 @@
 [![Last release](https://img.shields.io/pypi/v/repomatic.svg)](https://pypi.org/project/repomatic/)
 [![Python versions](https://img.shields.io/pypi/pyversions/repomatic.svg)](https://pypi.org/project/repomatic/)
 [![Downloads](https://static.pepy.tech/badge/repomatic/month)](https://pepy.tech/projects/repomatic)
-[![Unittests status](https://github.com/kdeldycke/repomatic/actions/workflows/tests.yaml/badge.svg?branch=main)](https://github.com/kdeldycke/repomatic/actions/workflows/tests.yaml?query=branch%3Amain)
+[![Unittests status](https://img.shields.io/github/actions/workflow/status/kdeldycke/repomatic/tests.yaml?branch=main&label=%F0%9F%94%AC%20Tests)](https://github.com/kdeldycke/repomatic/actions/workflows/tests.yaml?query=branch%3Amain)
 [![Coverage status](https://codecov.io/gh/kdeldycke/repomatic/branch/main/graph/badge.svg)](https://app.codecov.io/gh/kdeldycke/repomatic)
+[![Documentation status](https://img.shields.io/github/actions/workflow/status/kdeldycke/repomatic/docs.yaml?branch=main&label=%F0%9F%93%9A%20Docs)](https://github.com/kdeldycke/repomatic/actions/workflows/docs.yaml?query=branch%3Amain)
 
 A Python CLI and `pyproject.toml` configuration that let you **release Python packages multiple times a day with only 2-clicks**. Designed for `uv`-based Python projects, but usable for other projects too. The CLI operates through reusable GitHub Actions workflows as its CI delivery mechanism.
 

{repomatic-6.25.0 → repomatic-6.26.0}/repomatic/__init__.py

@@ -17,5 +17,5 @@
 
 from __future__ import annotations
 
-__version__ = "6.25.0"
-__git_tag_sha__ = "892e5b0a3889b2bc3591f4b6669802599c85e988"
+__version__ = "6.26.0"
+__git_tag_sha__ = "9b9fa8a1d838c1f28bb9d0bb82fa67084b8a2ca7"

{repomatic-6.25.0 → repomatic-6.26.0}/repomatic/changelog.py

@@ -730,6 +730,84 @@ def build_unavailable_admonition(
     )
 
