volcano-sdk-python 0.13.4__tar.gz → 0.14.0__tar.gz

volcano_sdk_python-0.14.0/.github/dependabot.yml

@@ -0,0 +1,96 @@
+version: 2
+updates:
+  # pyproject.toml and uv.lock. Dependabot runs its own uv, so pyproject's
+  # `[tool.uv] required-version` sets only a minimum; an exact pin stops these
+  # updates.
+  # maintainers/releasing.md covers updates that need a change before merging.
+  - package-ecosystem: "uv"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    open-pull-requests-limit: 5
+    cooldown:
+      default-days: 5
+      semver-major-days: 14
+    # Keep a range that already allows the new version, so in-range runtime
+    # bumps change only uv.lock and published lower bounds stay put.
+    versioning-strategy: "increase-if-necessary"
+    labels: []
+    # `[project] dependencies` and the `durable` extra use `fix` so Release
+    # Please cuts a release. Dependency groups and the build backend count as
+    # development and use `chore`, which does not.
+    commit-message:
+      prefix: "fix"
+      prefix-development: "chore"
+      include: "scope"
+    # Groups list their exclusions explicitly so no dependency belongs to two.
+    groups:
+      # openapi-python-client generates src/volcano_sdk/_generated. If a bump
+      # changes that output, CI's `poe generated` fails until the client is
+      # regenerated with `uv run python scripts/generate_openapi.py`.
+      openapi-codegen:
+        patterns:
+          - "openapi-python-client"
+        update-types:
+          - "minor"
+          - "patch"
+      # centrifuge-python and httpx get their own pull requests: every
+      # centrifuge-python update needs the checks in
+      # maintainers/realtime-compatibility.md, and httpx is capped below its
+      # next 0.x release on purpose.
+      uv-production:
+        dependency-type: "production"
+        exclude-patterns:
+          - "centrifuge-python"
+          - "httpx"
+        update-types:
+          - "minor"
+          - "patch"
+      # hatchling and ruff get their own pull requests because each needs a
+      # pin that Dependabot does not update: hatchling's build-constraint
+      # hashes and ruff's `required-version`.
+      uv-development:
+        dependency-type: "development"
+        exclude-patterns:
+          - "openapi-python-client"
+          - "hatchling"
+          - "ruff"
+        update-types:
+          - "minor"
+          - "patch"
+      # Majors share one PR, except the packages above that get their own.
+      uv-major:
+        patterns:
+          - "*"
+        exclude-patterns:
+          - "centrifuge-python"
+          - "httpx"
+          - "hatchling"
+          - "ruff"
+        update-types:
+          - "major"
+
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    open-pull-requests-limit: 5
+    # GitHub Actions supports only `default-days`.
+    cooldown:
+      default-days: 5
+    labels: []
+    commit-message:
+      prefix: "chore"
+      include: "scope"
+    groups:
+      github-actions:
+        patterns:
+          - "*"
+        update-types:
+          - "minor"
+          - "patch"
+      github-actions-major:
+        patterns:
+          - "*"
+        update-types:
+          - "major"

