taskmaestro 0.1.0__tar.gz → 0.3.0__tar.gz

taskmaestro-0.3.0/.github/workflows/ci.yml

@@ -0,0 +1,49 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+
+# Least privilege: the CI job only reads the repository.
+permissions:
+  contents: read
+
+# Cancel superseded runs for the same ref (e.g. force-pushes to a PR).
+concurrency:
+  group: ci-${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  ci:
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    strategy:
+      fail-fast: false
+      matrix:
+        python-version: ["3.12", "3.13", "3.14"]
+
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up Python ${{ matrix.python-version }}
+        uses: actions/setup-python@v5
+        with:
+          python-version: ${{ matrix.python-version }}
+          cache: pip
+          cache-dependency-path: pyproject.toml
+
+      - name: Install dependencies
+        run: pip install -e ".[dev]"
+
+      - name: Ruff check
+        run: ruff check taskmaestro/ tests/ examples/
+
+      - name: Ruff format check
+        run: ruff format --check taskmaestro/ tests/ examples/
+
+      - name: Mypy type check
+        run: mypy taskmaestro
+
+      - name: Run tests with coverage
+        run: pytest --cov=taskmaestro --cov-report=term-missing --cov-fail-under=100

{taskmaestro-0.1.0 → taskmaestro-0.3.0}/.github/workflows/publish.yml

@@ -4,10 +4,15 @@ on:
   push:
     tags: ["v*"]
 
+# Default to read-only; the publish job opts into id-token below.
+permissions:
+  contents: read
+
 jobs:
   build:
     name: Build distributions
     runs-on: ubuntu-latest
+    timeout-minutes: 10
     steps:
       - uses: actions/checkout@v4
 
@@ -15,6 +20,8 @@ jobs:
         uses: actions/setup-python@v5
         with:
           python-version: "3.12"
+          cache: pip
+          cache-dependency-path: pyproject.toml
 
       - name: Install build
         run: pip install build
@@ -32,6 +39,7 @@ jobs:
     name: Publish to PyPI
     needs: build
     runs-on: ubuntu-latest
+    timeout-minutes: 10
     environment: pypi
     permissions:
       id-token: write
@@ -43,4 +51,6 @@ jobs:
           path: dist/
 
       - name: Publish via trusted publishing
-        uses: pypa/gh-action-pypi-publish@release/v1
+        # Third-party action pinned to a full commit SHA (tag v1.14.2); the
+        # `release/v1` branch is mutable and could be repointed.
+        uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # v1.14.2