toolframe-sql-sqlite 0.4.0__tar.gz → 0.4.2__tar.gz

{toolframe_sql_sqlite-0.4.0 → toolframe_sql_sqlite-0.4.2}/.github/workflows/ci.yml

@@ -26,7 +26,7 @@ jobs:
         with:
           repository: ${{ vars.TOOLFRAME_REPOSITORY_OWNER || github.repository_owner }}/toolframe-sdk
           token: ${{ secrets.TOOLFRAME_READ_TOKEN || github.token }}
-          ref: 2cd153ec36c585a9adb5ad566effc2985d9e222d
+          ref: 539ced4dbdf9e303ec0f0205a35d65287a480b2a
           path: toolframe-sdk
           persist-credentials: false
 

toolframe_sql_sqlite-0.4.2/.github/workflows/compatibility.yml

@@ -0,0 +1,85 @@
+name: SDK compatibility
+
+on:
+  pull_request:
+  push:
+    branches: [main]
+  schedule:
+    - cron: '17 4 * * *'
+  workflow_dispatch:
+  workflow_call:
+
+permissions:
+  contents: read
+
+jobs:
+  wheel:
+    name: Build the shared plugin wheel
+    runs-on: ubuntu-24.04
+    timeout-minutes: 10
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
+        with:
+          python-version: '3.14.7'
+      - uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
+        with:
+          version: '0.12.8'
+          enable-cache: false
+      - run: uv build --no-sources --wheel --out-dir build/compatibility-wheel
+      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        with:
+          name: compatibility-wheel
+          path: build/compatibility-wheel/*.whl
+          if-no-files-found: error
+          retention-days: 7
+
+  compatibility:
+    name: SDK ${{ matrix.sdk }}
+    needs: wheel
+    runs-on: ubuntu-24.04
+    timeout-minutes: 20
+    strategy:
+      fail-fast: false
+      matrix:
+        sdk: [minimum, latest]
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
+        with:
+          python-version: '3.14.7'
+      - uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
+        with:
+          version: '0.12.8'
+          enable-cache: false
+      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        with:
+          name: compatibility-wheel
+          path: build/compatibility-wheel
+      - name: Select the unchanged wheel
+        id: wheels
+        shell: bash
+        run: |
+          plugin=(build/compatibility-wheel/toolframe_sql_sqlite-*.whl)
+          test "${#plugin[@]}" = 1
+          echo "plugin=${plugin[0]}" >> "$GITHUB_OUTPUT"
+      - name: Verify installed wheel and package tests
+        uses: toolframe/toolframe-sdk/.github/actions/plugin-compatibility@2e2a3d79f35fbdb04249e8351fe9c75fc2164269
+        with:
+          mode: ${{ matrix.sdk }}
+          wheel: ${{ steps.wheels.outputs.plugin }}
+          output: build/compatibility-${{ matrix.sdk }}
+      - name: Retain compatibility evidence
+        if: always()
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        with:
+          name: compatibility-${{ matrix.sdk }}
+          path: |
+            build/compatibility-${{ matrix.sdk }}/report.json
+            build/compatibility-${{ matrix.sdk }}/pytest.xml
+          if-no-files-found: warn
+          retention-days: 14

{toolframe_sql_sqlite-0.4.0 → toolframe_sql_sqlite-0.4.2}/.github/workflows/publish.yml

@@ -2,21 +2,12 @@ name: Publish Python package
 
 on:
   workflow_dispatch:
-    inputs:
-      registry:
-        description: Package registry
-        type: choice
-        required: true
-        default: testpypi
-        options:
-          - testpypi
-          - pypi
 
 permissions:
   contents: read
 
 concurrency:
-  group: publish-${{ inputs.registry }}-${{ github.ref }}
+  group: publish-pypi-${{ github.ref }}
   cancel-in-progress: false
 
 jobs:
@@ -37,13 +28,16 @@ jobs:
     needs: release-tag
     uses: ./.github/workflows/ci.yml
     secrets: inherit
+  compatibility:
+    uses: ./.github/workflows/compatibility.yml
+
   publish:
-    needs: validate
+    needs: [validate, compatibility]
     if: github.ref_type == 'tag'
     runs-on: ubuntu-24.04
     timeout-minutes: 10
     environment:
-      name: ${{ inputs.registry }}
+      name: pypi
     permissions:
       id-token: write
     steps:
@@ -53,12 +47,5 @@ jobs:
           name: python-distributions
           path: dist
 
-      - name: Publish to TestPyPI
-        if: inputs.registry == 'testpypi'
-        uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # v1.14.2
-        with:
-          repository-url: https://test.pypi.org/legacy/
-
       - name: Publish to PyPI
-        if: inputs.registry == 'pypi'
         uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # v1.14.2

{toolframe_sql_sqlite-0.4.0 → toolframe_sql_sqlite-0.4.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: toolframe-sql-sqlite
-Version: 0.4.0
+Version: 0.4.2
 Summary: Isolated managed SQLite stores for Toolframe plugins
 Project-URL: Homepage, https://github.com/toolframe/toolframe-sql-sqlite
 Project-URL: Repository, https://github.com/toolframe/toolframe-sql-sqlite
@@ -11,7 +11,7 @@ License-Expression: Apache-2.0
 License-File: LICENSE
 License-File: NOTICE
 Requires-Python: >=3.14
-Requires-Dist: toolframe-sdk==0.4.0
+Requires-Dist: toolframe-sdk<1,>=0.4.0
 Description-Content-Type: text/markdown
 
 # Toolframe SQLite provider
@@ -70,7 +70,7 @@ Development: `uv sync --group dev`, `uv run pytest -q`, `uv build --no-sources`.
 The sibling SDK UV source is a development convenience; wheels depend only on the
 published SDK contract.
 