volcano_sdk_python-0.14.0/.github/workflows/ci.yml

@@ -0,0 +1,146 @@
+name: CI
+
+on:
+  workflow_call:
+  pull_request:
+  merge_group:
+    branches:
+      - main
+  push:
+    branches:
+      - main
+
+permissions: {}
+
+defaults:
+  run:
+    shell: bash
+
+jobs:
+  test:
+    name: test (${{ matrix.python-version }})
+    env:
+      UV_PYTHON: ${{ matrix.python-patch }}
+    runs-on: ubuntu-latest
+    timeout-minutes: 20
+    permissions:
+      contents: read
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - python-version: "3.11"
+            python-patch: "3.11.16"
+          - python-version: "3.12"
+            python-patch: "3.12.14"
+          - python-version: "3.13"
+            python-patch: "3.13.15"
+          - python-version: "3.14"
+            python-patch: "3.14.7"
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+      - run: bash .github/scripts/actionlint.sh
+      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
+        with:
+          python-version: ${{ matrix.python-patch }}
+      - uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
+        with:
+          version: "0.12.17"
+      - run: uv sync --locked
+      - name: Run SDK quality checks
+        run: uv run --locked poe checks
+      - name: Preserve runtime coverage
+        if: ${{ always() }}
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        with:
+          name: coverage-for-python-${{ matrix.python-version }}
+          path: reports/coverage.json
+          if-no-files-found: error
+      - name: Preserve test failures and property seeds
+        if: ${{ failure() }}
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        with:
+          name: property-failures-python-${{ matrix.python-version }}
+          path: |
+            reports/unit.xml
+            reports/coverage-unit.xml
+            reports/hypothesis/seed.txt
+          if-no-files-found: ignore
+
+  mutation-plan:
+    name: Mutation inventory
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    permissions:
+      contents: read
+    outputs:
+      modules: ${{ steps.plan.outputs.modules }}
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+      - name: Inventory every handwritten runtime module
+        id: plan
+        run: |
+          modules=$(bash scripts/mutation.sh --matrix)
+          echo "modules=$modules" >> "$GITHUB_OUTPUT"
+
+  mutation-module:
+    name: Mutation module (${{ matrix.module }})
+    needs: mutation-plan
+    runs-on: ubuntu-latest
+    timeout-minutes: 40
+    permissions:
+      contents: read
+    strategy:
+      fail-fast: false
+      matrix:
+        module: ${{ fromJSON(needs.mutation-plan.outputs.modules) }}
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
+        with:
+          python-version: "3.12.14"
+      - uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
+        with:
+          version: "0.12.17"
+      - run: uv sync --locked
+      - name: Mutate assigned runtime modules
+        env:
+          MUTATION_MODULE: ${{ matrix.module }}
+        run: uv run --locked poe mutation
+      - name: Preserve mutation outcomes
+        if: ${{ always() }}
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        with:
+          name: mutation-outcomes-${{ matrix.module }}
+          path: reports/mutation.json
+          if-no-files-found: error
+
+  mutation:
+    name: Mutation Gate
+    if: ${{ always() }}
+    needs: [mutation-plan, mutation-module]
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    steps:
+      - name: Require every mutation module to succeed
+        env:
+          RESULTS: ${{ toJSON(needs.*.result) }}
+        run: jq -e 'length == 2 and all(. == "success")' <<< "$RESULTS"
+
+  quality:
+    name: Quality Gate
+    if: ${{ always() }}
+    needs: [test, mutation]
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    steps:
+      - name: Require every mandatory job to succeed
+        env:
+          RESULTS: ${{ toJSON(needs.*.result) }}
+        run: jq -e 'length == 2 and all(. == "success")' <<< "$RESULTS"

volcano_sdk_python-0.14.0/.github/workflows/mutation-audit.yml

@@ -0,0 +1,35 @@
+name: Full Mutation Audit
+
+on:
+  schedule:
+    - cron: "0 8 * * 1"
+  workflow_dispatch:
+
+permissions: {}
+
+jobs:
+  mutation:
+    name: Full Mutation Audit
+    runs-on: ubuntu-latest
+    timeout-minutes: 180
+    permissions:
+      contents: read
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
+        with:
+          python-version: "3.12.14"
+      - uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
+        with:
+          version: "0.12.17"
+      - run: uv sync --locked
+      - run: uv run --locked poe mutation
+      - name: Preserve mutation outcomes
+        if: ${{ always() }}
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        with:
+          name: full-mutation-outcomes
+          path: reports/mutation.json
+          if-no-files-found: error