 
+def split_changelog_bullets(changes: str) -> list[str]:
+    """Split a version section's change body into top-level bullet entries.
+
+    Each returned item is one entry: its `-` marker line plus any wrapped
+    continuation lines and indented sub-bullets, joined with newlines.
+    Blank lines and prose outside a bullet are dropped.
+
+    :param changes: The hand-written body of a version section, as captured
+        in {attr}`VersionElements.changes`.
+    :return: One string per top-level bullet, in document order.
+    """
+    bullets: list[str] = []
+    current: list[str] = []
+    for line in changes.splitlines():
+        if re.match(r"^- ", line):
+            if current:
+                bullets.append("\n".join(current))
+            current = [line]
+        elif current and (not line.strip() or line[:1] in {" ", "\t"}):
+            # Wrapped continuation, indented sub-bullet, or interior blank line.
+            current.append(line)
+        elif current:
+            # A non-indented, non-bullet line closes the current entry.
+            bullets.append("\n".join(current))
+            current = []
+    if current:
+        bullets.append("\n".join(current))
+    return bullets
+
+
+def count_bullet_words(bullet: str) -> int:
+    """Count the words in a changelog bullet, ignoring list markers.
+
+    Leading `-`/`*` markers (on the entry and any nested sub-bullets) are
+    stripped so they do not inflate the count; everything else, including
+    inline code and link text, counts as written.
+    """
+    return len(re.sub(r"(?m)^\s*[-*]\s+", "", bullet).split())
+
+
+def warn_on_long_bullets(changelog: Changelog, threshold: int) -> None:
+    """Warn about over-long bullets in the unreleased section, non-fatally.
+
+    A changelog entry is a release note, not a commit message: one short
+    sentence stating what changed (see `CLAUDE.md` § Changelog entry length).
+    Each unreleased bullet longer than `threshold` words emits a
+    {data}`logging.WARNING` and a GitHub Actions warning annotation, without
+    affecting the lint exit code.
+
+    Only the unreleased section is inspected. Released sections are immutable,
+    so re-flagging historical entries on every run would be noise.
+
+    :param changelog: The parsed changelog to inspect.
+    :param threshold: Word ceiling per bullet. `0` (or less) disables the check.
+    """
+    if threshold <= 0:
+        return
+    released = {version for version, _date in changelog.extract_all_releases()}
+    unreleased = changelog.extract_all_version_headings() - released
+    for version in sorted(unreleased, key=Version, reverse=True):
+        elements = changelog.decompose_version(version)
+        for index, bullet in enumerate(split_changelog_bullets(elements.changes), 1):
+            words = count_bullet_words(bullet)
+            if words > threshold:
+                logging.warning(
+                    f"⚠ {version}: changelog entry {index} runs {words} words "
+                    f"(over {threshold}). Tighten it to a one-sentence release "
+                    f"note; move mechanism and rationale to the commit or PR."
+                )
+                emit_annotation(
+                    AnnotationLevel.WARNING,
+                    f"Changelog entry {index} for {version} runs {words} words, "
+                    f"over the {threshold}-word guideline. A changelog entry is "
+                    f"a release note, not a commit message: keep it to one short "
+                    f"sentence (see CLAUDE.md, Changelog entry length).",
+                )
+
+
 def lint_changelog_dates(
     changelog_path: Path,
     package: str | None = None,
@@ -737,6 +815,7 @@ def lint_changelog_dates(
     fix: bool = False,
     pypi_package_history: Sequence[str] = (),
     abandoned_versions: Sequence[str] = (),
+    bullet_word_threshold: int = 0,
 ) -> int:
     """Verify that changelog release dates match canonical release dates.
 
@@ -787,6 +866,10 @@ def lint_changelog_dates(
         both the PyPI lookup and the git-tag fallback. Use for releases
         that were frozen but skipped per the "skip and move forward"
         practice (botched build, broken artifact).
+    :param bullet_word_threshold: Word count above which an unreleased-section
+        bullet triggers a non-fatal length warning (see
+        {func}`warn_on_long_bullets`). `0` disables the check. Never affects
+        the exit code.
     :return: `0` if all dates match or references were corrected in-place,
         `1` if any date mismatch or orphan is found without a fix being
         applied, `2` if the sanity gate refused a destructive rewrite
@@ -796,6 +879,7 @@ def lint_changelog_dates(
     """
     content = changelog_path.read_text(encoding="UTF-8")
     changelog = Changelog(content)
+    warn_on_long_bullets(changelog, bullet_word_threshold)
     releases = changelog.extract_all_releases()
 
     if not releases:

{repomatic-6.25.0 → repomatic-6.26.0}/repomatic/cli.py

@@ -29,6 +29,7 @@ from collections import Counter
 from pathlib import Path
 from urllib.request import Request, urlopen
 
+import tomlrt
 from boltons.iterutils import unique
 from click_extra import (
     UNPROCESSED,
@@ -2972,9 +2973,51 @@ def sync_labels(ctx: Context, repository: str | None) -> None:
                 if label_file.is_file():
                     _run_labelmaker(lm, "apply", str(label_file), repository)
 
+        # Apply inline label definitions from `[tool.repomatic.labels.extra]`.
+        inline_toml = _serialize_inline_labels(config.labels.extra)
+        if inline_toml:
+            with tempfile.TemporaryDirectory(prefix="repomatic-labels-") as tmpdir:
+                inline_file = Path(tmpdir) / "inline.toml"
+                inline_file.write_text(inline_toml, encoding="UTF-8")
+                _run_labelmaker(lm, "apply", str(inline_file), repository)
+
     echo("Labels synced.")
 
