templatepy 0.16.2__tar.gz → 0.16.4__tar.gz

{templatepy-0.16.2 → templatepy-0.16.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: templatepy
-Version: 0.16.2
+Version: 0.16.4
 Summary: Copier template for modern Python packages
 Project-URL: Homepage, https://github.com/larsrollik/templatepy
 Project-URL: Documentation, https://larsrollik.github.io/templatepy

templatepy-0.16.4/VERSION

@@ -0,0 +1 @@
+0.16.4

{templatepy-0.16.2 → templatepy-0.16.4}/pyproject.toml

@@ -51,7 +51,7 @@ include = ["src", "copier.yaml", "template", "CITATION.cff", "README.md", "VERSI
 
 [tool.commitizen]
 version_provider = "commitizen"
-version = "0.16.2"
+version = "0.16.4"
 version_files = ["VERSION"]
 tag_format = "v$version"
 update_changelog_on_bump = false

templatepy-0.16.4/template/[% if ci_platform in ['forgejo','both'] %].forgejo[% endif %]/workflows/release.yml

@@ -0,0 +1,135 @@
+# Forgejo Actions.
+#
+# THIRD-PARTY ACTIONS ARE REFERENCED BY ABSOLUTE URL, and that is not a style
+# choice. On Forgejo a bare `uses: owner/action@ref` is fetched from the
+# INSTANCE's actions mirror (`DEFAULT_ACTIONS_URL`), not from GitHub - and the
+# mirrors carry different subsets. Measured 2026-10-24 with `git ls-remote`:
+#
+#                                   code.forgejo.org   data.forgejo.org
+#   actions/checkout                 resolves           resolves
+#   astral-sh/setup-uv               MISSING            resolves
+#   softprops/action-gh-release      MISSING            MISSING
+#
+# So a bare third-party reference works on one instance and fails on another,
+# and the failure is a `git ls-remote` error naming the actions host - which
+# reads as a network fault rather than as a missing mirror entry. An absolute
+# URL depends on nothing an instance happens to mirror this month.
+#
+# `actions/*` stays BARE on purpose: Forgejo mirrors that family deliberately,
+# so a bare reference there also works on an instance with no route to GitHub.
+name: Release
+
+on:
+  push:
+    branches: [main]
+  workflow_dispatch:
+
+permissions:
+  contents: write
+
+# Serialise per branch so back-to-back merges cannot race on the bump. Two parallel
+# runs would both bump from the same tip and compute the same next version; the second
+# one's contents-API call then carries a stale blob sha and is refused. cancel-in-progress
+# is deliberately false: cancelling mid-run can leave main bumped with no tag.
+concurrency:
+  group: release-${{ github.ref }}
+  cancel-in-progress: false
+
+jobs:
+  release:
+    name: Bump, build, publish
+    runs-on: ubuntu-latest
+    if: "!startsWith(github.event.head_commit.message, 'bump:')"
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+          token: ${{ secrets.VERSION_PUSH_TOKEN || github.token }}
+
+      - name: Configure git identity
+        run: |
+          git config user.name "forgejo-actions[bot]"
+          git config user.email "forgejo-actions[bot]@noreply"
+
+      - uses: https://github.com/astral-sh/setup-uv@v7
+        with:
+          python-version: "[[ python_requires ]]"
+
+      - name: Bump version
+        id: bump
+        env:
+          FJ_TOKEN: ${{ secrets.VERSION_PUSH_TOKEN || github.token }}
+        run: |
+          uvx --from commitizen cz bump --files-only --yes || EXIT=$?
+          if [ "${EXIT:-0}" -eq 21 ] || [ "${EXIT:-0}" -eq 6 ]; then
+            echo "No bumpable commits since last tag — skipping."
+            echo "skipped=true" >> "$GITHUB_OUTPUT"
+            exit 0
+          fi
+          [ "${EXIT:-0}" -eq 0 ] || exit $EXIT
+          VERSION="$(cat VERSION)"
+          TAG="v${VERSION}"
+          # Forgejo 15.0.9: a git push from Actions to a PROTECTED main is attributed to
+          # the internal Actions user (uid -2), which the pre-receive hook cannot resolve,
+          # so it is refused before the push whitelist is consulted. Commit via the
+          # contents API instead - it creates the commit server-side and resolves the
+          # author from the token, so a whitelisted write token lands the bump. Set
+          # VERSION_PUSH_TOKEN (a repo:write token on main's push whitelist) is REQUIRED,
+          # not only when main is protected: measured on Forgejo 15.0.9, the AUTOMATIC
+          # Actions token cannot commit through the contents API at all - with
+          # permissions: contents: write declared, and on a branch whose rule permits
+          # ordinary pushes. There is no automatic-token fallback.
+          # Tag the RETURNED commit sha.
+          CHANGED="$(git diff --name-only)"
+          [ -n "$CHANGED" ] || { echo "cz bump changed no files"; exit 1; }
+          python3 - "$TAG" $CHANGED <<'PY'
+          import base64, json, os, sys, urllib.request
+
+          tag, paths = sys.argv[1], sys.argv[2:]
+          api = f"{os.environ['GITHUB_SERVER_URL']}/api/v1/repos/{os.environ['GITHUB_REPOSITORY']}"
+          tok = os.environ["FJ_TOKEN"]
+
+          def req(method, path, body=None):
+              data = json.dumps(body).encode() if body is not None else None
+              r = urllib.request.Request(
+                  api + path, data=data, method=method,
+                  headers={"Authorization": f"token {tok}", "Content-Type": "application/json"},
+              )
+              with urllib.request.urlopen(r) as resp:
+                  raw = resp.read()
+              return json.loads(raw) if raw else None
+
+          files = []
+          for p in paths:
+              info = req("GET", f"/contents/{p}?ref=main")
+              content = base64.b64encode(open(p, "rb").read()).decode()
+              files.append({"operation": "update", "path": p, "content": content, "sha": info["sha"]})
+          resp = req("POST", "/contents", {"branch": "main", "message": f"bump: {tag}", "files": files})
+          sha = resp["commit"]["sha"]
+          req("POST", "/tags", {"tag_name": tag, "target": sha})
+          print(f"committed {sha} and tagged {tag}")
+          PY
+          echo "version=${VERSION}" >> "$GITHUB_OUTPUT"
+
+      - name: Build
+        if: steps.bump.outputs.skipped != 'true'
+        run: uv build
+
+      - name: Create Forgejo release
+        if: steps.bump.outputs.skipped != 'true'
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          VERSION: ${{ steps.bump.outputs.version }}
+        run: |
+          curl -s -X POST "${GITHUB_SERVER_URL}/api/v1/repos/${GITHUB_REPOSITORY}/releases" \
+            -H "Authorization: token ${GITHUB_TOKEN}" \
+            -H "Content-Type: application/json" \
+            -d "{\"tag_name\": \"v${VERSION}\", \"name\": \"v${VERSION}\", \"body\": \"Release v${VERSION}\"}"
+[% if enable_pypi_publishing %]
+
+      - name: Publish to PyPI
+        if: steps.bump.outputs.skipped != 'true'
+        env:
+          UV_PUBLISH_TOKEN: ${{ secrets.UV_PUBLISH_TOKEN }}
+        run: uv publish
+[% endif %]