volcano_sdk_python-0.14.0/.github/workflows/publish.yml

@@ -0,0 +1,107 @@
+name: Publish SDK
+
+on:
+  release:
+    types: [published]
+
+permissions:
+  contents: read
+
+concurrency:
+  group: publish-sdk
+  cancel-in-progress: false
+  # Retain pending runs for versions that already have a GitHub release.
+  queue: max
+
+defaults:
+  run:
+    shell: bash
+
+jobs:
+  validate:
+    if: github.event.release.prerelease == false
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          fetch-depth: 0
+          persist-credentials: false
+      - name: Validate release tag and ancestry
+        env:
+          RELEASE_TAG: ${{ github.event.release.tag_name }}
+        run: |
+          git merge-base --is-ancestor HEAD origin/main
+          [[ "$RELEASE_TAG" =~ ^v(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)$ ]]
+          test "$(git rev-parse HEAD)" = "$(git rev-parse "refs/tags/$RELEASE_TAG^{commit}")"
+          test "$RELEASE_TAG" = "v$(jq -er '.["."]' .release-please-manifest.json)"
+
+  check:
+    needs: validate
+    uses: ./.github/workflows/ci.yml
+
+  build:
+    needs: [validate, check]
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    env:
+      # Only the hash-checked build task may build the project in this job.
+      UV_NO_SYNC: 'true'
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        with:
+          persist-credentials: false
+      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
+        with:
+          python-version: '3.14'
+      - uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
+        with:
+          version: "0.12.17"
+      - run: uv sync --locked --no-install-project --no-build
+      - run: uv run --no-sync poe build
+      - name: Check package identity and release version
+        env:
+          RELEASE_TAG: ${{ github.event.release.tag_name }}
+        run: bash scripts/check_package.sh "${RELEASE_TAG#v}"
+      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        with:
+          name: release-package
+          path: dist/*
+          if-no-files-found: error
+
+  publish:
+    needs: build
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    environment:
+      name: pypi
+      url: https://pypi.org/project/volcano-sdk-python/
+    permissions:
+      id-token: write
+    steps:
+      # Publishing receives checked artifacts without executing SDK source.
+      - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        with:
+          name: release-package
+          path: dist
+      - name: Publish distributions to PyPI
+        uses: pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # v1.14.2
+
+  release-link:
+    needs: publish
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    permissions:
+      contents: write
+    steps:
+      - name: Link the published PyPI version in the release notes
+        env:
+          GH_TOKEN: ${{ github.token }}
+          GH_REPO: ${{ github.repository }}
+          RELEASE_TAG: ${{ github.event.release.tag_name }}
+        run: |
+          notes="$(gh release view "$RELEASE_TAG" --json body --jq '.body')"
+          link="[View ${RELEASE_TAG} on PyPI](https://pypi.org/project/volcano-sdk-python/${RELEASE_TAG#v}/)"
+          if [[ "$notes" != *"$link"* ]]; then
+            printf '%s\n\n%s\n' "$notes" "$link" | gh release edit "$RELEASE_TAG" --notes-file -
+          fi

volcano_sdk_python-0.14.0/.github/workflows/release-please.yml

@@ -0,0 +1,32 @@
+name: Release Please
+
+on:
+  push:
+    branches: [main]
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+concurrency:
+  group: release-please
+  cancel-in-progress: false
+
+jobs:
+  release:
+    if: github.ref == 'refs/heads/main'
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    steps:
+      # App-created PRs and releases trigger CI and package checks; GITHUB_TOKEN does not.
+      - uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
+        id: app
+        with:
+          app-id: ${{ vars.VOLCANO_APP_ID }}
+          private-key: ${{ secrets.VOLCANO_APP_KEY }}
+          permission-contents: write
+          permission-pull-requests: write
+          permission-issues: write
+      - uses: googleapis/release-please-action@45996ed1f6d02564a971a2fa1b5860e934307cf7 # v5.0.0
+        with:
+          token: ${{ steps.app.outputs.token }}

volcano_sdk_python-0.14.0/.python-version

@@ -0,0 +1 @@
+3.12.14

volcano_sdk_python-0.14.0/.release-please-manifest.json

@@ -0,0 +1,3 @@
+{
+  ".": "0.14.0"
+}

volcano_sdk_python-0.14.0/AGENTS.md

@@ -0,0 +1,14 @@
+# SDK quality
+
+- Research upstream tools before adding enforcement. Keep rules in native tool
+  configuration and orchestration in standard tasks. Add custom checks only
+  for requirements established tools cannot express; document that gap.
+- Fix failures rather than weakening policy. Judge pragmatic exceptions against
+  compatibility constraints and verified tool limits; do not use them to postpone
+  cleanup. Never impersonate a human reviewer or submit review approval on their
+  behalf.
+- Keep reviewer and repository-administration credentials outside ordinary
+  automation.
+- Keep native unit, type, build, and package checks here. Hosting owns behavioral
+  acceptance scenarios and bindings; coordinate changes with `Kong/volcano-hosting`.
+- Keep maintainer guidance under `maintainers/`; `docs/` is published.