 
+def _serialize_inline_labels(entries: list[dict[str, str]]) -> str:
+    """Serialize `[tool.repomatic.labels.extra]` entries to a labelmaker TOML config.
+
+    Each entry becomes a `[[profiles.default.labels]]` block under the `default`
+    profile. Leading `#` on hex colors is stripped so the output matches
+    labelmaker's convention. Entries missing a `name` are skipped with a warning:
+    labelmaker rejects nameless labels and would abort the whole sync.
+
+    Returns an empty string when there are no valid entries, so the caller can
+    skip writing a temp file and invoking labelmaker entirely.
+    """
+    labels: list[dict[str, str]] = []
+    for entry in entries:
+        name = entry.get("name", "").strip()
+        if not name:
+            logging.warning(
+                "Skipping inline label without a `name`: %r.",
+                entry,
+            )
+            continue
+        label: dict[str, str] = {"name": name}
+        if color := entry.get("color"):
+            label["color"] = color.lstrip("#")
+        if description := entry.get("description"):
+            label["description"] = description
+        labels.append(label)
+
+    if not labels:
+        return ""
+
+    doc = tomlrt.Document({"profiles": {"default": {"labels": labels}}})
+    return tomlrt.dumps(doc)
+
+
 def _run_labelmaker(labelmaker_path: Path, *args: str) -> None:
     """Run a `labelmaker` command.
 
@@ -3304,6 +3347,10 @@ def lint_changelog(
     "not found on PyPI" warnings for releases that were frozen but
     never published (skip-and-move-forward releases).
 
+    Reads changelog.bullet-word-threshold from [tool.repomatic] to warn,
+    non-fatally, about unreleased changelog bullets longer than that many
+    words. A changelog entry is a release note, not a commit message.
+
     \b
     Output symbols:
         ✓  Dates match
@@ -3349,6 +3396,7 @@ def lint_changelog(
         fix=fix,
         pypi_package_history=config.pypi_package_history,
         abandoned_versions=config.abandoned_versions,
+        bullet_word_threshold=config.changelog_bullet_word_threshold,
     )
     ctx.exit(exit_code)
 

{repomatic-6.25.0 → repomatic-6.26.0}/repomatic/config.py

@@ -196,22 +196,65 @@ class GitignoreConfig:
 class LabelsConfig:
     """Nested schema for `[tool.repomatic.labels]`."""
 
-    extra_content_rules: str = ""
-    """Additional YAML rules appended to the content-based labeller configuration.
+    content_rules: list[dict[str, str | list[str]]] = field(default_factory=list)
+    """Structured per-label rules for the content-based labeller.
 
-    Appended to the bundled `labeller-content-based.yaml` during export.
+    Each `[[tool.repomatic.labels.content-rules]]` entry has:
+
+    - `label` (required): label name to apply when any pattern matches.
+    - `patterns` (required): list of regex patterns evaluated against the issue
+      or PR title and body by `github/issue-labeller`.
+
+    Repeating the same `label` across entries merges their patterns. Serialized
+    to YAML at export time and appended to the bundled
+    `labeller-content-based.yaml`.
     """
 
-    extra_file_rules: str = ""
-    """Additional YAML rules appended to the file-based labeller configuration.
+    extra: list[dict[str, str]] = field(default_factory=list)
+    """Inline label definitions applied at sync time under the `default` profile.
+
+    Each entry is a mapping with `name`, `color`, and `description` keys,
+    matching `labelmaker`'s label specification. Entries are serialized into a
+    temporary TOML file as `[[profiles.default.labels]]` blocks and applied by
+    `labelmaker apply`. This avoids committing a lonely `extra-labels/*.toml`
+    file when the downstream project only needs the basic three fields.
 
