repro-lambda 0.8.0__tar.gz → 0.8.1__tar.gz

repro_lambda-0.8.1/.release-please-manifest.json

@@ -0,0 +1,3 @@
+{
+  ".": "0.8.1"
+}

{repro_lambda-0.8.0 → repro_lambda-0.8.1}/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## [0.8.1](https://github.com/antonbabenko/repro-lambda/compare/v0.8.0...v0.8.1) (2026-09-23)
+
+
+### Bug Fixes
+
+* **sources:** fall back to the release assets endpoint when the tag view lists none ([#17](https://github.com/antonbabenko/repro-lambda/issues/17)) ([3a5608b](https://github.com/antonbabenko/repro-lambda/commit/3a5608b8cd7294f66986b1a61e4607efd052163a))
+
 ## [0.8.0](https://github.com/antonbabenko/repro-lambda/compare/v0.7.2...v0.8.0) (2026-09-18)
 
 

{repro_lambda-0.8.0 → repro_lambda-0.8.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: repro-lambda
-Version: 0.8.0
+Version: 0.8.1
 Summary: Build reproducible AWS Lambda packages outside Terraform, optimized for terraform-aws-lambda by serverless.tf.
 Project-URL: Homepage, https://github.com/antonbabenko/repro-lambda
 Project-URL: Repository, https://github.com/antonbabenko/repro-lambda

{repro_lambda-0.8.0 → repro_lambda-0.8.1}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "repro-lambda"
-version = "0.8.0"
+version = "0.8.1"
 description = "Build reproducible AWS Lambda packages outside Terraform, optimized for terraform-aws-lambda by serverless.tf."
 readme = "README.md"
 requires-python = ">=3.11"

{repro_lambda-0.8.0 → repro_lambda-0.8.1}/src/repro_lambda/__init__.py

@@ -1,3 +1,3 @@
 """repro-lambda — reproducible AWS Lambda packaging outside Terraform."""
 
-__version__ = "0.8.0"  # x-release-please-version
+__version__ = "0.8.1"  # x-release-please-version

{repro_lambda-0.8.0 → repro_lambda-0.8.1}/src/repro_lambda/sources.py

@@ -34,6 +34,7 @@ import tempfile
 import zipfile
 from http.client import HTTPSConnection
 from pathlib import Path
+from typing import Any
 from urllib.parse import urljoin, urlsplit, urlunsplit
 
 from repro_lambda import __version__
@@ -183,7 +184,7 @@ def _stream_to(resp, sink: io.BufferedWriter, max_bytes: int) -> str:
     return h.hexdigest()
 
 
-def _http_get_json(url: str, headers: dict[str, str]) -> dict:
+def _http_get_json(url: str, headers: dict[str, str]) -> Any:
     buf = io.BytesIO()
     writer = io.BufferedWriter(_RawSink(buf))
     _http_request(url, headers, writer, _JSON_MAX_BYTES)
@@ -219,7 +220,15 @@ def _github_asset_url(src: Source, token: str | None) -> tuple[str, dict[str, st
     auth = {"Authorization": f"Bearer {token}", "Accept": "application/vnd.github+json"}
     release = _http_get_json(api, auth)
     want = src.resolved_asset
-    for asset in release.get("assets", []):
+    assets = release.get("assets", [])
+    if not any(a.get("name") == want for a in assets) and "id" in release:
+        # The tag view can serve a stale, empty `assets` list for a while after an
+        # upload; the per-release assets endpoint is current.
+        # ponytail: first 100 assets only, paginate if a release ever carries more.
+        assets = _http_get_json(
+            f"{_GITHUB_API}/repos/{src.repo}/releases/{release['id']}/assets?per_page=100", auth
+        )
+    for asset in assets:
         if asset.get("name") == want:
             asset_id = asset["id"]
             dl = f"{_GITHUB_API}/repos/{src.repo}/releases/assets/{asset_id}"

{repro_lambda-0.8.0 → repro_lambda-0.8.1}/tests/test_sources.py

@@ -358,6 +358,60 @@ def test_github_source_requires_token(tmp_path: Path):
         sources._github_asset_url(src, None)
 
 
+def _gh_src() -> Source:
+    return Source(
+        name="p",
+        type="github_release",
+        sha256=SHA_PLACEHOLDER,
+        extract="tar.gz",
+        dest="p",
+        repo="o/r",
+        tag="t",
+        asset="a.tgz",
+    )
+
+
+def test_github_asset_falls_back_to_assets_endpoint(monkeypatch):
+    # GitHub can serve releases/tags/<tag> with a stale, empty `assets` list right after
+    # an upload, while /releases/{id}/assets already lists the file.
+    calls = []
+
+    def fake_get(url, headers):
+        calls.append(url)
+        if url.endswith("/releases/tags/t"):
+            return {"id": 7, "assets": []}
+        assert url.endswith("/releases/7/assets?per_page=100")
+        return [{"name": "other", "id": 1}, {"name": "a.tgz", "id": 42}]
+
+    monkeypatch.setattr(sources, "_http_get_json", fake_get)
+    url, headers = sources._github_asset_url(_gh_src(), "tok")
+    assert url.endswith("/repos/o/r/releases/assets/42")
+    assert headers["Accept"] == "application/octet-stream"
+    assert len(calls) == 2
+
+
+def test_github_asset_embedded_list_needs_no_second_call(monkeypatch):
+    calls = []
+
+    def fake_get(url, headers):
+        calls.append(url)
+        return {"id": 7, "assets": [{"name": "a.tgz", "id": 42}]}
+
+    monkeypatch.setattr(sources, "_http_get_json", fake_get)
+    url, _ = sources._github_asset_url(_gh_src(), "tok")
+    assert url.endswith("/releases/assets/42")
+    assert len(calls) == 1
+
+
+def test_github_asset_missing_everywhere_raises(monkeypatch):
+    def fake_get(url, headers):
+        return {"id": 7, "assets": []} if url.endswith("/tags/t") else []
+
+    monkeypatch.setattr(sources, "_http_get_json", fake_get)
+    with pytest.raises(SourceFetchError, match="not found"):
+        sources._github_asset_url(_gh_src(), "tok")
+
+
 # --- staging + end-to-end (no network) -------------------------------------
 
 

{repro_lambda-0.8.0 → repro_lambda-0.8.1}/uv.lock

@@ -646,7 +646,7 @@ wheels = [
 
 [[package]]
 name = "repro-lambda"
-version = "0.8.0"
+version = "0.8.1"
 source = { editable = "." }
 dependencies = [
     { name = "boto3" },

repro_lambda-0.8.0/.release-please-manifest.json

@@ -1,3 +0,0 @@
-{
-  ".": "0.8.0"
-}