Prepare python-substack 0.2.0

Author: ma2za

.github/workflows/ci_publish.yml

@@ -12,6 +12,12 @@ permissions:
 jobs:
   deploy:
     runs-on: ubuntu-latest
+    environment:
+      name: pypi
+      url: https://pypi.org/p/python-substack
+    permissions:
+      contents: read
+      id-token: write
     steps:
       - uses: actions/checkout@v6
       - uses: actions/setup-python@v6
@@ -55,6 +61,3 @@ jobs:
           /tmp/python-substack-mcp/bin/python -c "import substack_mcp.mcp_server"
       - name: Publish validated distributions
         uses: pypa/gh-action-pypi-publish@release/v1
-        with:
-          user: __token__
-          password: ${{ secrets.PYPI_TOKEN }}

.gitignore

@@ -129,4 +129,7 @@ dmypy.json
 .pyre/
 
 .idea/
-.vscode/
+.vscode/
+
+# Local maintainer release plan
+ROADMAP.md

.pre-commit-config.yaml

@@ -1,16 +1,16 @@
 repos:
   - repo: https://github.com/pre-commit/pre-commit-hooks
-    rev: v2.3.0
+    rev: v6.0.0
     hooks:
       - id: check-yaml
       - id: end-of-file-fixer
       - id: trailing-whitespace
   - repo: https://github.com/psf/black
-    rev: 22.10.0
+    rev: 26.5.1
     hooks:
       - id: black
   - repo: https://github.com/pycqa/isort
-    rev: 5.12.0
+    rev: 8.0.1
     hooks:
       - id: isort
         name: isort (python)

CHANGELOG.md

@@ -1,5 +1,32 @@
 # Changelog
 
+## 0.2.0
+
+### Added
+
+- Outcome-focused documentation for authentication, legacy CLI commands,
+  low-level Python construction, YAML drafts, MCP, compatibility, security,
+  contributing, and adoption metrics.
+- Offline tests for the documented unauthenticated installation checks and
+  local documentation links.
+- A documented compatibility commitment covering the Python API, five console
+  scripts, unified CLI, JSON keys, environment variables, and MCP tools.
+
+### Improved
+
+- Reposition the package around safe writer-side Markdown automation.
+- Put the unpublished draft workflow and publishing safeguards first in the
+  README.
+- Classify the package as Beta after four years of compatible releases.
+- Update pre-commit, formatting, and import-sorting hooks to current verified
+  releases.
+- Validate the hook runner as a locked development dependency.
+- Publish through short-lived PyPI Trusted Publishing credentials instead of a
+  long-lived API token.
+
+Existing Python APIs, CLI commands, console scripts, defaults, JSON contracts,
+environment variables, and MCP tools remain unchanged.
+
 ## 0.1.27
 
 ### Added

CONTRIBUTING.md

@@ -0,0 +1,58 @@
+# Contributing
+
+## Setup
+
+Fork and clone the repository, then install the package and all optional
+dependencies:
+
+```bash
+poetry install --all-extras
+```
+
+Install the repository hooks:
+
+```bash
+poetry run pre-commit install
+```
+
+## Validation
+
+Run the offline suite:
+
+```bash
+poetry run pytest -q -m "not live" --strict-markers
+```
+
+Run all configured hooks:
+
+```bash
+poetry run pre-commit run --all-files
+```
+
+Live tests are opt-in because they create disposable drafts in a real
+publication:
+
+```bash
+RUN_SUBSTACK_E2E=1 poetry run pytest -q -m live
+RUN_SUBSTACK_CLI_E2E=1 poetry run pytest -q -m live tests/substack/test_cli_end_to_end.py
+```
+
+Live tests must never publish. Confirm that disposable drafts are removed after
+every run.
+
+## Pull requests
+
+- Keep changes focused and preserve existing public interfaces and defaults.
+- Add a regression test for every bug fix.
+- Add offline tests for new behavior.
+- Update user-facing documentation and `CHANGELOG.md` when behavior changes.
+- Never include passwords, cookies, `.env` contents, or captured request
+  headers.
+
+Feature requests and bug reports are welcome through the repository issue
+templates. Authentication reports must have all credentials removed.
+
+## Releases
+
+Maintainer release requirements are documented in
+[docs/releasing.md](docs/releasing.md).