yaga-cli 0.2.0__tar.gz → 0.2.1__tar.gz

{yaga_cli-0.2.0 → yaga_cli-0.2.1}/.github/workflows/ci.yml

@@ -25,10 +25,10 @@ jobs:
           ref: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.sha }}
           fetch-depth: 0
           persist-credentials: false
-      - uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4 # v10.1.0
+      - uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
         with:
           enable-cache: true
-          version: "0.12.7"
+          version: "0.13.0"
       - name: Cache Typos registry
         uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
@@ -137,23 +137,25 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        python-version: ["3.12", "3.13", "3.14"]
+        python-version: ["3.12", "3.13", "3.14", "3.15"]
         os: [ubuntu-latest]
         include:
           - python-version: "3.12"
             os: windows-latest
+          - python-version: "3.15"
+            os: windows-latest
     runs-on: ${{ matrix.os }}
     timeout-minutes: 10
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
-      - uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4 # v10.1.0
+      - uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
         with:
           enable-cache: true
-          version: "0.12.7"
-      - run: uv sync --frozen --group dev --python ${{ matrix.python-version }}
-      - run: uv run --frozen --python ${{ matrix.python-version }} pytest
+          version: "0.13.0"
+      - run: uv sync --frozen --group dev --no-editable --python ${{ matrix.python-version }}
+      - run: uv run --frozen --no-editable --python ${{ matrix.python-version }} pytest
 
   gate:
     name: CI Prerequisites

{yaga_cli-0.2.0 → yaga_cli-0.2.1}/.github/workflows/commit-quality.yml

@@ -33,7 +33,7 @@ jobs:
           ref: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.sha }}
           fetch-depth: 0
           persist-credentials: false
-      - uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4 # v10.1.0
+      - uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
         with:
           enable-cache: true
           version: "0.12.7"

{yaga_cli-0.2.0 → yaga_cli-0.2.1}/.github/workflows/docs.yml

@@ -30,7 +30,7 @@ jobs:
         with:
           persist-credentials: false
       - uses: actions/configure-pages@45bfe0192ca1faeb007ade9deae92b16b8254a0d # v6
-      - uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4 # v10.1.0
+      - uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
         with:
           version: "0.12.7"
       - run: uv sync --frozen --group dev --python 3.12

{yaga_cli-0.2.0 → yaga_cli-0.2.1}/.github/workflows/release.yml

@@ -32,7 +32,7 @@ jobs:
         run: |
           test "$(git rev-parse HEAD)" = "$EVENT_SHA"
           git merge-base --is-ancestor HEAD "refs/remotes/origin/$DEFAULT_BRANCH"
-      - uses: astral-sh/setup-uv@bec219d24cd3e171d82865faccec33120bb574f4 # v10.1.0
+      - uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
         with:
           version: "0.12.7"
           enable-cache: false
@@ -107,5 +107,5 @@ jobs:
           RELEASE_TAG: ${{ github.ref_name }}
         run: >-
           gh release create "$RELEASE_TAG" dist/*.whl dist/*.tar.gz
-          --verify-tag --title "YAGA ${RELEASE_TAG#v} (Beta)"
+          --verify-tag --title "YAGA ${RELEASE_TAG#v}"
           --notes-file release-notes/release-notes.md

{yaga_cli-0.2.0 → yaga_cli-0.2.1}/CHANGELOG.md

@@ -3,5 +3,5 @@
 The complete release history is maintained in [docs/changelog.md](docs/changelog.md) and
 published in the [YAGA documentation](https://dariuszpanas.github.io/yaga/changelog.html).
 
-Edit that single source when recording user-visible changes. YAGA is pre-release; all current
-entries are under Unreleased until an explicitly authorized version is published.
+Edit that single source when recording user-visible changes. Keep new changes under Unreleased
+until they are assigned to a dated release candidate; publication requires explicit authorization.

{yaga_cli-0.2.0 → yaga_cli-0.2.1}/CONTRIBUTING.md

@@ -9,11 +9,13 @@ gate is `agent-review`.
 
