zostera / django-marina / 38121832861

100%

push

github

release: 26.3 (#692)

No commit has touched src/ since v26.2, so the package code is unchanged. What
reaches users is metadata: requires-python moves to >=3.11 with Python 3.10 now
EOL, and the Django dependency lost its <7.0 cap. Both change what resolves,
which is what makes this worth a release.

Nine merged changes had no changelog entry: the coverage floor, the workflow
hardening, the CI gate, the invisible-character lint, the PACKAGING.md note,
the AI assistance policy and the CLAUDE.md shim. just release-check did not
catch them because it only reads commits touching src/, and none of these do.
They are written up here rather than shipped invisibly. The three Dependabot
lockfile bumps are left out, as in earlier releases.

Entries are ordered per MAINTAINING.md: the dropped cycle, the added one, the
dependency cap, then tooling, then the contributor-facing documents. The
workflow hardening sits under tooling rather than security on purpose. It
closes findings against this repository's own workflows, not a vulnerability in
the published package, and listing it as a security fix would tell users they
were exposed when they were not.

Verified with just lint, just build and just test-cov at 100%. The built wheel
reports Version 26.3, Requires-Python >=3.11, classifiers 3.11 to 3.14 and no
Django upper bound.

Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>

28 of 28 branches covered (100.0%)

Branch coverage included in aggregate %.

164 of 164 relevant lines covered (100.0%)

15.0 hits per line