Skip to content

Merge dev into main - #2

Merged
JE-Chen merged 9 commits into
mainfrom
dev
Oct 11, 2026
Merged

JE-Chen merged 9 commits into
mainfrom
dev

Conversation

@JE-Chen

@JE-Chen JE-Chen commented Oct 11, 2026 •

Copy link
Copy Markdown
Member

Promote the shared HTTP request-record schema and validation fixes used by the automation runners.

Validation: repository CI and analysis checks.

Merge policy: wait for every registered check; merge only the verified current head. No administrator bypass.

setuptools adds test*/test*.py to a source distribution by default, so the
je_action_core 0.0.3 sdist carried the 12 test files although the wheel
installs only the package. MANIFEST.in prunes test/; test_sdist_manifest.py
pins it. The wheel's members are byte-identical.
publish (publish.yml) holds the PyPI token and installed build and twine
unpinned, after upgrading pip. It now installs only
.github/requirements/publish.txt: wheels only, at locked hashes, generated
from publish.in with uv.

Dependabot's pip entry names .github/requirements, which it does not reach
from the root. test_workflow_actions.py fails when a job that reads the
token runs any other pip install, or a tool that is not in the lock.
…wnloading the newest

python -m build made an isolated environment and downloaded the newest setuptools that build-system.requires allows, outside the hash lock, in the job that holds the PyPI token. publish.in now names setuptools (84.0.0 in the regenerated publish.txt, the other 29 pins unchanged) and the job runs python -m build --no-isolation.

Guards: the build carries --no-isolation, every entry of build-system.requires is pinned in publish.txt at or above its floor, and publish.in must name the build backend.
feat: add shared request record contracts
@JE-Chen
JE-Chen merged commit 1e9ed93 into main Oct 11, 2026
30 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant