update-kit 0.1.0__tar.gz → 0.2.1__tar.gz

update_kit-0.2.1/.github/workflows/ci.yml

@@ -0,0 +1,102 @@
+name: CI
+
+on:
+  push:
+  pull_request:
+
+permissions:
+  contents: read
+
+concurrency:
+  group: ci-${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+env:
+  PYTHONUTF8: "1"
+
+jobs:
+  test:
+    name: Python 3.10 / ${{ matrix.os }}
+    timeout-minutes: 15
+    strategy:
+      fail-fast: false
+      matrix:
+        os: [macos-latest, ubuntu-latest, windows-latest]
+    runs-on: ${{ matrix.os }}
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+      - uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
+        with:
+          python-version: "3.10"
+          enable-cache: true
+          cache-dependency-glob: uv.lock
+      - name: Install locked dependencies
+        run: uv sync --locked --all-groups
+      - name: Lint
+        run: uv run ruff check .
+      - name: Test
+        run: uv run pytest -v
+      - name: Build distributions
+        run: uv build
+      - name: Validate wheel is importable standalone
+        shell: python
+        run: |
+          import os
+          import pathlib
+          import subprocess
+          import tempfile
+
+          wheel, = pathlib.Path("dist").glob("*.whl")
+          with tempfile.TemporaryDirectory() as directory:
+              environment = pathlib.Path(directory)
+              subprocess.run(["uv", "venv", environment], check=True)
+              scripts = environment / ("Scripts" if os.name == "nt" else "bin")
+              python = scripts / ("python.exe" if os.name == "nt" else "python")
+              subprocess.run(
+                  ["uv", "pip", "install", "--python", python, "--no-index", wheel],
+                  check=True,
+              )
+              subprocess.run([python, "-I", "-c", "import update_kit"], check=True)
+              print("update_kit imports standalone OK")
+
+  # Failure-only pager. A green run sends nothing on purpose: a notification
+  # that arrives on every push is one nobody reads. Credentials live in repo
+  # secrets, never in this file — see README "CI notifications" for the two
+  # `gh secret set` commands that configure them.
+  notify-telegram:
+    needs: test
+    if: ${{ failure() && github.event_name == 'push' }}
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    steps:
+      - name: Notify Telegram
+        env:
+          TOKEN: ${{ secrets.TELEGRAM_BOT_TOKEN }}
+          CHAT_ID: ${{ secrets.TELEGRAM_CHAT_ID }}
+        run: |
+          # Unconfigured secrets are a valid state (a fork, or a clone whose
+          # owner never set them up). Skip quietly instead of failing the job
+          # and reporting a second, misleading red X on top of the real one.
+          if [ -z "$TOKEN" ] || [ -z "$CHAT_ID" ]; then
+            echo "::notice::TELEGRAM_BOT_TOKEN / TELEGRAM_CHAT_ID not set — skipping notification"
+            exit 0
+          fi
+          # parse_mode=HTML: a branch or commit subject containing < & > would
+          # otherwise produce unparseable markup and Telegram would 400.
+          esc() { printf '%s' "$1" | sed -e 's/&/\&amp;/g' -e 's/</\&lt;/g' -e 's/>/\&gt;/g'; }
+          ci_url="$GITHUB_SERVER_URL/$GITHUB_REPOSITORY/actions/runs/$GITHUB_RUN_ID"
+          message="🚨 <b>CI failed</b>
+
+          <b>Repository:</b> <code>$(esc "$GITHUB_REPOSITORY")</code>
+          <b>Branch:</b> <code>$(esc "$GITHUB_REF_NAME")</code>
+          <b>Commit:</b> <code>$(esc "${GITHUB_SHA::7}")</code>
+
+          <a href=\"$ci_url\">Open failed CI run</a>"
+          curl --fail --silent --show-error --max-time 30 \
+            --data-urlencode "chat_id=$CHAT_ID" \
+            --data-urlencode "parse_mode=HTML" \
+            --data-urlencode "disable_web_page_preview=true" \
+            --data-urlencode "text=$message" \
+            "https://api.telegram.org/bot$TOKEN/sendMessage"

{update_kit-0.1.0 → update_kit-0.2.1}/.github/workflows/release.yml

@@ -21,10 +21,10 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 15
     steps:
-      - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
-      - uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7
+      - uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
         with:
           python-version: "3.10"
           enable-cache: true

