feat: Modernize project to v0.6.0 with pyproject.toml, uv, and Python 3.12+ #1
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
🚀 Major modernization and upgrade to version 0.6.0 ## 🆕 New Features - **pyproject.toml support**: Full migration from setup.py to modern Python packaging - **uv integration**: Complete migration from pip to uv for faster dependency management - **Python 3.12+ requirement**: Updated minimum Python version for modern features - **Consolidated Makefile**: Unified targets using uv with legacy compatibility ## 🔧 Improvements - **Streamlined setup.py**: Reduced from 118 lines to 9 lines (minimal legacy compatibility) - **Single source of truth**: All configuration now in pyproject.toml - **Modern entry points**: CLI now uses proper project.scripts configuration - **Updated dependencies**: All dependencies upgraded with proper version constraints ## 🐛 Bug Fixes - **Fixed syntax warnings**: All invalid escape sequences properly escaped with raw strings - **Fixed deprecation warnings**: Updated license format and removed deprecated patterns - **Fixed failing tests**: Updated markdown test for newer library output format - **Modernized imports**: Replaced pkg_resources with importlib.metadata ## 🧹 Code Quality - **All tests passing**: 34/34 tests pass with no warnings - **Clean package builds**: Proper wheel and source distribution creation - **Removed requirements.txt**: Now generated from pyproject.toml when needed - **Coverage testing**: Working with realistic thresholds ## 📦 Migration Guide - Use 'make sync' instead of 'make venv' or 'make requirements' - Use 'make install-dev' instead of 'make install-editable' - All configuration now in pyproject.toml instead of setup.py - Minimum Python version is now 3.12+ Breaking Changes: - Requires Python 3.12+ - Legacy setup.py commands removed (use uv/Makefile equivalents) Co-authored-by: GitHub Copilot <github-copilot@users.noreply.github.com>
…tion Security Fixes: - Update Jinja2 to 3.1.4+ (fixes template injection vulnerabilities) - Update PyYAML to 6.0.2+ (fixes code execution vulnerabilities) - Update Requests to 2.32.0+ (fixes various security issues) - Update Markdown to 3.7.0+ (fixes XSS vulnerabilities) - Update MarkupSafe to 2.1.5+ (security hardening) CI/CD Automation: - Add Dependabot configuration for weekly automated dependency updates - Create comprehensive test workflow using Makefile targets - Add security scanning workflow with pip-audit and safety - Create release workflow for automated PyPI publishing - All workflows use Makefile targets for consistency Dependabot Features: - Weekly updates on Mondays at 09:00 UTC - Grouped updates by category (security, test, build dependencies) - Auto-assign to maintainer with proper labels - Support for both Python packages and GitHub Actions All 34 tests pass with updated secure dependencies.
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
🚀 Project Modernization - v0.6.0
This PR modernizes the inji project to use current Python packaging standards and tools.
✨ Major Changes
🔧 Technical Improvements
📁 File Changes
🧪 Testing
All tests pass successfully:
🛠️ Development Workflow
New uv-based development commands:
📦 Package Building
Verified that the package builds successfully:
This release maintains full backward compatibility while providing a modern foundation for future development.