unstd 2.0.0__tar.gz → 2.1.0__tar.gz

{unstd-2.0.0 → unstd-2.1.0}/.github/workflows/ci.yml

@@ -14,7 +14,7 @@ permissions:
   contents: read
 
 concurrency:
-  group: ${{ github.workflow }}-${{ github.ref }}
+  group: ${{ github.workflow }}-${{ github.ref == 'refs/heads/main' && github.sha || github.ref }}
   cancel-in-progress: ${{ github.ref != 'refs/heads/main' }}
 
 jobs:
@@ -29,11 +29,12 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
-      - uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
+      - uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
         with:
           enable-cache: false
+          version: "latest-known"
           python-version: "3.13"
-      - run: uv sync --all-extras --group dev --python 3.13
+      - run: uv sync --locked --all-extras --group dev --python 3.13
       - run: uv run --python 3.13 ruff check .
       - run: uv run --python 3.13 ruff format --check .
       - run: uv run --python 3.13 mypy
@@ -52,11 +53,12 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
-      - uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
+      - uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
         with:
           enable-cache: false
+          version: "latest-known"
           python-version: ${{ matrix.python-version }}
-      - run: uv sync --all-extras --group dev --python ${{ matrix.python-version }}
+      - run: uv sync --locked --all-extras --group dev --python ${{ matrix.python-version }}
       - run: uv run --python ${{ matrix.python-version }} pytest -q
 
   floors:
@@ -75,9 +77,10 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
-      - uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
+      - uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
         with:
           enable-cache: false
+          version: "latest-known"
           python-version: "3.13"
       - run: uv sync --all-extras --group dev --python 3.13 --resolution lowest-direct
       # Which versions the floors admitted — the first thing anyone reading a
@@ -105,11 +108,12 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
-      - uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
+      - uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
         with:
           enable-cache: false
+          version: "latest-known"
           python-version: "3.13"
-      - run: uv sync --group dev --python 3.13
+      - run: uv sync --locked --group dev --python 3.13
       # A diagnostic, not a gate — the zero-closure claim is asserted offline by
       # `tests/test_package.py`. This is here because a failure that reproduces
       # only on the fallback leg is nearly unreadable without knowing which

{unstd-2.0.0 → unstd-2.1.0}/.github/workflows/release.yml

@@ -36,8 +36,13 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
-      - uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
+      - uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
         with:
           enable-cache: false
+          version: "latest-known"
+      - name: The tag agrees with package metadata
+        env:
+          TAG: ${{ github.ref_name }}
+        run: test "$TAG" = "v$(uv version --short)"
       - run: uv build
       - uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # v1.14.2

{unstd-2.0.0 → unstd-2.1.0}/CHANGELOG.md

@@ -1,7 +1,45 @@
+---
+doc_radar:
+  sentinels:
+    - file: pyproject.toml
+      contains: ['"msgspec>=0.22"', 'exclude-newer = "P2D"']
+    - file: .github/workflows/ci.yml
+      contains: ['github.sha || github.ref', 'version: "latest-known"', 'uv sync --locked']
+    - file: .github/workflows/release.yml
+      contains: ['TAG: ${{ github.ref_name }}', 'uv version --short']
+    - file: src/unstd/serde/structs.py
+      contains: ['Callable[[Decimal], object]', 'decimal_format: _DecimalFormat']
+---
+
 # Changelog
 
 <!-- towncrier release notes start -->
 
+## [2.1.0] - 2026-10-04
+
+### Added
+
+- `Codec(decimal_format=...)` accepts a callable over each `Decimal`, so exact
+  decimal policies stay exact instead of passing through a float. Callback
+  errors propagate, and the same encoder remains usable afterward. This uses
+  [msgspec 0.22's encoder support](https://github.com/msgspec/msgspec/releases/tag/0.22.0).
+
+### Changed
+
+- We refreshed the optional-backend and development lock, including uuid-utils
+  1.0 and msgspec 0.22. Existing UUID generation and codec defaults keep their
+  behavior; the serde extra's msgspec floor moves to 0.22.
+- We quarantine new resolver and isolated-build releases for two days. CI uses
+  the reviewed lock and checksum-backed uv versions from the pinned
+  [setup-uv 10.2 action](https://github.com/astral-sh/setup-uv/releases/tag/v10.2.0).
+  The separate floor job still proves the oldest supported direct dependencies.
+
+### Fixed
+
+- We keep each main commit's CI run in its own concurrency group. Newer pushes
+  cannot replace pending checks for a release commit, and the release tag must
+  agree with the package version before publication.
+
 ## [2.0.0] - 2026-09-27
 
 ### Breaking

{unstd-2.0.0 → unstd-2.1.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: unstd
-Version: 2.0.0
+Version: 2.1.0
 Summary: stdlib-faithful accelerated replacements behind optional extras
 Project-URL: Homepage, https://github.com/The-Billy-Company/unstd
 Project-URL: Repository, https://github.com/The-Billy-Company/unstd
@@ -43,7 +43,7 @@ Requires-Dist: numpy>=2.5; extra == 'rand'
 Provides-Extra: rex
 Requires-Dist: irregex>=2.6.0; extra == 'rex'
 Provides-Extra: serde
-Requires-Dist: msgspec>=0.21; extra == 'serde'
+Requires-Dist: msgspec>=0.22; extra == 'serde'
 Requires-Dist: orjson>=3.12; extra == 'serde'
 Requires-Dist: pybase64>=1.5; extra == 'serde'
 Provides-Extra: text

unstd-2.1.0/changelog.d/README.md

@@ -0,0 +1,14 @@
+---
+doc_radar:
+  sentinels:
+    - file: CHANGELOG.md
+      contains: ['## [2.1.0]', 'Codec(decimal_format=...)']
+    - file: pyproject.toml
+      contains: ['exclude-newer = "P2D"']
+---
+
+# Unreleased changes
+
+We keep one fragment per change here; release history stays in the root changelog.
+Fragments describe what changed for a caller. On release, we fold their bodies
+into the root changelog and move their source assertions with them.