{update_kit-0.1.0 → update_kit-0.2.1}/CHANGELOG.md

@@ -1,3 +1,17 @@
+## [0.2.1] - 2026-10-16
+
+### 🧪 Testing
+
+- Stop pinning __version__ in the api test
+## [0.2.0] - 2026-10-16
+
+### 🚀 Features
+
+- **update:** [**breaking**] Always land on the newest release tag
+
+### ⚙️ Miscellaneous Tasks
+
+- Add Telegram failure notification
 ## [0.1.0] - 2026-10-15
 
 ### 🚀 Features

{update_kit-0.1.0 → update_kit-0.2.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: update-kit
-Version: 0.1.0
+Version: 0.2.1
 Summary: Self-update for git-tag-released Python CLIs (uv tool / pipx). Stdlib only.
 License: MIT
 License-File: LICENSE
@@ -60,7 +60,7 @@ def main(argv=None):
 |---|---|
 | `latest_tag(repo, *, timeout=5, url=None) -> str` | Newest strict `v?X.Y.Z` tag (ASCII digits) via `git ls-remote --tags --refs`. Prereleases and other names are ignored. Raises `UpdateError` (offline, no tags, git missing). |
 | `install_kind(dist) -> (kind, detail)` | `"dev"` (PEP 610 local/editable dir, detail = the dir), `"uv"` / `"pipx"` (from `sys.prefix`), else `"unknown"`. |
-| `update(*, app, repo, dist, current=None, lang="en", after=(), out=sys.stderr, run=subprocess.run, url=None) -> int` | Exit code: **0** updated or already up to date · **1** couldn't check (offline/rate limit) or install/after-step failed · **2** dev install (use `git pull`) or unknown install (manual command printed). |
+| `update(*, app, repo, dist, current=None, lang="en", after=(), out=sys.stderr, run=subprocess.run, url=None) -> int` | Always lands on the newest tag: a dev checkout, a branch/commit install, a newer build or an unmanaged install is replaced by it (via `uv`, else `pipx`). Exit code: **0** updated, or already installed from that tag (the message names the version) · **1** couldn't check (offline/rate limit) or install/after-step failed · **2** no `uv`/`pipx` found (manual command printed). |
 | `check(*, repo, current, cache_path=None, ttl=86400, timeout=1.5, url=None) -> str \| None` | Newer tag or `None`. Never raises. Results — failures too — are cached for `ttl` in `$HOME/.update-kit/state.json`, keyed by the resolved source URL. |
 | `hint(cmd, latest, current, lang="en") -> str` | `my-cli v1.2.0 is available (you have 1.1.0) — run` `` `my-cli update` `` |
 | `should_hint(stream=sys.stderr) -> bool` | `True` only when `stream` is a TTY. |
@@ -100,6 +100,21 @@ uv run ruff check .
 uv build
 ```
 
+## CI notifications
+
+`.github/workflows/ci.yml` runs the test matrix (macOS/Linux/Windows) on every push and PR,
+then a separate `notify-telegram` job sends a Telegram message only when the test job fails on
+a `push` (never on green runs, never on `pull_request`, to avoid pinging on forks/external PRs).
+Configure it once per repo:
+
+```bash
+gh secret set TELEGRAM_BOT_TOKEN
+gh secret set TELEGRAM_CHAT_ID
+```
+
+Unconfigured secrets are a valid state — the job skips quietly instead of failing a second time
+on top of the real failure.
+
 ## License
 
 MIT

{update_kit-0.1.0 → update_kit-0.2.1}/README.md

@@ -51,7 +51,7 @@ def main(argv=None):
 |---|---|
 | `latest_tag(repo, *, timeout=5, url=None) -> str` | Newest strict `v?X.Y.Z` tag (ASCII digits) via `git ls-remote --tags --refs`. Prereleases and other names are ignored. Raises `UpdateError` (offline, no tags, git missing). |
 | `install_kind(dist) -> (kind, detail)` | `"dev"` (PEP 610 local/editable dir, detail = the dir), `"uv"` / `"pipx"` (from `sys.prefix`), else `"unknown"`. |
-| `update(*, app, repo, dist, current=None, lang="en", after=(), out=sys.stderr, run=subprocess.run, url=None) -> int` | Exit code: **0** updated or already up to date · **1** couldn't check (offline/rate limit) or install/after-step failed · **2** dev install (use `git pull`) or unknown install (manual command printed). |
+| `update(*, app, repo, dist, current=None, lang="en", after=(), out=sys.stderr, run=subprocess.run, url=None) -> int` | Always lands on the newest tag: a dev checkout, a branch/commit install, a newer build or an unmanaged install is replaced by it (via `uv`, else `pipx`). Exit code: **0** updated, or already installed from that tag (the message names the version) · **1** couldn't check (offline/rate limit) or install/after-step failed · **2** no `uv`/`pipx` found (manual command printed). |
 | `check(*, repo, current, cache_path=None, ttl=86400, timeout=1.5, url=None) -> str \| None` | Newer tag or `None`. Never raises. Results — failures too — are cached for `ttl` in `$HOME/.update-kit/state.json`, keyed by the resolved source URL. |
 | `hint(cmd, latest, current, lang="en") -> str` | `my-cli v1.2.0 is available (you have 1.1.0) — run` `` `my-cli update` `` |
 | `should_hint(stream=sys.stderr) -> bool` | `True` only when `stream` is a TTY. |
@@ -91,6 +91,21 @@ uv run ruff check .
 uv build
 ```
 