-    Appended to the bundled `labeller-file-based.yaml` during export.
+    For label sets that need `labelmaker`'s advanced features (`rename-from`,
+    multi-profile, multi-color), commit a hand-written file under
+    `extra-labels/` or download one via `extra-files` instead.
     """
 
     extra_files: list[str] = field(default_factory=list)
     """URLs of additional label definition files (JSON, JSON5, TOML, or YAML).
 
-    Each URL is downloaded and applied separately by `labelmaker`.
+    Each URL is downloaded into `extra-labels/` and applied separately by
+    `labelmaker`. For inline definitions that need no external file, use
+    `extra` instead.
+    """
+
+    file_rules: list[dict[str, str | list[str]]] = field(default_factory=list)
+    """Structured per-label rules for the file-based labeller.
+
+    Each `[[tool.repomatic.labels.file-rules]]` entry defines one match group
+    for one label. Required key:
+
+    - `label`: label name to apply when this group's conditions match.
+
+    Optional matcher keys (all conditions in the same entry are AND'd):
+
+    - `any-glob-to-any-file`: any pattern matches any changed file.
+    - `any-glob-to-all-files`: any pattern matches every changed file.
+    - `all-globs-to-any-file`: every pattern matches any changed file.
+    - `all-globs-to-all-files`: every pattern matches every changed file.
+    - `head-branch`: regex patterns matched against the PR head branch.
+    - `base-branch`: regex patterns matched against the PR base branch.
+    - `any`: list of nested sub-groups, OR'd together.
+    - `all`: list of nested sub-groups, AND'd together.
+
+    Repeating the same `label` across entries OR's the resulting groups, the
+    same as listing multiple top-level groups under one label in
+    `actions/labeler`. Together with `any` / `all` wrappers this covers the
+    full `actions/labeler` v5+ schema.
     """
 
     sync: bool = True
@@ -455,6 +498,20 @@ class Config:
     )
     """Binary cache configuration."""
 
+    changelog_bullet_word_threshold: int = field(
+        default=40,
+        metadata={"click_extra.config_path": "changelog.bullet-word-threshold"},
+    )
+    """Word count above which `lint-changelog` warns about a changelog bullet.
+
+    A changelog entry is a release note, not a commit message: ideally one
+    short sentence stating what changed (see `CLAUDE.md` § Changelog entry
+    length). `lint-changelog` emits a non-fatal warning for every bullet in
+    the *unreleased* section longer than this many words, nudging verbose,
+    implementation-heavy entries back toward a user-facing summary. Released
+    sections are immutable and never flagged. Set to `0` to disable the check.
+    """
+
     changelog_location: str = field(
         default="./changelog.md",
         metadata={"click_extra.config_path": "changelog.location"},
@@ -589,6 +646,21 @@ class Config:
     `meta-package-manager` pointing to the same function).
     """
 
+    nuitka_extras: list[str] = field(
+        default_factory=list,
+        metadata={"click_extra.config_path": "nuitka.extras"},
+    )
+    """`[project.optional-dependencies]` extras to install before the Nuitka build.
+
+    List of extra names (like `["sbom"]`) to sync into the build venv before
+    invoking Nuitka. By default the binary build only sees the project's base
+    dependencies, which matches a bare `pip install <package>` and excludes
+    optional features. Listing an extra here calls `uv sync --frozen --extra
+    <name>` before the Nuitka build so the binary can bundle the optional
+    feature's third-party packages (paired with `--include-package` in
+    `[tool.nuitka]` for imports guarded behind `try/except`).
+    """
+
     nuitka_unstable_targets: list[str] = field(
         default_factory=list,
         metadata={"click_extra.config_path": "nuitka.unstable-targets"},

