rpr-cli 0.1.3__tar.gz → 0.1.5__tar.gz

{rpr_cli-0.1.3 → rpr_cli-0.1.5}/.github/workflows/publish-pypi.yml

@@ -9,20 +9,26 @@ on:
 jobs:
   publish:
     runs-on: ubuntu-latest
+    env:
+      FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
+    environment:
+      name: pypi
+      url: https://pypi.org/p/rpr-cli
     permissions:
       contents: read
+      id-token: write
 
     steps:
       - name: Check out repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: "3.14"
 
       - name: Set up uv
-        uses: astral-sh/setup-uv@v5
+        uses: astral-sh/setup-uv@v8.1.0
 
       - name: Validate tag matches package version
         run: |
@@ -50,5 +56,4 @@ jobs:
       - name: Publish to PyPI
         uses: pypa/gh-action-pypi-publish@release/v1
         with:
-          user: __token__
-          password: ${{ secrets.PYPI_API_TOKEN }}
+          attestations: true

{rpr_cli-0.1.3 → rpr_cli-0.1.5}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: rpr-cli
-Version: 0.1.3
+Version: 0.1.5
 Summary: RPR CLI -- React Python Rust monorepo scaffolding orchestrator
 License-Expression: MIT
 License-File: LICENSE
@@ -55,6 +55,8 @@ uv add ../project-getting-started/dist/rpr_cli-*.whl
 
 Create a new NX + UV monorepo, then add apps and packages as needed.
 
+> NX monorepo uses integrated mode.
+
 ```bash
 rpr init my-app              # Create/init my-app with root NX + UV tooling and AI instructions
 cd my-app
@@ -227,7 +229,9 @@ This repo is set up to publish the package `rpr-cli` to PyPI from GitHub Actions
 One-time setup:
 
 1. Create the PyPI project `rpr-cli`.
-2. Add a repository secret named `PYPI_API_TOKEN` with an API token that can upload that project.
+2. Create a PyPI Trusted Publisher for this repository using workflow `.github/workflows/publish-pypi.yml` and environment `pypi`.
+
+No `PYPI_API_TOKEN` secret is required when publishing through GitHub Actions OIDC.
 
 Release flow:
 

{rpr_cli-0.1.3 → rpr_cli-0.1.5}/README.md

@@ -40,6 +40,8 @@ uv add ../project-getting-started/dist/rpr_cli-*.whl
 
 Create a new NX + UV monorepo, then add apps and packages as needed.
 
+> NX monorepo uses integrated mode.
+
 ```bash
 rpr init my-app              # Create/init my-app with root NX + UV tooling and AI instructions
 cd my-app
@@ -212,7 +214,9 @@ This repo is set up to publish the package `rpr-cli` to PyPI from GitHub Actions
 One-time setup:
 
 1. Create the PyPI project `rpr-cli`.
-2. Add a repository secret named `PYPI_API_TOKEN` with an API token that can upload that project.
+2. Create a PyPI Trusted Publisher for this repository using workflow `.github/workflows/publish-pypi.yml` and environment `pypi`.
+
+No `PYPI_API_TOKEN` secret is required when publishing through GitHub Actions OIDC.
 
 Release flow:
 

rpr_cli-0.1.5/src/rpr/__init__.py

@@ -0,0 +1 @@
+__version__ = "0.1.5"