+## CI notifications
+
+`.github/workflows/ci.yml` runs the test matrix (macOS/Linux/Windows) on every push and PR,
+then a separate `notify-telegram` job sends a Telegram message only when the test job fails on
+a `push` (never on green runs, never on `pull_request`, to avoid pinging on forks/external PRs).
+Configure it once per repo:
+
+```bash
+gh secret set TELEGRAM_BOT_TOKEN
+gh secret set TELEGRAM_CHAT_ID
+```
+
+Unconfigured secrets are a valid state — the job skips quietly instead of failing a second time
+on top of the real failure.
+
 ## License
 
 MIT

{update_kit-0.1.0 → update_kit-0.2.1}/src/update_kit/__init__.py

@@ -22,6 +22,7 @@ import json
 import os
 import re
 import shlex
+import shutil
 import subprocess
 import sys
 import time
@@ -32,7 +33,7 @@ from typing import TextIO
 from urllib.parse import urlparse
 from urllib.request import url2pathname
 
-__version__ = "0.1.0"
+__version__ = "0.2.1"
 
 __all__ = [
     "UpdateError", "check", "hint", "install_kind", "latest_tag", "normalize_lang",
@@ -52,26 +53,26 @@ _CMD_META = re.compile(r'[&|<>^%"()!\r\n]')
 
 _MESSAGES = {
     "en": {
-        "dev": "{app}: dev install from {dir}; use git pull to update",
-        "check_failed": "{app}: couldn't check for updates ({error})",
-        "up_to_date": "{app} {current} is already up to date",
+        "check_failed": "❌ {app}: couldn't check for updates ({error})",
+        "up_to_date": "✅ {app} {current} is already the latest version ({latest}).",
         "manual": "{app} {latest} is available (you have {current}). Install it manually:\n  {command}",
-        "installing": "Updating {app} {current} -> {latest} ...",
-        "install_failed": "{app}: update failed ({error})",
-        "updated": "{app} updated to {latest}",
+        "installing": "⬆️  Updating {app} {current} → {latest} via `{command}` ...",
+        "install_failed": "❌ {app}: update failed ({error})",
+        "updated": "🎉 {app} updated to {latest}!",
+        "left_alone": "ℹ️  Installed as a {tool} tool; the copy at {dir} is unchanged.",
         "after_failed": "warning: `{step}` failed after the update ({error})",
         "background": "{app} {latest}: update continues in the background (log: {log})",
         "hint": "{cmd} {latest} is available (you have {current}) — run `{cmd} update`",
         "source": "{app}: using update source {url} (UPDATE_KIT_REPO_URL)",
     },
     "zh-TW": {
-        "dev": "{app}：開發版安裝（{dir}），請用 git pull 更新",
-        "check_failed": "{app}：無法檢查更新（{error}）",
-        "up_to_date": "{app} {current} 已是最新版本",
+        "check_failed": "❌ {app}：無法檢查更新（{error}）",
+        "up_to_date": "✅ {app} {current} 已是最新版本（{latest}）。",
         "manual": "{app} {latest} 可更新（目前為 {current}），請手動安裝：\n  {command}",
-        "installing": "正在更新 {app} {current} -> {latest} ...",
-        "install_failed": "{app}：更新失敗（{error}）",
-        "updated": "{app} 已更新至 {latest}",
+        "installing": "⬆️  正在更新 {app} {current} → {latest}，執行 `{command}` ...",
+        "install_failed": "❌ {app}：更新失敗（{error}）",
+        "updated": "🎉 {app} 已更新至 {latest}！",
+        "left_alone": "ℹ️  已安裝為 {tool} 工具；{dir} 的原本那份沒有變更。",
         "after_failed": "警告：更新後執行 `{step}` 失敗（{error}）",
         "background": "{app} {latest}：更新將在背景繼續（記錄檔：{log}）",
         "hint": "{cmd} {latest} 可更新（目前為 {current}）— 執行 `{cmd} update`",
@@ -178,6 +179,17 @@ def install_kind(dist: str) -> tuple[str, str | None]:
     return "unknown", str(prefix)
 
