[pull] master from clintmod:master - #1
Open
pull[bot] wants to merge 32 commits into
Open
Conversation
…ld request payload with json.dumps, mock MACPREFS_TOKEN in tests
…ndencies, use python3 explicitly in Makefile
…all #8), add GitHub Actions CI, update pylintrc for pylint 4
…ock replace requirements.txt, Ritefile replaces Makefile, CI uses mise + rite (#26)
… bootstrap on a bare runner
…install+backup smoke check as rite build
Modernize dev tooling: mise + pyproject/uv + Ritefile
Finish Python 3 migration, fix restore robustness, modernize packaging
…tap formula files)
git mv only; no logic changes. Reference updates: - pyproject.toml: pytest pythonpath=["src"], testpaths=["tests"] - Ritefile.yml: --cov=src, pylint src/*.py tests/*.py, python src/publish.py - macprefs.template.rb: libexec.install Dir["src/*"] (flatten keeps sibling imports working in the installed layout) - ci/scripts/brew-build-test.sh: PYTHONPATH=src for the version import - tests: execute_module paths now src/macprefs and src/publish.py (paths resolve relative to cwd, which is repo root under rite)
…der-using-in finding), document mise activation in README
…alls aren't rate-limited
CI: parallel test/lint/build/contrib jobs + brew package build check
Move code into src/ layout, tests into tests/
…k, actionlint, brew style/audit in build, dependabot (#31)
Wire up additional checks: coverage floor, ruff, pip-audit, shellcheck, actionlint, brew audit, dependabot
Bumps [jdx/mise-action](https://github.com/jdx/mise-action) from 2 to 4. - [Release notes](https://github.com/jdx/mise-action/releases) - [Changelog](https://github.com/jdx/mise-action/blob/main/CHANGELOG.md) - [Commits](jdx/mise-action@v2...v4) --- updated-dependencies: - dependency-name: jdx/mise-action dependency-version: '4' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 7. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@v4...v7) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
…se-action-4 Bump jdx/mise-action from 2 to 4
…s/checkout-7 Bump actions/checkout from 4 to 7
…mat:check row, release-verify workflow (#35) pyright found a real bug: get_home_dir crashed with TypeError when HOME was unset (now a clear KeyError), and execute_module relied on pytest having already imported importlib.util/machinery.
…, zizmor + SHA-pinned actions + least-privilege permissions, codeql, tag/version gate in release-verify (#37) branch coverage exposed untested selective backup/restore paths (tests added), and the new selective tests exposed swapped mock parameter names in the legacy test_backup/test_restore signatures (decorators inject bottom-up) - fixed
Port git-auto-merge check set + bandit + post-release install verification
Parity round 2: lock:check, test hardening, workflow security, CodeQL, tag gate
…ns (#39) Every tool configured in pyproject.toml (uv, pytest, ruff, pylint, pyright, coverage, gitleaks) also discovers standalone config files that silently win over the [tool.*] sections -- uv.toml ignores [tool.uv] with no warning, an empty pytest.ini shadows [tool.pytest.ini_options], and a ruff.toml in a subdirectory replaces the root lint rules for that subtree. Add ci/scripts/check-config-shadowing.py, a manifest-driven guard that fails if any of the 16 shadowing filenames exist anywhere in the tree (tracked or untracked-unignored, so a stray local file fails rite check before it is committed). Wire it in as config:check in the check set and the CI checks matrix, and extend ruff/pylint/pyright/format coverage to ci/ so the script is held to the same bar as src and tests.
config:check: ban config files that shadow pyproject.toml tool sections
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
See Commits and Changes for more details.
Created by
pull[bot] (v2.0.0-alpha.4)
Can you help keep this open source service alive? 💖 Please sponsor : )