-For isolated local validation, GitHub Actions and manual TestPyPI/PyPI publishing,
+For isolated local validation, GitHub Actions and manual PyPI publishing,
 see [CI and publishing](docs/ci.md).
 
 For release validation and Trusted Publisher setup, see [releasing](docs/releasing.md).
@@ -86,3 +86,6 @@ preserved; PostgreSQL variants in migration declarations do not change SQLite
 history.
 
 For development hooks and contribution rules, see [Contributing](CONTRIBUTING.md).
+
+Plugin dependencies allow compatible SDK 0.x updates from the declared minimum.
+See the [SDK compatibility policy](https://github.com/toolframe/toolframe-sdk/blob/main/docs/compatibility.md) for API guarantees and minimum/latest verification.

{toolframe_sql_sqlite-0.4.0 → toolframe_sql_sqlite-0.4.2}/README.md

@@ -54,7 +54,7 @@ Development: `uv sync --group dev`, `uv run pytest -q`, `uv build --no-sources`.
 The sibling SDK UV source is a development convenience; wheels depend only on the
 published SDK contract.
 
-For isolated local validation, GitHub Actions and manual TestPyPI/PyPI publishing,
+For isolated local validation, GitHub Actions and manual PyPI publishing,
 see [CI and publishing](docs/ci.md).
 
 For release validation and Trusted Publisher setup, see [releasing](docs/releasing.md).
@@ -70,3 +70,6 @@ preserved; PostgreSQL variants in migration declarations do not change SQLite
 history.
 
 For development hooks and contribution rules, see [Contributing](CONTRIBUTING.md).
+
+Plugin dependencies allow compatible SDK 0.x updates from the declared minimum.
+See the [SDK compatibility policy](https://github.com/toolframe/toolframe-sdk/blob/main/docs/compatibility.md) for API guarantees and minimum/latest verification.

{toolframe_sql_sqlite-0.4.0 → toolframe_sql_sqlite-0.4.2}/docs/ci.md

@@ -4,7 +4,7 @@
 
 Install Python 3.14.7, uv 0.12.8, Git and Bash. Keep a readable sibling
 `../toolframe-sdk` Git checkout containing commit
-`2cd153ec36c585a9adb5ad566effc2985d9e222d`. Then run:
+`539ced4dbdf9e303ec0f0205a35d65287a480b2a`. Then run:
 
 ```sh
 uv python install 3.14.7

{toolframe_sql_sqlite-0.4.0 → toolframe_sql_sqlite-0.4.2}/docs/releasing.md

@@ -1,6 +1,6 @@
 # Releasing toolframe-sql-sqlite
 
-The distribution name is `toolframe-sql-sqlite`; its current version is `0.3.1`.
+The distribution name is `toolframe-sql-sqlite`. The version is defined in `pyproject.toml`.
 Release tags must exactly match `v<project.version>`. Ordinary CI never uploads
 packages. The manual `publish.yml` workflow reruns validation and publishes only
 artifacts produced by that successful run.
@@ -10,13 +10,14 @@ artifacts produced by that successful run.
 Run the repository's existing validation workflow; its local commands and
 integration coverage are described in [CI](ci.md).
 
-Publish `toolframe-sdk==0.4.0` first. The coordinated order and native CLI channels are documented in
+Publish any newly required SDK version before the plugin. Compatible Core or SDK
+updates alone do not require a plugin release. The coordinated order and native CLI channels are documented in
 [Toolframe's release guide](https://github.com/toolframe/toolframe-core/blob/main/docs/releasing.md).
 
 ## Trusted Publishers
 
-Create GitHub environments named `testpypi` and `pypi`. On each corresponding
-package index, configure a normal or pending Trusted Publisher with these values:
+Create a GitHub environment named `pypi`. On PyPI, configure a normal or
+pending Trusted Publisher with these values:
 
 | Field | Value |
 | --- | --- |
@@ -24,7 +25,7 @@ package index, configure a normal or pending Trusted Publisher with these values
 | GitHub owner | `toolframe` |
 | GitHub repository | `toolframe-sql-sqlite` |
 | Workflow filename | `publish.yml` |
-| Environment | `testpypi` or `pypi`, matching the index |
+| Environment | `pypi` |
 
 If publishing from another owner, use that actual owner in the publisher binding.
 Follow [PyPI's Trusted Publishing guide](https://docs.pypi.org/trusted-publishers/using-a-publisher/).
@@ -40,7 +41,7 @@ sibling owner where the workflow exposes that variable.
 ## Publish and verify
 
 After the release commit and matching tag are available remotely, manually run
-`publish.yml` at `v0.3.1`, selecting `testpypi` first and then `pypi`.
+`publish.yml` at the matching `v<project.version>` tag to publish to PyPI.
 A branch or mismatched tag is rejected. Downloaded files are the artifacts from
 that run; the publishing job does not rebuild them. Published files cannot be
 replaced under the same version.
@@ -49,11 +50,11 @@ After PyPI publication, verify a clean installation:
 