 
+def _installed_revision(dist: str) -> str | None:
+    """The git ref a PEP 610 VCS install was requested at (``v1.2.0``, ``main``); ``""`` for
+    a VCS install with no ref (the default branch); None when it is not a VCS install."""
+    try:
+        direct = json.loads(metadata.distribution(dist).read_text("direct_url.json") or "{}")
+        revision = direct["vcs_info"].get("requested_revision")
+        return revision if isinstance(revision, str) else ""
+    except Exception:  # noqa: BLE001 - not installed, not a VCS install, malformed record
+        return None
+
+
 def _windows_chain(commands: Sequence[Sequence[str]], log: str) -> str:
     """One cmd.exe line: wait for the caller to exit (its exe is locked), then run *commands*."""
     chain = " && ".join(subprocess.list2cmdline(list(argv)) for argv in commands)
@@ -197,11 +209,11 @@ def _spawn_detached(cmdline: str, log: str, env: dict | None = None) -> None:  #
 def update(*, app: str, repo: str, dist: str, current: str | None = None, lang: str = "en",
            after: Sequence[Sequence[str]] = (), out: TextIO = sys.stderr,
            run: Callable = subprocess.run, url: str | None = None) -> int:
-    """Install the newest release. 0 updated/up to date, 1 failure, 2 dev/unknown install."""
+    """Install the newest release tag. 0 updated/up to date, 1 failure, 2 no installer found.
+
+    Up to date means installed from exactly that tag; anything else (a dev checkout, a
+    branch or commit, a newer build, an unmanaged install) is replaced by it."""
     kind, detail = install_kind(dist)
-    if kind == "dev":
-        _say(out, _msg(lang, "dev", app=app, dir=detail))
-        return 2
     if current is None:
         try:
             current = metadata.version(dist)
@@ -215,15 +227,20 @@ def update(*, app: str, repo: str, dist: str, current: str | None = None, lang:
     except UpdateError as exc:
         _say(out, _msg(lang, "check_failed", app=app, error=exc))
         return 1
-    have = _parse(current)
-    if have and have >= _parse(latest):
-        _say(out, _msg(lang, "up_to_date", app=app, current=current))
+    revision = _installed_revision(dist)
+    if kind in ("uv", "pipx") and _parse(current) == _parse(latest) and revision in (None, latest):
+        _say(out, _msg(lang, "up_to_date", app=app, current=current, latest=latest))
         return 0
     # An unparseable/unknown current version is treated as older: the user asked to update.
     # pip/uv can't parse the scp form (git@host:path); install over the equivalent ssh:// URL.
     source = re.sub(r"^git@([^:]+):/?", r"ssh://git@\1/", target)
     spec = f"git+{source}@{latest}"
     shown = current or "?"
+    # A checkout or unmanaged install becomes a separate tool install of the tag; it stays as it was.
+    left_alone = detail if kind in ("dev", "unknown") else None
+    if kind in ("dev", "unknown"):
+        kind = next((tool for tool in ("uv", "pipx") if shutil.which(tool)), "unknown")
+    note = _msg(lang, "left_alone", tool=kind, dir=left_alone) if left_alone else None
     if kind == "uv":
         install = ["uv", "tool", "install", "--force", "--no-sources", spec]
     elif kind == "pipx":
@@ -245,8 +262,10 @@ def update(*, app: str, repo: str, dist: str, current: str | None = None, lang:
             _say(out, _msg(lang, "install_failed", app=app, error=exc))
             return 1
         _say(out, _msg(lang, "background", app=app, latest=latest, log=log))
+        if note:
+            _say(out, note)
         return 0
-    _say(out, _msg(lang, "installing", app=app, current=shown, latest=latest))
+    _say(out, _msg(lang, "installing", app=app, current=shown, latest=latest, command=shlex.join(install)))
     try:
         code = run(install, cwd=Path.home(), env={**os.environ, **_NO_PROMPT}).returncode
     except OSError as exc:
@@ -256,6 +275,8 @@ def update(*, app: str, repo: str, dist: str, current: str | None = None, lang:
         _say(out, _msg(lang, "install_failed", app=app, error=f"exit {code}"))
         return 1
     _say(out, _msg(lang, "updated", app=app, latest=latest))
+    if note:
+        _say(out, note)
     result = 0
     for step in after:
         step = list(step)