{repomatic-6.25.0 → repomatic-6.26.0}/repomatic/data/_release-engine.yaml

@@ -22,14 +22,6 @@ name: 🚀 Build & release
 
 permissions: {}
 
-env:
-  # bump-my-version caps click at <8.4; click-extra>=7.18 requires >=8.4.1.
-  # [tool.uv] override-dependencies is not read by uvx --from ., so propagate
-  # the override via UV_OVERRIDE. The override is safe: we only import
-  # bump-my-version's config-loading helpers, none of which touch Click 8.4-
-  # sensitive code. See uv-overrides.txt for the full rationale.
-  UV_OVERRIDE: uv-overrides.txt
-
 concurrency:
   # Release commits get a unique SHA-based group so they can never be cancelled.
   # See repomatic/github/actions.py for rationale.
@@ -65,16 +57,16 @@ jobs:
         run: git branch --all
       - name: List all commits
         run: git log --decorate=full --oneline
-      - uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
+      - uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0
       - name: Run repomatic metadata
         id: metadata
         run: >
-          uvx --no-progress 'repomatic==6.25.0' metadata
+          uvx --no-progress 'repomatic==6.26.0' metadata
           --format github-json --output "$GITHUB_OUTPUT"
           new_commits_matrix release_commits_matrix build_targets nuitka_matrix
-          is_python_project package_name current_version released_version
-          release_notes release_notes_with_admonition skip_binary_build
-          manpages_script manpages_asset_name
+          nuitka_extras is_python_project package_name current_version
+          released_version release_notes release_notes_with_admonition
+          skip_binary_build manpages_script manpages_asset_name
       - name: Check VirusTotal API key
         id: check-vt-key
         env:
@@ -109,9 +101,26 @@ jobs:
       - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
         with:
           ref: ${{ matrix.commit }}
-      - uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
+      - uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0
       - name: Setup venv
         run: uv --no-progress venv --python 3.14
+      - name: Sync optional-dependencies for Nuitka build
+        # Install the [project.optional-dependencies] extras listed in
+        # [tool.repomatic] nuitka.extras into the build venv, so Nuitka can
+        # bundle their packages. See the nuitka_extras docstring in
+        # repomatic/config.py for the full rationale.
+        if: fromJSON(needs.metadata.outputs.metadata).nuitka_extras
+        env:
+          EXTRAS: ${{ fromJSON(needs.metadata.outputs.metadata).nuitka_extras }}
+        shell: bash
+        run: |
+          # EXTRAS is a space-separated list emitted by Metadata.format_github_value.
+          flags=""
+          for extra in ${EXTRAS}; do
+            flags="${flags} --extra ${extra}"
+          done
+          # shellcheck disable=SC2086
+          uv --no-progress sync --frozen ${flags}
       - name: Pre-bake build metadata
         if: contains(matrix.current_version, '.dev')
         run: uvx --no-progress 'click-extra==7.18.0' prebake all
@@ -133,7 +142,7 @@ jobs:
           # NUITKA_PYTHON_FLAGS holds the entry point's --python-flag (if any),
           # meant to word-split.
           # shellcheck disable=SC2086
-          uvx --no-progress 'repomatic==6.25.0' run nuitka -- \
+          uvx --no-progress 'repomatic==6.26.0' run nuitka -- \
             ${NUITKA_PYTHON_FLAGS} \
             --output-filename="${BIN_NAME}" "${MODULE_PATH}"
       - name: Upload Nuitka crash report
@@ -167,7 +176,7 @@ jobs:
           BIN_NAME: ${{ matrix.bin_name }}
         shell: bash
         run: >
-          uvx --no-progress 'repomatic==6.25.0'
+          uvx --no-progress 'repomatic==6.26.0'
           verify-binary --target "${TARGET}" --binary "${BIN_NAME}"
       - name: Upload binaries
         uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
@@ -242,14 +251,14 @@ jobs:
           DOWNLOAD_PATH: ${{ steps.artifacts.outputs.download-path }}
           BIN_NAME: ${{ matrix.bin_name }}
         run: chmod +x "${DOWNLOAD_PATH}/${BIN_NAME}"
-      - uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
+      - uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0
       - name: Run test plan for binary
         env:
           DOWNLOAD_PATH: ${{ steps.artifacts.outputs.download-path }}
           BIN_NAME: ${{ matrix.bin_name }}
         shell: bash
         run: >
-          uvx --no-progress 'repomatic==6.25.0' test-plan
+          uvx --no-progress 'repomatic==6.26.0' test-plan
           --binary "${DOWNLOAD_PATH}/${BIN_NAME}"
 