 ```sh
 uv venv --python 3.14.7 build/consumer
-uv pip install --python build/consumer/bin/python 'toolframe-sql-sqlite==0.4.0'
+uv pip install --python build/consumer/bin/python 'toolframe-sql-sqlite==0.4.2'
 uv pip check --python build/consumer/bin/python
 ```
 
-TestPyPI does not mirror dependencies. Test the specific artifact against an
-explicit dependency source; a local or TestPyPI check alone does not demonstrate
-that production PyPI resolution works. Keep logs, hashes and exact revisions in
-CI artifacts or ignored local evidence directories.
+Test the specific artifact with dependencies from PyPI. Local artifact checks
+alone do not demonstrate that the published package resolves correctly from
+PyPI. Keep logs, hashes and exact revisions in CI artifacts or ignored local
+evidence directories.

{toolframe_sql_sqlite-0.4.0 → toolframe_sql_sqlite-0.4.2}/pyproject.toml

@@ -4,14 +4,14 @@ build-backend = "hatchling.build"
 
 [project]
 name = "toolframe-sql-sqlite"
-version = "0.4.0"
+version = "0.4.2"
 description = "Isolated managed SQLite stores for Toolframe plugins"
 readme = "README.md"
 license = "Apache-2.0"
 license-files = ["LICENSE", "NOTICE"]
 authors = [{ name = "byfb", email = "62798989+byfb@users.noreply.github.com" }]
 requires-python = ">=3.14"
-dependencies = ["toolframe-sdk==0.4.0"]
+dependencies = ["toolframe-sdk>=0.4.0,<1"]
 
 [project.urls]
 Homepage = "https://github.com/toolframe/toolframe-sql-sqlite"

{toolframe_sql_sqlite-0.4.0 → toolframe_sql_sqlite-0.4.2}/scripts/validate.sh

@@ -4,7 +4,7 @@ set -euo pipefail
 
 repo_root=$(cd -- "$(dirname -- "${BASH_SOURCE[0]}")/.." && pwd)
 sdk_source=${TOOLFRAME_SDK_SOURCE:-"$repo_root/../toolframe-sdk"}
-sdk_revision=2cd153ec36c585a9adb5ad566effc2985d9e222d
+sdk_revision=539ced4dbdf9e303ec0f0205a35d65287a480b2a
 python_version=3.14.7
 output=${1:-"$repo_root/dist/ci"}
 
@@ -59,6 +59,7 @@ import tarfile
 import tomllib
 import zipfile
 from pathlib import Path
+from packaging.requirements import Requirement
 
 dist, project = map(Path, sys.argv[1:])
 metadata = tomllib.loads((project / "pyproject.toml").read_text())["project"]
@@ -71,7 +72,7 @@ with zipfile.ZipFile(wheels[0]) as wheel, tarfile.open(sdists[0]) as sdist:
     assert wheel_metadata["Name"] == metadata["name"]
     assert wheel_metadata["Version"] == metadata["version"]
     assert wheel_metadata["License-Expression"] == metadata["license"]
-    assert wheel_metadata.get_all("Requires-Dist") == metadata["dependencies"]
+    assert {Requirement(value) for value in wheel_metadata.get_all("Requires-Dist")} == {Requirement(value) for value in metadata["dependencies"]}
     for filename in ("LICENSE", "NOTICE"):
         wheel_path = next(name for name in wheel.namelist() if name.endswith(f"/licenses/{filename}"))
         sdist_path = next(name for name in sdist.getnames() if name.endswith(f"/{filename}"))

{toolframe_sql_sqlite-0.4.0 → toolframe_sql_sqlite-0.4.2}/uv.lock

@@ -282,7 +282,7 @@ wheels = [
 
 [[package]]
 name = "toolframe-sdk"
-version = "0.4.0"
+version = "0.4.1"
 source = { editable = "../toolframe-sdk" }
 dependencies = [
     { name = "jsonschema" },
@@ -305,11 +305,12 @@ dev = [
     { name = "pytest", specifier = ">=8,<10" },
     { name = "pytest-asyncio", specifier = ">=1,<2" },
     { name = "ruff", specifier = ">=0.12,<1" },
+    { name = "tomlkit", specifier = ">=0.13,<1" },
 ]
 
 [[package]]
 name = "toolframe-sql-sqlite"
-version = "0.4.0"
+version = "0.4.2"
 source = { editable = "." }
 dependencies = [
     { name = "toolframe-sdk" },