{unstd-2.0.0 → unstd-2.1.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "unstd"
-version = "2.0.0"
+version = "2.1.0"
 description = "stdlib-faithful accelerated replacements behind optional extras"
 readme = "README.md"
 requires-python = ">=3.12"
@@ -45,7 +45,7 @@ dependencies = []
 [project.optional-dependencies]
 serde = [
   "orjson>=3.12",
-  "msgspec>=0.21",
+  "msgspec>=0.22",
   "pybase64>=1.5",
 ]
 ids = [
@@ -114,6 +114,11 @@ dev = [
   "cryptography>=44.0",
 ]
 
+[tool.uv]
+# Keep development, optional backends and isolated builds behind the same
+# two-day release quarantine as the applications that consume this package.
+exclude-newer = "P2D"
+
 [tool.pytest.ini_options]
 testpaths = ["tests"]
 # The repo root, so `tests/test_bench.py` can import the `bench` harness. `bench`

{unstd-2.0.0 → unstd-2.1.0}/src/unstd/serde/structs.py

@@ -46,6 +46,7 @@ decode.
 from __future__ import annotations
 
 from collections.abc import Callable
+from decimal import Decimal
 from typing import Literal, SupportsFloat, final
 
 
@@ -60,6 +61,7 @@ EncHook = Callable[[object], object]
 DecHook = Callable[[type, object], object]
 FloatHook = Callable[[str], object]
 Order = Literal["deterministic", "sorted"] | None
+_DecimalFormat = Literal["string", "number"] | Callable[[Decimal], object]
 
 __all__ = [
     "Codec",
@@ -103,7 +105,7 @@ class Codec[T]:
         enc_hook: EncHook | None = None,
         dec_hook: DecHook | None = None,
         order: Order = None,
-        decimal_format: Literal["string", "number"] = "string",
+        decimal_format: _DecimalFormat = "string",
         uuid_format: Literal["canonical", "hex"] = "canonical",
         strict: bool = True,
         float_hook: FloatHook | None = None,
@@ -118,6 +120,10 @@ class Codec[T]:
         since it never leaves the typed encoder. ``strict=False`` widens decode
         coercion (e.g. a JSON string where the schema expects an int) — msgspec's
         own escape hatch for loose upstream producers.
+
+        ``decimal_format`` also accepts a callable over each ``Decimal``. Use it
+        for an exact decimal policy without converting through a binary float;
+        its returned value is encoded normally and its exceptions propagate.
         """
         self.encode = msgspec.json.Encoder(
             enc_hook=enc_hook,

{unstd-2.0.0 → unstd-2.1.0}/tests/serde/test_structs.py

@@ -9,6 +9,7 @@ faithfulness contract (bytes match constructing msgspec directly), the
 from __future__ import annotations
 
 from decimal import Decimal
+from typing import get_type_hints
 from uuid import UUID
 
 import msgspec
@@ -153,6 +154,59 @@ def test_decimal_format_string_is_default() -> None:
     assert codec.encode(_HasDecimal(Decimal("1.5"))) == b'{"amount":"1.5"}'
 
 
+@pytest.mark.parametrize(
+    ("amount", "expected"),
+    [
+        ("1.5", b'{"amount":"1.50"}'),
+        (
+            "12345678901234567890.125",
+            b'{"amount":"12345678901234567890.12"}',
+        ),
+    ],
+)
+def test_decimal_format_callable_preserves_exact_policy(
+    amount: str, expected: bytes
+) -> None:
+    def cents(value: Decimal) -> str:
+        return format(value.quantize(Decimal("0.01")), "f")
+
+    codec = structs.Codec(_HasDecimal, decimal_format=cents)
+    encoded = codec.encode(_HasDecimal(Decimal(amount)))
+    assert encoded == expected
+    assert codec.decode(encoded).amount == Decimal(amount).quantize(Decimal("0.01"))
+
+
+def test_decimal_format_callable_error_does_not_poison_reused_encoder() -> None:
+    def nonnegative(value: Decimal) -> str:
+        if value < 0:
+            msg = "negative amount"
+            raise ValueError(msg)
+        return str(value)
+
+    codec = structs.Codec(_HasDecimal, decimal_format=nonnegative)
+    with pytest.raises(ValueError, match="negative amount"):
+        codec.encode(_HasDecimal(Decimal(-1)))
+    assert codec.encode(_HasDecimal(Decimal("1.25"))) == b'{"amount":"1.25"}'
+
+
+def test_decimal_format_callable_rejects_unencodable_return() -> None:
+    def unsupported(value: Decimal) -> object:
+        return object() if value < 0 else str(value)
+
+    codec = structs.Codec(_HasDecimal, decimal_format=unsupported)
+    with pytest.raises(TypeError, match="unsupported"):
+        codec.encode(_HasDecimal(Decimal(-1)))
+    assert codec.encode(_HasDecimal(Decimal("2.5"))) == b'{"amount":"2.5"}'
+
+
+def test_codec_annotations_remain_runtime_resolvable() -> None:
+    hints = get_type_hints(
+        structs.Codec.__init__,
+        localns={param.__name__: param for param in structs.Codec.__type_params__},
+    )
+    assert hints["decimal_format"] == structs._DecimalFormat
+
+
 def test_uuid_format_hex_drops_hyphens() -> None:
     u = UUID("12345678-1234-5678-1234-567812345678")
     canonical = structs.Codec(_HasUUID).encode(_HasUUID(u))