volcano-sdk-python 0.11.3__tar.gz → 0.13.0__tar.gz

{volcano_sdk_python-0.11.3 → volcano_sdk_python-0.13.0}/.github/workflows/ci.yml

@@ -39,7 +39,7 @@ jobs:
           version: "0.12.17"
       - run: uv sync --locked
       - name: Run SDK quality checks
-        run: uv run --locked poe quality
+        run: uv run --locked poe checks
       - name: Preserve runtime coverage
         if: ${{ always() }}
         uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
@@ -58,14 +58,44 @@ jobs:
             reports/hypothesis/seed.txt
           if-no-files-found: ignore
 
+  mutation:
+    name: Mutation Gate
+    runs-on: ubuntu-latest
+    timeout-minutes: 40
+    permissions:
+      contents: read
+    steps:
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        with:
+          fetch-depth: 0
+          persist-credentials: false
+      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
+        with:
+          python-version: "3.12"
+      - uses: astral-sh/setup-uv@d0cc045d04ccac9d8b7881df0226f9e82c39688e # v6
+        with:
+          version: "0.12.17"
+      - run: uv sync --locked
+      - name: Mutate changed and critical runtime modules
+        env:
+          MUTATION_BASE_SHA: ${{ github.event.pull_request.base.sha || github.event.merge_group.base_sha || github.event.before }}
+        run: uv run --locked poe mutation
+      - name: Preserve mutation outcomes
+        if: ${{ always() }}
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        with:
+          name: mutation-outcomes
+          path: reports/mutation.json
+          if-no-files-found: error
+
   quality:
     name: Quality Gate
     if: ${{ always() }}
-    needs: [test]
+    needs: [test, mutation]
     runs-on: ubuntu-latest
     timeout-minutes: 5
     steps:
       - name: Require every mandatory job to succeed
         env:
           RESULTS: ${{ toJSON(needs.*.result) }}
-        run: jq -e 'length == 1 and all(. == "success")' <<< "$RESULTS"
+        run: jq -e 'length == 2 and all(. == "success")' <<< "$RESULTS"

volcano_sdk_python-0.13.0/.github/workflows/mutation-audit.yml

@@ -0,0 +1,35 @@
+name: Full Mutation Audit
+
+on:
+  schedule:
+    - cron: "0 8 * * 1"
+  workflow_dispatch:
+
+permissions: {}
+
+jobs:
+  mutation:
+    name: Full Mutation Audit
+    runs-on: ubuntu-latest
+    timeout-minutes: 180
+    permissions:
+      contents: read
+    steps:
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        with:
+          persist-credentials: false
+      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
+        with:
+          python-version: "3.12"
+      - uses: astral-sh/setup-uv@d0cc045d04ccac9d8b7881df0226f9e82c39688e # v6
+        with:
+          version: "0.12.17"
+      - run: uv sync --locked
+      - run: uv run --locked poe mutation-full
+      - name: Preserve mutation outcomes
+        if: ${{ always() }}
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        with:
+          name: full-mutation-outcomes
+          path: reports/mutation.json
+          if-no-files-found: error

{volcano_sdk_python-0.11.3 → volcano_sdk_python-0.13.0}/.gitignore

@@ -4,6 +4,7 @@ __pycache__/
 .mypy_cache/
 .pytest_cache/
 .ruff_cache/
+.tox/
 .venv/
 build/
 dist/

volcano_sdk_python-0.13.0/.release-please-manifest.json

@@ -0,0 +1,3 @@
+{
+  ".": "0.13.0"
+}

{volcano_sdk_python-0.11.3 → volcano_sdk_python-0.13.0}/CHANGELOG.md

@@ -1,5 +1,19 @@
 # Changelog
 
+## [0.13.0](https://github.com/Kong/volcano-sdk-python/compare/v0.12.0...v0.13.0) (2026-09-23)
+
+
+### Features
+
+* **quality:** type-check Python auth state tests without Any ([#345](https://github.com/Kong/volcano-sdk-python/issues/345)) ([acd2352](https://github.com/Kong/volcano-sdk-python/commit/acd235251b00c871297eff7ba1ab94e1ea9ee02c))
+
+## [0.12.0](https://github.com/Kong/volcano-sdk-python/compare/v0.11.3...v0.12.0) (2026-09-23)
+
+
+### Features
+
+* **quality:** lock native Python guardrails and source inventory ([#343](https://github.com/Kong/volcano-sdk-python/issues/343)) ([fad6ebf](https://github.com/Kong/volcano-sdk-python/commit/fad6ebf59dab9d87ae35fa8c43f64e2f30aa7289))
+
 ## [0.11.3](https://github.com/Kong/volcano-sdk-python/compare/v0.11.2...v0.11.3) (2026-09-23)
 
 

{volcano_sdk_python-0.11.3 → volcano_sdk_python-0.13.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: volcano-sdk-python
-Version: 0.11.3
+Version: 0.13.0
 Summary: Official Python SDK for Volcano
 Project-URL: Homepage, https://volcano.dev
 Project-URL: Repository, https://github.com/Kong/volcano-sdk-python

volcano_sdk_python-0.13.0/maintainers/mutation-testing.md

@@ -0,0 +1,28 @@
+# Mutation testing
+
+`uv run --locked poe quality` runs all native checks and mutates every changed
+handwritten runtime module plus the lock acquisition, guard, renewal, and worker
+modules. CI uses the same `checks` and `mutation` tasks in separate jobs, then
+requires both through `Quality Gate`. The weekly `poe mutation-full` task audits
+every handwritten runtime module without a debt baseline.
+
+Mutmut's [native configuration](https://mutmut.readthedocs.io/en/latest/) lives
+in `pyproject.toml`; it excludes only the generated OpenAPI client. Mutmut can
+select modules by name but has no Git-changed-module option and returns success
+when mutants survive. `scripts/mutation.sh` selects module names from Git and
+`scripts/mutation_results.py` reads only those modules' native metadata. The
+report at `reports/mutation.json` distinguishes survivors, uncovered mutants,
+timeouts, crashes, interrupted runs, and missing results. A pytest internal
+error is a harness crash, not a killed mutant. All non-killed outcomes fail.
+
+The full audit runs mutmut once across the entire source tree. It reports any
+surviving mutants without treating them as an approved baseline. Equivalent
+mutants require a reviewed, exact exception before a gate can accept them.
+
+Ruff, Mypy, Basedpyright, pytest, and Tox tasks pass `pyproject.toml`
+explicitly. Their documented config-file precedence can otherwise select a
+new local config before the checked-in policy:
+[Ruff](https://docs.astral.sh/ruff/configuration/),
+[Mypy](https://mypy.readthedocs.io/en/stable/command_line.html),
+[pytest](https://docs.pytest.org/en/stable/reference/customize.html),
+[Tox](https://tox.wiki/en/latest/man/tox.1.html).