questrail / tektronix / 33544906601

100%

push

github

Modernize tooling, CI, and release process

Bring this project in line with applyaf, which had already been moved to
uv, just, and a GitHub Actions release.

Tooling. uv and a Justfile replace the invoke tasks and requirements.txt,
with the dependencies locked in uv.lock. The requirements file was a
pip-chill dump that pinned the dev tools without distinguishing them from
the one runtime dependency, and it named nose, which has not run on a
supported Python in years. ruff and pyright replace black and pylint,
which pyproject.toml had configured without either being installed; its
pyright section pointed at src/web, src/sdk, and src/typestubs, none of
which exist here.

CI. ci.yml tests, lints, and type checks on every push across 3.12, 3.13,
and 3.14, checks the numpy floor that pyproject.toml promises in a job of
its own, audits the workflows with zizmor, and reports coverage to
Coveralls against a 100% floor. The .travis.yml it replaces pointed at
travis-ci.org, which shut down, so nothing had run against a push in
years and the README badge linked to a service that no longer answers.

Releases. `just release` refuses to cut against a dirty tree, off master,
on a master behind its upstream, with an empty Unreleased section, or
onto a tag that already exists, then shows the entries waiting in the
CHANGELOG beside the version each bump would produce. The `invoke
release` task it replaces took the version as an argument, trusted it,
and pushed the tag before anything had been checked. Pushing the tag runs
release.yml, which waits on all of CI, verifies the commit is on master
and that the tag matches the packaged version, smoke tests the built
wheel from outside the source tree, and publishes through trusted
publishing with a PEP 740 attestation per distribution. There is no PyPI
token to store or leak. This needs a trusted publisher registered for
tektronix on PyPI, pointing at questrail/tektronix, release.yml, and the
pypi environment, before the nex... (continued)

90 of 90 new or added lines in 2 files covered. (100.0%)

101 of 101 relevant lines covered (100.0%)

1.0 hits per line