   create-tag:
@@ -270,7 +279,7 @@ jobs:
           # PAT required so tag pushes trigger downstream on.push.tags workflows.
           # See repomatic/git_ops.py module docstring.
           token: ${{ secrets.REPOMATIC_PAT || github.token }}
-      - uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
+      - uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0
       - name: Create and push tag
         # Idempotent: skips if tag already exists instead of failing. This allows re-running
         # workflows interrupted after tag creation.
@@ -278,7 +287,7 @@ jobs:
           CURRENT_VERSION: ${{ matrix.current_version }}
           COMMIT: ${{ matrix.commit }}
         run: >
-          uvx --no-progress 'repomatic==6.25.0' git-tag
+          uvx --no-progress 'repomatic==6.26.0' git-tag
           --tag "v${CURRENT_VERSION}"
           --commit "${COMMIT}"
           --skip-existing
@@ -302,7 +311,7 @@ jobs:
       - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
         with:
           ref: ${{ matrix.commit }}
-      - uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
+      - uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0
         with:
           enable-cache: false
       - name: Download Python package
@@ -319,7 +328,7 @@ jobs:
         continue-on-error: true
         env:
           GH_TOKEN: ${{ secrets.REPOMATIC_PAT || github.token }}
-        run: uvx --no-progress 'repomatic==6.25.0' sync-dev-release --live --delete
+        run: uvx --no-progress 'repomatic==6.26.0' sync-dev-release --live --delete
       - name: Create GitHub release draft
         # Idempotent: skips if release already exists (e.g. workflow re-run).
         env:
@@ -417,7 +426,7 @@ jobs:
       - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
         with:
           ref: ${{ matrix.commit }}
-      - uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
+      - uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0
         with:
           enable-cache: false
       - name: Install project
@@ -469,7 +478,7 @@ jobs:
       - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
         with:
           ref: ${{ matrix.commit }}
-      - uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
+      - uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0
         with:
           enable-cache: false
       - name: Download release binaries
@@ -488,7 +497,7 @@ jobs:
           VIRUSTOTAL_API_KEY: ${{ secrets.VIRUSTOTAL_API_KEY }}
           CURRENT_VERSION: ${{ matrix.current_version }}
         run: >
-          uvx --no-progress 'repomatic==6.25.0' scan-virustotal
+          uvx --no-progress 'repomatic==6.26.0' scan-virustotal
           --tag "v${CURRENT_VERSION}"
           --repo "${{ github.repository }}"
           --binaries-dir ./binaries
@@ -498,7 +507,7 @@ jobs:
           VIRUSTOTAL_API_KEY: ${{ secrets.VIRUSTOTAL_API_KEY }}
           CURRENT_VERSION: ${{ matrix.current_version }}
         run: >
-          uvx --no-progress 'repomatic==6.25.0' scan-virustotal
+          uvx --no-progress 'repomatic==6.26.0' scan-virustotal
           --tag "v${CURRENT_VERSION}"
           --repo "${{ github.repository }}"
           --poll
@@ -523,7 +532,7 @@ jobs:
       contents: write
     steps:
       - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
-      - uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
+      - uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0
       - name: Download all build artifacts
         uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
@@ -533,5 +542,5 @@ jobs:
         env:
           GH_TOKEN: ${{ github.token }}
         run: >
-          uvx --no-progress 'repomatic==6.25.0' sync-dev-release --live
+          uvx --no-progress 'repomatic==6.26.0' sync-dev-release --live
           --upload-assets release_assets

{repomatic-6.25.0 → repomatic-6.26.0}/repomatic/data/action-publish-pypi.yaml

@@ -27,7 +27,7 @@ inputs:
 runs:
   using: composite
   steps:
-    - uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
+    - uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0
       with:
         enable-cache: false