 Python 3.12 or newer and [uv](https://docs.astral.sh/uv/) 0.12.7 or newer are required
 for the development workflow. CI pins uv separately for reproducibility; contributors may use
-newer uv releases:
+newer uv releases. Use uv 0.13.0 or newer to download Python 3.15. CI tests Python 3.12
+through 3.15 on Linux and Python 3.12 and 3.15 on Windows against a non-editable package
+installation:
 
 ```bash
-uv sync --group dev
-uv run make ci
+uv sync --group dev --python 3.12
+uv run --python 3.12 make ci
 ```
 
 The full gate also needs Git, GNU Make, Bash, a running Docker engine using Linux containers,
@@ -37,6 +39,9 @@ runtime closure from `uv.lock`, require its hashes without building dependencies
 with dependency resolution disabled, run `uv pip check`, and execute the installed `yaga` entrypoint
 with project and Python environment leakage removed.
 
+That strict build gate runs on Python 3.12. The Python 3.15 test jobs permit PyYAML's source-build
+fallback because the locked PyYAML release does not publish Python 3.15 wheels.
+
 ## CLI and commit policy contract
 
 The public installed command groups are `branch`, `change`, `commit`, `config`, `github`, `mode`,

{yaga_cli-0.2.0 → yaga_cli-0.2.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: yaga-cli
-Version: 0.2.0
+Version: 0.2.1
 Summary: Configurable developer workflow checks for local use and GitHub Actions
 Project-URL: Documentation, https://dariuszpanas.github.io/yaga/
 Project-URL: Changelog, https://dariuszpanas.github.io/yaga/changelog.html
@@ -18,12 +18,13 @@ Classifier: Programming Language :: Python :: 3
 Classifier: Programming Language :: Python :: 3.12
 Classifier: Programming Language :: Python :: 3.13
 Classifier: Programming Language :: Python :: 3.14
+Classifier: Programming Language :: Python :: 3.15
 Classifier: Topic :: Software Development :: Quality Assurance
 Requires-Python: >=3.12
 Requires-Dist: pyyaml<7,>=6.0.3
 Requires-Dist: typer<1,>=0.27.2
 Provides-Extra: quality
-Requires-Dist: torch<3,>=2.6; extra == 'quality'
+Requires-Dist: torch<3,>=2.13; extra == 'quality'
 Requires-Dist: transformers<6,>=5.10; extra == 'quality'
 Provides-Extra: quality-bedrock
 Requires-Dist: boto3<2,>=1.37; extra == 'quality-bedrock'
@@ -58,6 +59,8 @@ YAGA does not require adopting the entire CLI at once.
 
 YAGA requires Python 3.12 or newer. Its PyPI distribution is **`yaga-cli`** and its command is
 **`yaga`**; the distribution named `yaga` is an unrelated project.
+The core CLI is tested on Python 3.12 through 3.15. Optional model dependencies have their own
+[installation requirements](https://dariuszpanas.github.io/yaga/commit-quality.html).
 
 - [Adoption recipes](https://dariuszpanas.github.io/yaga/recipes.html) — add checks to an existing workflow.
 - [Assess YAGA for CI](https://dariuszpanas.github.io/yaga/ci-adoption.html) — match your problem to a check and its prerequisites.

{yaga_cli-0.2.0 → yaga_cli-0.2.1}/README.md

@@ -27,6 +27,8 @@ YAGA does not require adopting the entire CLI at once.
 
 YAGA requires Python 3.12 or newer. Its PyPI distribution is **`yaga-cli`** and its command is
 **`yaga`**; the distribution named `yaga` is an unrelated project.
+The core CLI is tested on Python 3.12 through 3.15. Optional model dependencies have their own
+[installation requirements](https://dariuszpanas.github.io/yaga/commit-quality.html).
 
 - [Adoption recipes](https://dariuszpanas.github.io/yaga/recipes.html) — add checks to an existing workflow.
 - [Assess YAGA for CI](https://dariuszpanas.github.io/yaga/ci-adoption.html) — match your problem to a check and its prerequisites.