templatepy-0.16.2/VERSION

@@ -1 +0,0 @@
-0.16.2

templatepy-0.16.2/template/[% if ci_platform in ['forgejo','both'] %].forgejo[% endif %]/workflows/release.yml

@@ -1,85 +0,0 @@
-# Forgejo Actions.
-#
-# THIRD-PARTY ACTIONS ARE REFERENCED BY ABSOLUTE URL, and that is not a style
-# choice. On Forgejo a bare `uses: owner/action@ref` is fetched from the
-# INSTANCE's actions mirror (`DEFAULT_ACTIONS_URL`), not from GitHub - and the
-# mirrors carry different subsets. Measured 2026-10-24 with `git ls-remote`:
-#
-#                                   code.forgejo.org   data.forgejo.org
-#   actions/checkout                 resolves           resolves
-#   astral-sh/setup-uv               MISSING            resolves
-#   softprops/action-gh-release      MISSING            MISSING
-#
-# So a bare third-party reference works on one instance and fails on another,
-# and the failure is a `git ls-remote` error naming the actions host - which
-# reads as a network fault rather than as a missing mirror entry. An absolute
-# URL depends on nothing an instance happens to mirror this month.
-#
-# `actions/*` stays BARE on purpose: Forgejo mirrors that family deliberately,
-# so a bare reference there also works on an instance with no route to GitHub.
-name: Release
-
-on:
-  push:
-    branches: [main]
-  workflow_dispatch:
-
-permissions:
-  contents: write
-
-jobs:
-  release:
-    name: Bump, build, publish
-    runs-on: ubuntu-latest
-    if: "!startsWith(github.event.head_commit.message, 'bump:')"
-    steps:
-      - uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
-
-      - name: Configure git identity
-        run: |
-          git config user.name "forgejo-actions[bot]"
-          git config user.email "forgejo-actions[bot]@noreply"
-
-      - uses: https://github.com/astral-sh/setup-uv@v7
-        with:
-          python-version: "[[ python_requires ]]"
-
-      - name: Bump version
-        id: bump
-        run: |
-          uvx --from commitizen cz bump --yes || EXIT=$?
-          if [ "${EXIT:-0}" -eq 21 ] || [ "${EXIT:-0}" -eq 6 ]; then
-            echo "No bumpable commits since last tag — skipping."
-            echo "skipped=true" >> "$GITHUB_OUTPUT"
-            exit 0
-          fi
-          [ "${EXIT:-0}" -eq 0 ] || exit $EXIT
-          VERSION=$(cat VERSION)
-          git push origin HEAD:main
-          git push origin "v${VERSION}"
-          echo "version=${VERSION}" >> "$GITHUB_OUTPUT"
-
-      - name: Build
-        if: steps.bump.outputs.skipped != 'true'
-        run: uv build
-
-      - name: Create Forgejo release
-        if: steps.bump.outputs.skipped != 'true'
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          VERSION: ${{ steps.bump.outputs.version }}
-        run: |
-          curl -s -X POST "${GITHUB_SERVER_URL}/api/v1/repos/${GITHUB_REPOSITORY}/releases" \
-            -H "Authorization: token ${GITHUB_TOKEN}" \
-            -H "Content-Type: application/json" \
-            -d "{\"tag_name\": \"v${VERSION}\", \"name\": \"v${VERSION}\", \"body\": \"Release v${VERSION}\"}"
-[% if enable_pypi_publishing %]
-
-      - name: Publish to PyPI
-        if: steps.bump.outputs.skipped != 'true'
-        env:
-          UV_PUBLISH_TOKEN: ${{ secrets.UV_PUBLISH_TOKEN }}
-        run: uv publish
-[% endif %]