{update_kit-0.1.0 → update_kit-0.2.1}/tests/test_update_kit.py

@@ -59,8 +59,11 @@ def make_repo(path, tags):
 
 @pytest.fixture
 def fake_env(monkeypatch):
-    """update() with a uv install, latest v1.1.0, no network."""
-    state = {"kind": ("uv", None), "latest": "v1.1.0", "tag_calls": []}
+    """update() with a uv install, latest v1.1.0, no network.
+
+    ``direct_url`` is the install's PEP 610 record (None: none); ``on_path`` the installers found."""
+    state = {"kind": ("uv", None), "latest": "v1.1.0", "tag_calls": [], "direct_url": None,
+             "on_path": {"uv", "pipx"}}
     # Real Windows CI must not spawn a detached installer from the POSIX-path tests.
     monkeypatch.setattr(uk, "_IS_WINDOWS", False)
 
@@ -72,6 +75,8 @@ def fake_env(monkeypatch):
 
     monkeypatch.setattr(uk, "install_kind", lambda dist: state["kind"])
     monkeypatch.setattr(uk, "latest_tag", latest_tag)
+    monkeypatch.setattr(uk.metadata, "distribution", lambda name: FakeDist(state["direct_url"]))
+    monkeypatch.setattr(uk.shutil, "which", lambda cmd: f"/bin/{cmd}" if cmd in state["on_path"] else None)
     return state
 
 
@@ -225,15 +230,41 @@ def test_update_passes_url_through(fake_env):
     assert run.calls[0][-1] == "git+file:///srv/demo@v1.1.0"
 
 
-def test_update_already_up_to_date(fake_env):
+def test_update_already_on_the_latest_tag_says_so_with_the_version(fake_env):
     run = FakeRun()
-    for current in ("1.1.0", "v1.1.0", "1.2.0"):
+    for current in ("1.1.0", "v1.1.0"):
         code, out = do_update(run, current=current)
         assert code == 0
-        assert "already up to date" in out
+        assert out.strip() == f"✅ demo {current} is already the latest version (v1.1.0)."
+    assert run.calls == []
+
+
+def test_update_installed_from_the_latest_tag_is_up_to_date(fake_env):
+    fake_env["direct_url"] = {"url": "https://github.com/owner/demo.git",
+                              "vcs_info": {"vcs": "git", "requested_revision": "v1.1.0"}}
+    run = FakeRun()
+    assert do_update(run, current="1.1.0")[0] == 0
     assert run.calls == []
 
 
+@pytest.mark.parametrize("current, vcs_info", [
+    ("1.2.0", None),
+    ("1.1.0", {"vcs": "git", "requested_revision": "main"}),
+    ("1.1.0", {"vcs": "git", "requested_revision": "0123abc"}),
+    ("1.1.0", {"vcs": "git", "commit_id": "0123abc"}),  # `git+URL` with no ref: the default branch
+])
+def test_update_off_the_latest_tag_reinstalls_that_tag(fake_env, current, vcs_info):
+    """A newer build, or one installed from a branch/commit, is replaced by the newest tag."""
+    if vcs_info:
+        fake_env["direct_url"] = {"url": "https://github.com/owner/demo.git", "vcs_info": vcs_info}
+    run = FakeRun()
+    code, out = do_update(run, current=current)
+    assert code == 0
+    assert run.calls == [["uv", "tool", "install", "--force", "--no-sources",
+                          "git+https://github.com/owner/demo.git@v1.1.0"]]
+    assert "already" not in out
+
+
 def test_update_couldnt_check_is_failure_not_up_to_date(fake_env):
     fake_env["latest"] = uk.UpdateError("offline")
     run = FakeRun()
@@ -273,17 +304,57 @@ def test_update_failing_after_step_warns_and_returns_1(fake_env):
     assert run.calls[-1] == ["other", "step"]
 