{yaga_cli-0.2.0 → yaga_cli-0.2.1}/docs/changelog.md

@@ -2,6 +2,28 @@
 
 ## [Unreleased]
 
+## [0.2.1] - 2026-10-10
+
+### Added
+
+- Declare Python 3.15 support and add blocking Linux and Windows test jobs. Run the
+  Python compatibility matrix against a non-editable package installation.
+
+### Fixed
+
+- Update locked urllib3 to 2.8.0 for upstream proxy TLS and streaming denial-of-service fixes
+  in the optional Bedrock dependency chain.
+- Update locked virtualenv to 21.7.13 for upstream activation-script, configuration, and
+  seed-wheel verification security fixes in development tooling.
+- Align the Hatchling 1.32.4 build and development pins with the lockfile and tooling contract.
+- Raise the optional quality extra's PyTorch minimum to 2.13 to exclude older releases with
+  known security advisories; the locked PyTorch version remains 2.14.0.
+- Repair the pipx installation link in the getting-started guide.
+
+### Changed
+
+- Refresh CI tooling with setup-uv 10.2.0 and uv 0.13.0, including stable Python 3.15 downloads.
+
 ## [0.2.0] - 2026-09-20
 
 ### Added

{yaga_cli-0.2.0 → yaga_cli-0.2.1}/docs/commit-quality.md

@@ -4,6 +4,12 @@
 but may not explain a change clearly in a Git log. It is separate from `commit check`: deterministic
 policy remains the merge gate, while the model provides a bounded advisory signal.
 
+The optional `quality` extra depends on PyTorch wheels for the selected Python version and
+platform. The locked PyTorch 2.14.0 package from PyPI has no Python 3.15 wheels; use Python 3.12
+through 3.14 for this extra. The repository's Linux CPU index has Python 3.15 wheels, but that
+index selection is not part of the published wheel metadata. The core CLI and the separate
+`quality-bedrock` extra do not require PyTorch.
+
 ## When to use it
 
 Run both checks when exact policy enforcement and broader writing feedback are useful:

{yaga_cli-0.2.0 → yaga_cli-0.2.1}/docs/getting-started.md

@@ -1,8 +1,12 @@
 # Get started
 
-This guide covers **YAGA 0.2.0 (Beta)**. YAGA requires Python 3.12 or newer. Install the **`yaga-cli`** distribution from PyPI;
+This guide covers **YAGA 0.2.1 (Beta)**. YAGA requires Python 3.12 or newer. Install the **`yaga-cli`** distribution from PyPI;
 the executable and import package are **`yaga`**. The `yaga` distribution is an unrelated project.
 
+The core CLI is tested on Python 3.12 through 3.15. Python 3.15 installations currently use
+PyYAML's source-build fallback because PyYAML 6.0.3 does not publish Python 3.15 wheels.
+For optional model dependencies, see [commit quality installation](commit-quality.md).
+
 ## Install as a global tool
 
 A tool installer makes `yaga` available from any repository without adding it to each project's
@@ -87,7 +91,7 @@ is selected. `uv tool list` lists installed tools.
 
