PyPI - studylife-cli - Versions diffs - 1.9.3__tar.gz → 1.9.4__tar.gz - Mend

studylife-cli 1.9.3tar.gz → 1.9.4tar.gz

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (35) hide show

{studylife_cli-1.9.3 → studylife_cli-1.9.4}/.github/workflows/ci.yml RENAMED Viewed

@@ -28,6 +28,10 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 15
     steps:
+      - name: Harden Runner
+        uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
+        with:
+          egress-policy: audit
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4 # v10.1.0
         with:
@@ -44,6 +48,10 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 20
     steps:
+      - name: Harden Runner
+        uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
+        with:
+          egress-policy: audit
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4 # v10.1.0
         with:
@@ -66,6 +74,10 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 15
     steps:
+      - name: Harden Runner
+        uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
+        with:
+          egress-policy: audit
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4 # v10.1.0
         with:
@@ -86,6 +98,10 @@ jobs:
     outputs:
       published: ${{ steps.semrel.outputs.new_release_published }}
     steps:
+      - name: Harden Runner
+        uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
+        with:
+          egress-policy: audit
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           fetch-depth: 0
@@ -117,7 +133,7 @@ jobs:
           git fetch origin main
           git checkout -B main origin/main
       - id: semrel
-        uses: lukislp/ci-workflows/.github/actions/semantic-release@d44f7d506a81c2b2ae01ccecc755611df2516142 # v1.5.1
+        uses: lukislp/ci-workflows/.github/actions/semantic-release@045f17628d155f7e56c2f6ebdbd473b31e247112 # v1.6.0
         with:
           dry-run: true
           github-token: ${{ secrets.GITHUB_TOKEN }}
@@ -136,6 +152,10 @@ jobs:
       issues: write
       pull-requests: write
     steps:
+      - name: Harden Runner
+        uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
+        with:
+          egress-policy: audit
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           fetch-depth: 0
@@ -163,7 +183,7 @@ jobs:
           git remote set-url origin "git@github.com:${{ github.repository }}.git"
           echo "GIT_SSH_COMMAND=ssh -i ~/.ssh/semantic_release -o IdentitiesOnly=yes" >> "$GITHUB_ENV"
       - id: semrel
-        uses: lukislp/ci-workflows/.github/actions/semantic-release@d44f7d506a81c2b2ae01ccecc755611df2516142 # v1.5.1
+        uses: lukislp/ci-workflows/.github/actions/semantic-release@045f17628d155f7e56c2f6ebdbd473b31e247112 # v1.6.0
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
         continue-on-error: true
@@ -180,7 +200,7 @@ jobs:
           fi
           git checkout -B main origin/main
       - if: steps.semrel.outcome == 'failure'
-        uses: lukislp/ci-workflows/.github/actions/semantic-release@d44f7d506a81c2b2ae01ccecc755611df2516142 # v1.5.1
+        uses: lukislp/ci-workflows/.github/actions/semantic-release@045f17628d155f7e56c2f6ebdbd473b31e247112 # v1.6.0
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
@@ -196,6 +216,10 @@ jobs:
     permissions:
       id-token: write # trusted publishing (OIDC) - no PyPI token/secret needed
     steps:
+      - name: Harden Runner
+        uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
+        with:
+          egress-policy: audit
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           ref: main

{studylife_cli-1.9.3 → studylife_cli-1.9.4}/.github/workflows/dependabot-auto-merge.yml RENAMED Viewed

@@ -17,6 +17,6 @@ permissions:
 jobs:
   dependabot:
-    uses: lukislp/ci-workflows/.github/workflows/dependabot-auto-merge.yml@d44f7d506a81c2b2ae01ccecc755611df2516142 # v1.5.1
+    uses: lukislp/ci-workflows/.github/workflows/dependabot-auto-merge.yml@045f17628d155f7e56c2f6ebdbd473b31e247112 # v1.6.0
     secrets:
       AUTOMERGE_TOKEN: ${{ secrets.AUTOMERGE_TOKEN }}

{studylife_cli-1.9.3 → studylife_cli-1.9.4}/.github/workflows/dependabot-lockfiles.yml RENAMED Viewed

@@ -13,7 +13,7 @@ permissions:
 jobs:
   lockfiles:
-    uses: lukislp/ci-workflows/.github/workflows/dependabot-lockfiles.yml@d44f7d506a81c2b2ae01ccecc755611df2516142 # v1.5.1
+    uses: lukislp/ci-workflows/.github/workflows/dependabot-lockfiles.yml@045f17628d155f7e56c2f6ebdbd473b31e247112 # v1.6.0
     with:
       uv-version: "0.5.8"
     secrets:

{studylife_cli-1.9.3 → studylife_cli-1.9.4}/.github/workflows/dependency-review.yml RENAMED Viewed

@@ -19,7 +19,7 @@ permissions:
 jobs:
   review:
-    uses: lukislp/ci-workflows/.github/workflows/dependency-review.yml@d44f7d506a81c2b2ae01ccecc755611df2516142 # v1.5.1
+    uses: lukislp/ci-workflows/.github/workflows/dependency-review.yml@045f17628d155f7e56c2f6ebdbd473b31e247112 # v1.6.0
     # pull-requests: write is what the summary comment needs; the called workflow keeps
     # contents at read.
     permissions:

{studylife_cli-1.9.3 → studylife_cli-1.9.4}/CHANGELOG.md RENAMED Viewed

@@ -1,3 +1,10 @@
+## [1.9.4](https://github.com/lukislp/studylife-cli/compare/v1.9.3...v1.9.4) (2026-09-20)
+### Bug Fixes
+* **ci:** add Harden Runner in audit mode to every job ([#42](https://github.com/lukislp/studylife-cli/issues/42)) ([be13fec](https://github.com/lukislp/studylife-cli/commit/be13fec38dc3418643f6f5a8b05e288df2ebd34f))
 ## [1.9.3](https://github.com/lukislp/studylife-cli/compare/v1.9.2...v1.9.3) (2026-09-17)

{studylife_cli-1.9.3 → studylife_cli-1.9.4}/PKG-INFO RENAMED Viewed

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: studylife-cli
-Version: 1.9.3
+Version: 1.9.4
 Summary: Command-line client for StudyLife (self-hosted study organizer) - notes, sessions, course goals, and webhooks from your terminal.
 License-File: LICENSE
 Requires-Python: >=3.12

studylife_cli-1.9.4/socket.yml ADDED Viewed

@@ -0,0 +1,8 @@
+version: 2
+githubApp:
+  enabled: true
+  dependencyOverviewEnabled: true
+  pullRequestAlertsEnabled: true
+  projectReportsEnabled: true
+  disableCommentsAndCheckRuns: false

{studylife_cli-1.9.3 → studylife_cli-1.9.4}/src/studylife_cli/_version.py RENAMED Viewed

@@ -18,7 +18,7 @@ version_tuple: tuple[int | str, ...]
 commit_id: str | None
 __commit_id__: str | None
-__version__ = version = '1.9.3'
-__version_tuple__ = version_tuple = (1, 9, 3)
+__version__ = version = '1.9.4'
+__version_tuple__ = version_tuple = (1, 9, 4)
 __commit_id__ = commit_id = None