 
-def test_update_dev_install_returns_2_without_network(fake_env):
+@pytest.mark.parametrize("kind", [("dev", "/src/demo"), ("unknown", None)])
+@pytest.mark.parametrize("current", ["1.0.0", "1.1.0", "9.0.0"])
+def test_update_dev_or_unknown_install_is_replaced_by_the_latest_tag(fake_env, kind, current):
+    """A local checkout or unmanaged install is never kept, whatever version it reports."""
+    fake_env["kind"] = kind
+    run = FakeRun()
+    code, out = do_update(run, current=current)
+    assert code == 0
+    assert run.calls == [["uv", "tool", "install", "--force", "--no-sources",
+                          "git+https://github.com/owner/demo.git@v1.1.0"]]
+    assert "git pull" not in out and "manually" not in out
+
+
+@pytest.mark.parametrize("lang, note", [
+    ("en", "ℹ️  Installed as a uv tool; the copy at /src/demo is unchanged."),
+    ("zh-TW", "ℹ️  已安裝為 uv 工具；/src/demo 的原本那份沒有變更。"),
+])
+def test_update_dev_install_says_the_local_copy_is_left_alone(fake_env, lang, note):
+    """`--force` installs a separate tool copy; the checkout (or venv) the user ran stays as it was."""
     fake_env["kind"] = ("dev", "/src/demo")
+    _, out = do_update(FakeRun(), lang=lang)
+    assert out.splitlines()[-1] == note
+
+
+def test_update_uv_install_has_no_local_copy_note(fake_env):
+    _, out = do_update(FakeRun())
+    assert "unchanged" not in out
+
+
+def test_update_windows_dev_install_spawns_the_uv_install(fake_env, monkeypatch):
+    spawned = []
+    monkeypatch.setattr(uk, "_spawn_detached", lambda cmdline, log, env=None: spawned.append(cmdline))
+    monkeypatch.setattr(uk, "_IS_WINDOWS", True)
+    fake_env["kind"] = ("dev", "C:\\src\\demo")
+    code, out = do_update(FakeRun())
+    assert code == 0
+    assert "uv tool install --force --no-sources git+https://github.com/owner/demo.git@v1.1.0" in spawned[0]
+    assert out.splitlines()[-1] == "ℹ️  Installed as a uv tool; the copy at C:\\src\\demo is unchanged."
+
+
+def test_update_dev_install_falls_back_to_pipx(fake_env):
+    fake_env["kind"] = ("dev", "/src/demo")
+    fake_env["on_path"] = {"pipx"}
     run = FakeRun()
-    code, out = do_update(run)
-    assert code == 2
-    assert "/src/demo" in out and "git pull" in out
-    assert fake_env["tag_calls"] == [] and run.calls == []
+    assert do_update(run)[0] == 0
+    assert run.calls == [["pipx", "install", "--force", "git+https://github.com/owner/demo.git@v1.1.0"]]
 
 
-def test_update_unknown_kind_prints_manual_command(fake_env):
+def test_update_unknown_kind_without_an_installer_prints_manual_command(fake_env):
     fake_env["kind"] = ("unknown", None)
+    fake_env["on_path"] = set()
     run = FakeRun()
     code, out = do_update(run)
     assert code == 2
@@ -291,17 +362,29 @@ def test_update_unknown_kind_prints_manual_command(fake_env):
     assert run.calls == []
 