 ### pipx
 
-With [pipx](https://pipx.pypa.io/stable/installation/) and Python 3.12 or newer installed:
+With [pipx](https://pipx.pypa.io/stable/how-to/install-pipx.html) and Python 3.12 or newer installed:
 
 ```bash
 pipx install yaga-cli

{yaga_cli-0.2.0 → yaga_cli-0.2.1}/docs/releasing.md

@@ -46,7 +46,8 @@ package users. Twine's metadata check does not prove remote images or links are
    references. Tests require the Action runtime version to match package metadata. Convert the candidate changelog
    heading into `## [0.1.0] - YYYY-MM-DD`, using the actual release date, and retain `Unreleased`
    above it. The Beta classifier is a maturity label; version `0.1.0` is a normal PyPI version,
-   not the PEP 440 prerelease `0.1.0b1`.
+   not the PEP 440 prerelease `0.1.0b1`. Use `YAGA 0.1.0` as the GitHub Release title;
+   keep the maturity label in package metadata rather than appending `(Beta)` to the title.
 2. Merge the release changes and require all hosted CI lanes to pass for the exact commit,
    including Windows. Resolve dependency PR failures before choosing the candidate.
 3. After publication is explicitly authorized, create and push the matching `v0.1.0` tag at that

{yaga_cli-0.2.0 → yaga_cli-0.2.1}/pyproject.toml

@@ -1,10 +1,10 @@
 [build-system]
-requires = ["hatchling==1.32.0"]
+requires = ["hatchling==1.32.4"]
 build-backend = "hatchling.build"
 
 [project]
 name = "yaga-cli"
-version = "0.2.0"
+version = "0.2.1"
 description = "Configurable developer workflow checks for local use and GitHub Actions"
 readme = "README.md"
 license = "BSD-3-Clause"
@@ -29,6 +29,7 @@ classifiers = [
     "Programming Language :: Python :: 3.12",
     "Programming Language :: Python :: 3.13",
     "Programming Language :: Python :: 3.14",
+    "Programming Language :: Python :: 3.15",
     "Topic :: Software Development :: Quality Assurance",
 ]
 dependencies = [
@@ -38,7 +39,7 @@ dependencies = [
 
 [project.optional-dependencies]
 quality = [
-    "torch>=2.6,<3",
+    "torch>=2.13,<3",
     "transformers>=5.10,<6",
 ]
 quality-bedrock = [
@@ -67,7 +68,7 @@ yaga = "yaga.cli:main"
 
 [dependency-groups]
 dev = [
-    "hatchling==1.32.0",
+    "hatchling==1.32.4",
     "pre-commit>=4.6.2,<5",
     "pytest>=8.3",
     "readme-renderer[md]>=46.0",

yaga_cli-0.2.1/release-notes.md

@@ -0,0 +1,21 @@
+### Added
+
+- Declare Python 3.15 support and add blocking Linux and Windows test jobs. Run the
+  Python compatibility matrix against a non-editable package installation.
+
+### Fixed
+
+- Update locked urllib3 to 2.8.0 for upstream proxy TLS and streaming denial-of-service fixes
+  in the optional Bedrock dependency chain.
+- Update locked virtualenv to 21.7.13 for upstream activation-script, configuration, and
+  seed-wheel verification security fixes in development tooling.
+- Align the Hatchling 1.32.4 build and development pins with the lockfile and tooling contract.
+- Raise the optional quality extra's PyTorch minimum to 2.13 to exclude older releases with
+  known security advisories; the locked PyTorch version remains 2.14.0.
+- Repair the pipx installation link in the getting-started guide.
+
+### Changed
+
+- Refresh CI tooling with setup-uv 10.2.0 and uv 0.13.0, including stable Python 3.15 downloads.
+
+[PyPI](https://pypi.org/project/yaga-cli/0.2.1/)

{yaga_cli-0.2.0 → yaga_cli-0.2.1}/scripts/check_build.py

@@ -27,7 +27,7 @@ SMOKE_MESSAGE = "feat(build): execute the built wheel"
 EXPECTED_REQUIRES_DIST = ["pyyaml<7,>=6.0.3", "typer<1,>=0.27.2"]
 EXPECTED_OPTIONAL_REQUIRES_DIST = [
     "boto3<2,>=1.37; extra == 'quality-bedrock'",