{rpr_cli-0.1.3 → rpr_cli-0.1.5}/src/rpr/dependency_manifest_data.py

@@ -6,59 +6,37 @@ from __future__ import annotations
 MANIFEST = {
     "root_node_dev_dependencies": {
         "@eslint/js": {
-            "registry": "npm",
-            "specifier": "latest",
-            "strategy": "caret",
+            "specifier": "^9.39.4",
         },
         "@nx/eslint": {
-            "registry": "npm",
-            "specifier": "latest",
-            "strategy": "caret",
+            "specifier": "^22.7.1",
         },
         "@nx/eslint-plugin": {
-            "registry": "npm",
-            "specifier": "latest",
-            "strategy": "caret",
+            "specifier": "^22.7.1",
         },
         "eslint": {
-            "registry": "npm",
-            "specifier": "latest",
-            "strategy": "caret",
+            "specifier": "^9.39.4",
         },
         "eslint-plugin-import": {
-            "registry": "npm",
-            "specifier": "latest",
-            "strategy": "caret",
+            "specifier": "^2.32.0",
         },
         "eslint-plugin-jsx-a11y": {
-            "registry": "npm",
-            "specifier": "latest",
-            "strategy": "caret",
+            "specifier": "^6.10.2",
         },
         "eslint-plugin-react": {
-            "registry": "npm",
-            "specifier": "latest",
-            "strategy": "caret",
+            "specifier": "^7.37.5",
         },
         "eslint-plugin-react-hooks": {
-            "registry": "npm",
-            "specifier": "latest",
-            "strategy": "caret",
+            "specifier": "^7.1.1",
         },
         "globals": {
-            "registry": "npm",
-            "specifier": "latest",
-            "strategy": "caret",
+            "specifier": "^15.15.0",
         },
         "prettier": {
-            "registry": "npm",
-            "specifier": "latest",
-            "strategy": "caret",
+            "specifier": "^3.7.4",
         },
         "typescript-eslint": {
-            "registry": "npm",
-            "specifier": "latest",
-            "strategy": "caret",
+            "specifier": "^8.59.2",
         },
     },
     "root_storybook_dev_dependencies": {

{rpr_cli-0.1.3 → rpr_cli-0.1.5}/tests/test_init.py

@@ -74,8 +74,17 @@ def test_init_new_workspace_disables_nx_cloud(monkeypatch):
         package_json = json.loads((project_dir / "package.json").read_text())
         assert package_json["scripts"]["lint"] == "npx nx run-many --target=lint --all"
         assert package_json["workspaces"] == ["apps/*", "packages/node/*"]
-        assert "eslint" in package_json["devDependencies"]
-        assert "prettier" in package_json["devDependencies"]
+        dev_dependencies = package_json["devDependencies"]
+        assert "eslint" in dev_dependencies
+        assert "prettier" in dev_dependencies
+        assert dev_dependencies["eslint"] == "^9.39.4"
+        assert dev_dependencies["@eslint/js"] == "^9.39.4"
+        assert dev_dependencies["eslint-plugin-import"] == "^2.32.0"
+        assert dev_dependencies["eslint-plugin-jsx-a11y"] == "^6.10.2"
+        assert dev_dependencies["eslint-plugin-react"] == "^7.37.5"
+        assert not any(
+            version == "latest" for version in dev_dependencies.values()
+        )
 
         assert (project_dir / "eslint.config.mjs").exists()
         assert (project_dir / ".prettierrc").exists()

{rpr_cli-0.1.3 → rpr_cli-0.1.5}/tests/test_refresh.py

@@ -27,6 +27,8 @@ def test_refresh_manifest_updates_manifest_data_file(monkeypatch, tmp_path: Path
     assert result.exit_code == 0, result.stdout
     assert "uvicorn[standard]: uvicorn[standard]>=0.34 -> uvicorn[standard]>=9.9.9" in result.stdout
     updated = manifest_path.read_text()
+    assert "'eslint': {'specifier': '^9.39.4'}" in updated
+    assert "'eslint-plugin-import': {'specifier': '^2.32.0'}" in updated
     assert "'specifier': '^9.9.9'" in updated
     assert "'specifier': 'fastapi>=9.9.9'" in updated
     assert "'specifier': 'uvicorn[standard]>=9.9.9'" in updated

rpr_cli-0.1.3/src/rpr/__init__.py

@@ -1 +0,0 @@
-__version__ = "0.1.3"