 
+def test_update_announces_the_command_and_celebrates(fake_env):
+    code, out = do_update(FakeRun())
+    assert code == 0
+    assert out.splitlines() == [
+        (
+            "⬆️  Updating demo 1.0.0 → v1.1.0 via `uv tool install --force --no-sources "
+            "git+https://github.com/owner/demo.git@v1.1.0` ..."
+        ),
+        "🎉 demo updated to v1.1.0!",
+    ]
+
+
 def test_update_current_defaults_to_installed_version(fake_env, monkeypatch):
     monkeypatch.setattr(uk.metadata, "version", lambda dist: "1.1.0")
     code, out = do_update(FakeRun(), current=None)
-    assert code == 0 and "already up to date" in out
+    assert code == 0 and "1.1.0 is already the latest version" in out
 
 
 def test_update_zh_tw_messages(fake_env):
     fake_env["latest"] = "v1.0.0"
     code, out = do_update(FakeRun(), lang="zh_TW")
     assert code == 0
-    assert "已是最新版本" in out
+    assert out.strip() == "✅ demo 1.0.0 已是最新版本（v1.0.0）。"
 
 
 def test_update_windows_spawns_detached_chain(fake_env, monkeypatch):
@@ -453,7 +536,8 @@ def test_should_hint():
 
 
 def test_public_api():
-    assert uk.__version__ == "0.1.0"
+    # A strict X.Y.Z, not a pinned value: the release script bumps __version__ before CI runs this.
+    assert uk._parse(uk.__version__) is not None and not uk.__version__.startswith("v")
     for name in ("UpdateError", "latest_tag", "install_kind", "update", "check", "hint",
                  "should_hint", "normalize_lang"):
         assert callable(getattr(uk, name))
@@ -468,7 +552,7 @@ def test_parse_rejects_non_ascii_digits():
 
 def test_update_windows_refuses_cmd_metacharacters(fake_env, monkeypatch):
     spawned = []
-    monkeypatch.setattr(uk, "_spawn_detached", lambda cmdline, log: spawned.append(cmdline))
+    monkeypatch.setattr(uk, "_spawn_detached", lambda cmdline, log, env=None: spawned.append(cmdline))
     monkeypatch.setattr(uk, "_IS_WINDOWS", True)
     code, out = do_update(FakeRun(), url="https://example.invalid/r.git?a=1&calc")
     assert code == 1 and spawned == []
@@ -477,6 +561,7 @@ def test_update_windows_refuses_cmd_metacharacters(fake_env, monkeypatch):
 
 def test_update_manual_command_is_shell_quoted_on_posix(fake_env):
     fake_env["kind"] = ("unknown", None)
+    fake_env["on_path"] = set()
     _, out = do_update(FakeRun(), url="https://example.invalid/r.git?a=1&b=2")
     assert "'git+https://example.invalid/r.git?a=1&b=2@v1.1.0'" in out
 

update_kit-0.1.0/.github/workflows/ci.yml

@@ -1,62 +0,0 @@
-name: CI
-
-on:
-  push:
-  pull_request:
-
-permissions:
-  contents: read
-
-concurrency:
-  group: ci-${{ github.workflow }}-${{ github.ref }}
-  cancel-in-progress: true
-
-env:
-  PYTHONUTF8: "1"
-
-jobs:
-  test:
-    name: Python 3.10 / ${{ matrix.os }}
-    timeout-minutes: 15
-    strategy:
-      fail-fast: false
-      matrix:
-        os: [macos-latest, ubuntu-latest, windows-latest]
-    runs-on: ${{ matrix.os }}
-    steps:
-      - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
-        with:
-          persist-credentials: false
-      - uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7
-        with:
-          python-version: "3.10"
-          enable-cache: true
-          cache-dependency-glob: uv.lock
-      - name: Install locked dependencies
-        run: uv sync --locked --all-groups
-      - name: Lint
-        run: uv run ruff check .
-      - name: Test
-        run: uv run pytest -v
-      - name: Build distributions
-        run: uv build
-      - name: Validate wheel is importable standalone
-        shell: python
-        run: |
-          import os
-          import pathlib
-          import subprocess
-          import tempfile
-
-          wheel, = pathlib.Path("dist").glob("*.whl")
-          with tempfile.TemporaryDirectory() as directory:
-              environment = pathlib.Path(directory)
-              subprocess.run(["uv", "venv", environment], check=True)
-              scripts = environment / ("Scripts" if os.name == "nt" else "bin")
-              python = scripts / ("python.exe" if os.name == "nt" else "python")
-              subprocess.run(
-                  ["uv", "pip", "install", "--python", python, "--no-index", wheel],
-                  check=True,
-              )
-              subprocess.run([python, "-I", "-c", "import update_kit"], check=True)
-              print("update_kit imports standalone OK")