-    "torch<3,>=2.6; extra == 'quality'",
+    "torch<3,>=2.13; extra == 'quality'",
     "transformers<6,>=5.10; extra == 'quality'",
 ]
 

{yaga_cli-0.2.0 → yaga_cli-0.2.1}/src/yaga/version_requirement.py

@@ -7,7 +7,7 @@ import re
 from yaga.errors import ConfigurationError
 
 # Keep this equal to project.version; the build contract tests enforce that boundary.
-VERSION = "0.2.0"
+VERSION = "0.2.1"
 _RELEASE = r"(0|[1-9][0-9]{0,8})\.(0|[1-9][0-9]{0,8})\.(0|[1-9][0-9]{0,8})"
 _CLAUSE = re.compile(r"(>=|<=|==|!=|>|<)\s*" + _RELEASE, re.ASCII)
 

{yaga_cli-0.2.0 → yaga_cli-0.2.1}/tests/test_cli.py

@@ -163,7 +163,7 @@ def test_version_is_available_from_the_installed_command() -> None:
     result = runner.invoke(app, ["--version"])
 
     assert result.exit_code == 0
-    assert result.stdout.strip() == "yaga 0.2.0"
+    assert result.stdout.strip() == "yaga 0.2.1"
 
 
 def test_github_pull_request_command_skips_multiline_dependabot_commit(

{yaga_cli-0.2.0 → yaga_cli-0.2.1}/tests/test_installation.py

@@ -68,7 +68,7 @@ def test_windows_worker_waits_and_reports_completion(tmp_path: Path) -> None:
     assert not worker.exists()
 
 
-@pytest.mark.parametrize("requirement", [">=0.1.0", "==0.2.0", ">0.0.9, <1.0.0", "!=2.0.0"])
+@pytest.mark.parametrize("requirement", [">=0.1.0", "==0.2.1", ">0.0.9, <1.0.0", "!=2.0.0"])
 def test_requirement_accepts_current_release(requirement: str) -> None:
     assert check_requirement(requirement) == requirement
 
@@ -82,7 +82,7 @@ def test_requirement_rejects_invalid_syntax(requirement: object) -> None:
         check_requirement(requirement)
 
 
-@pytest.mark.parametrize("requirement", [">0.2.0", "<0.1.0", ">=1.0.0", "!=0.2.0"])
+@pytest.mark.parametrize("requirement", [">0.2.1", "<0.1.0", ">=1.0.0", "!=0.2.1"])
 def test_requirement_rejects_incompatible_release(requirement: str) -> None:
     with pytest.raises(ConfigurationError, match="does not satisfy"):
         check_requirement(requirement)

{yaga_cli-0.2.0 → yaga_cli-0.2.1}/tests/test_tooling.py

@@ -32,8 +32,8 @@ def test_toolchain_supply_chain_inputs_are_exactly_pinned() -> None:
         "typer>=0.27.2,<1",
     ]
     build_requirements = project["build-system"]["requires"]
-    assert build_requirements == ["hatchling==1.32.0"]
-    assert "hatchling==1.32.0" in project["dependency-groups"]["dev"]
+    assert build_requirements == ["hatchling==1.32.4"]
+    assert "hatchling==1.32.4" in project["dependency-groups"]["dev"]
     assert "pre-commit>=4.6.2,<5" in project["dependency-groups"]["dev"]
     assert project["tool"]["uv"]["required-version"] == ">=0.12.7"
     commit_policy = project["tool"]["yaga"]["commit"]
@@ -160,7 +160,7 @@ def test_toolchain_supply_chain_inputs_are_exactly_pinned() -> None:
         assert actionlint_image in (ROOT / documentation).read_text(encoding="utf-8")
 
     ci = (ROOT / ".github" / "workflows" / "ci.yml").read_text(encoding="utf-8")
-    assert ci.count('version: "0.12.7"') == 2
+    assert ci.count('version: "0.13.0"') == 2
     assert "yaga --help" in ci
     assert "python -m yaga --help" in ci
     assert "yaga_message=\"$(printf '%s\\n\\n%s'" in ci
@@ -318,7 +318,7 @@ def test_wheel_metadata_must_advertise_the_locked_runtime() -> None:
         b"Requires-Dist: pyyaml<7,>=6.0.3\n"
         b"Requires-Dist: typer<1,>=0.27.2\n"
         b"Requires-Dist: boto3<2,>=1.37; extra == 'quality-bedrock'\n"
-        b"Requires-Dist: torch<3,>=2.6; extra == 'quality'\n"
+        b"Requires-Dist: torch<3,>=2.13; extra == 'quality'\n"
         b"Requires-Dist: transformers<6,>=5.10; extra == 'quality'\n"
         b"\n"
         b'<img src="https://dariuszpanas.github.io/yaga/assets/branding/'
@@ -331,6 +331,7 @@ def test_wheel_metadata_must_advertise_the_locked_runtime() -> None:
         valid.replace(b"Requires-Dist: typer<1,>=0.27.2\n", b""),
         valid.replace(b"pyyaml<7,>=6.0.3", b"pyyaml>=6.0.3"),
         valid.replace(b"typer<1,>=0.27.2", b"typer>=0.27.2"),
+        valid.replace(b"torch<3,>=2.13", b"torch<3,>=2.6"),
         valid.replace(
             b"Requires-Dist: typer<1,>=0.27.2",
             b"Requires-Dist: typer<1,>=0.27.2\nRequires-Dist: requests>=2",

{yaga_cli-0.2.0 → yaga_cli-0.2.1}/uv.lock

@@ -186,7 +186,7 @@ wheels = [
 
 [[package]]
 name = "hatchling"
-version = "1.32.0"
+version = "1.32.4"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "packaging" },
@@ -195,9 +195,9 @@ dependencies = [
     { name = "tomlkit" },
     { name = "trove-classifiers" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/69/08/33331757185504aae48b8d9bd78cec03a76e3aecfb52e549d05a2347c0dd/hatchling-1.32.0.tar.gz", hash = "sha256:0bdbde4a52b06c37e3eca395f85a762bf0ef06fe374fd8ae429dc6be10230f5f", size = 57783, upload-time = "2026-08-11T05:03:44.114Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/f6/97/b5312f01a8c6daf729a9d272dd442e0c546dbcc630495788786c4b567ed0/hatchling-1.32.4.tar.gz", hash = "sha256:c4468f73144c054d2aab4ef0f0378c43b9878bf07f8ffd6b79690e970d375f07", size = 58065, upload-time = "2026-09-20T22:48:45.398Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/a9/84/1798b6d85ecde0e31546004efd25c5de1b1f49250644a60cce460e12593a/hatchling-1.32.0-py3-none-any.whl", hash = "sha256:0e17c9c3b9aa7c625acc8d0f5b622f107d5049af9ecf5ada4de1aada5be7cdbc", size = 78435, upload-time = "2026-08-11T05:03:42.644Z" },
+    { url = "https://files.pythonhosted.org/packages/5f/80/91f51f439c05d4ec4623c22928ce16a938d6d793bf709477830823497859/hatchling-1.32.4-py3-none-any.whl", hash = "sha256:08ecf7548fb48205e7f213d70c71e67b8271b7242093dc3f1da578b42c734a2c", size = 78748, upload-time = "2026-09-20T22:48:44.19Z" },
 ]
 
 [[package]]
@@ -1178,16 +1178,16 @@ wheels = [
 
 [[package]]
 name = "urllib3"
-version = "2.7.0"
+version = "2.8.0"
 source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/53/0c/06f8b233b8fd13b9e5ee11424ef85419ba0d8ba0b3138bf360be2ff56953/urllib3-2.7.0.tar.gz", hash = "sha256:231e0ec3b63ceb14667c67be60f2f2c40a518cb38b03af60abc813da26505f4c", size = 433602, upload-time = "2026-05-07T16:13:18.596Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/e3/05/b17359e1cefb4f909b5e40b1b90a496d987258916dbbf88e842c729f510e/urllib3-2.8.0.tar.gz", hash = "sha256:63bf2ead4c879426ebf22ef2a781eeb4aa3b4ae798a0435506f8687fd5bb9b63", size = 458972, upload-time = "2026-09-15T19:29:36.253Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/7f/3e/5db95bcf282c52709639744ca2a8b149baccf648e39c8cc87553df9eae0c/urllib3-2.7.0-py3-none-any.whl", hash = "sha256:9fb4c81ebbb1ce9531cce37674bbc6f1360472bc18ca9a553ede278ef7276897", size = 131087, upload-time = "2026-05-07T16:13:17.151Z" },
+    { url = "https://files.pythonhosted.org/packages/92/9d/c4e665119135114480843e7ab388fa94d8480650450e6f8e26b70d323a4c/urllib3-2.8.0-py3-none-any.whl", hash = "sha256:0cf3cae568d36aa9576b28dfb35f11328f1cb974ca7647d9475ebb86c75ac6e3", size = 135717, upload-time = "2026-09-15T19:29:34.577Z" },
 ]
 
 [[package]]
 name = "virtualenv"
-version = "21.7.7"
+version = "21.7.13"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "distlib" },
@@ -1195,14 +1195,14 @@ dependencies = [
     { name = "platformdirs" },
     { name = "python-discovery" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/79/41/c3f34799487924f2a6f43b8a8b7acd345a6c61aac2211d4bced8621ca4f1/virtualenv-21.7.7.tar.gz", hash = "sha256:6874376f99ba6b8d4e3ee8bde67f9285412400c7d5b29ba41ee6daa5e0221bdc", size = 5347022, upload-time = "2026-08-28T18:59:50.093Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/13/50/c9b84eb106d0db420b9878dac0a386c5791726f127ce20b06897f6e3a1e9/virtualenv-21.7.13.tar.gz", hash = "sha256:0355558b6f33619aab31347e43643b0ebc97f61ea3acf617b2b69e1f8a843d11", size = 5360306, upload-time = "2026-09-18T04:35:49.354Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/95/f8/dcec8dc767b812193316c7debed1e2b53e586e59c267bfe517688ff90275/virtualenv-21.7.7-py3-none-any.whl", hash = "sha256:67a6a68fef3ad8ca16b8b89f33fd8f97996cc0bf0db31629d07ecf8dec539a2c", size = 5324620, upload-time = "2026-08-28T18:59:48.056Z" },
+    { url = "https://files.pythonhosted.org/packages/9a/ce/e74453531b0c49a58d0e8a4f9bab4495705859fee4a4f7de27d58f4a791a/virtualenv-21.7.13-py3-none-any.whl", hash = "sha256:1bea5af7463f59c4719db48fe739579a2a4f569c96f26c086edda85c96da9f59", size = 5328680, upload-time = "2026-09-18T04:35:47.194Z" },
 ]
 
 [[package]]
 name = "yaga-cli"
-version = "0.2.0"
+version = "0.2.1"
 source = { editable = "." }
 dependencies = [
     { name = "pyyaml" },
@@ -1234,8 +1234,8 @@ dev = [
 requires-dist = [
     { name = "boto3", marker = "extra == 'quality-bedrock'", specifier = ">=1.37,<2" },
     { name = "pyyaml", specifier = ">=6.0.3,<7" },
-    { name = "torch", marker = "sys_platform == 'linux' and extra == 'quality'", specifier = ">=2.6,<3", index = "https://download.pytorch.org/whl/cpu" },
-    { name = "torch", marker = "sys_platform != 'linux' and extra == 'quality'", specifier = ">=2.6,<3" },
+    { name = "torch", marker = "sys_platform == 'linux' and extra == 'quality'", specifier = ">=2.13,<3", index = "https://download.pytorch.org/whl/cpu" },
+    { name = "torch", marker = "sys_platform != 'linux' and extra == 'quality'", specifier = ">=2.13,<3" },
     { name = "transformers", marker = "extra == 'quality'", specifier = ">=5.10,<6" },
     { name = "typer", specifier = ">=0.27.2,<1" },
 ]
@@ -1243,7 +1243,7 @@ provides-extras = ["quality", "quality-bedrock"]
 
 [package.metadata.requires-dev]
 dev = [
-    { name = "hatchling", specifier = "==1.32.0" },
+    { name = "hatchling", specifier = "==1.32.4" },
     { name = "pre-commit", specifier = ">=4.6.2,<5" },
     { name = "pytest", specifier = ">=8.3" },
     { name = "readme-renderer", extras = ["md"], specifier = ">=46.0" },

yaga_cli-0.2.0/release-notes.md

@@ -1,21 +0,0 @@
-### Added
-
-- Support explicit plain-message policy and a frozen `plain-v1` starter; print incomplete,
-  policy-guided drafts with `commit template` without changing files or Git.
-
-- Introduce opt-in `warning-rules` for gradual policy adoption, with consistent schema-v1 commit
-  reports containing severity and warning counts, and nonblocking annotations.
-
-- Require bounded work-item references and constrain exact footer values through opt-in
-  `required-issue-prefixes` and `footer-values` settings.
-
-- Add frozen editable workflow starters and `config show --type` explanations of effective
-  body/scope overrides, preserving the existing default starter.
-
-- Validate proposed PR title-plus-description messages with opt-in `pull-request-message`,
-  reusing full commit policy and reporting the proposed message separately.
-
-- Allow per-type body requirements with `body-policy-by-type` and cap total prose with
-  `body-max-length`, preserving existing defaults and independent title checks.
-
-[PyPI](https://pypi.org/project/yaga-cli/0.2.0/)