v2.0.10

Patch

• patch: Drop support for Python 3.9 (b9e5ffb)

  Undo the last of 8d15f4a.

  • Use a match case statement in place of an if block.
  • Replace Union types with X | Y syntax.

  Also introduce support for Python 3.14.

  Closes #16.

v2.0.9

Bug fixes

• fix: Rework release publishing (9c718b6)

  The PyPI upload failed with:

  Checking dist/reverse_argparse-2.0.8-py3-none-any.whl: PASSED
  Checking dist/multiple.intoto.jsonl: ERROR InvalidDistribution:
  Unknown distribution format:
  'multiple.intoto.jsonl'

  I suppose the provenance can't be included in the dist directory for
  the PyPI upload, but it needs to be in there for python-semantic-release
  publish to GitHub Releases action. This commit reorders things, such
  that we publish to GitHub first, and save PyPI for last, and between the
  two we remove the provenance from the dist directory. Hopefully this
  works.

v2.0.8

Bug fixes

• fix: Set sufficient permissions for publish job (4004ef2)

  When running the upload to PyPI action, we ran into:

  Error: Trusted publishing exchange failure:
  OpenID Connect token retrieval failed: GitHub: missing or
  insufficient OIDC token permissions, the
  ACTIONS_ID_TOKEN_REQUEST_TOKEN environment variable was unset

  This generally indicates a workflow configuration error, such as
  insufficient permissions. Make sure that your workflow has
  id-token: write configured at the job level, e.g.:

  permissions:
    id-token: write

v2.0.7

Chores

• chore: Update Ruff linters (c96eb19)
• chore: Fix typos (c0c3aea)

Code style

• style: Check flake8-annotations (9ceb68a)

  To ensure type-hinting is present in all possible locations.

Continuous integration

• ci: Subdivide release job (60bca10)

  This is needed because the SLSA provenance reusable workflow cannot be
  used as a step within a job, but must be used as a job on its own. This
  commit therefore subdivides the release job into a release job,
  which runs python-semantic-release to create a new release, if
  applicable, and then a publish job, to publish the release to PyPI and
  GitHub Releases, if one was created. We'll then be able to insert the
  SLSA provenance job between the two.

Patch

• patch: Add SLSA provenance to release assets (e4e6ebc)

  See https://slsa.dev/ for motivation.

  Creating a patch release to ensure these additions to the automated
  release process work.

  Closes #260.

v2.0.6

Patch

• patch: Sign semantic release commits/tags (e7dcfc3)

v2.0.5

Patch

• patch: Omit pre-commit updates from CHANGELOG (b6298d8)

  I thought 1aa9022 was sufficient for
  this, but apparently not. Trying again.

v2.0.4

Patch

• patch: Omit dependency auto-updates from CHANGELOG (1aa9022)

  This is marked at a patch release to ensure the change works, and
  regenerate the CHANGELOG without the noisy entries.

v2.0.3

Chores

• chore: Update security notice (4d51098)

  The Best Practices Badge App suggests we should document what users can
  expect from our project in terms of security.

Documentation

• docs: Switch to project_copyright (d0a21d5)

  Using this alias means we're no longer overshadowing the copyright
  built-in, so we can remove the comment to ignore that Ruff linting rule.

Patch

• patch: Replace deprecated GitHub Action (e5f4256)

  Marking this as a patch release to test out the new action and make sure
  it works.

  Closes #255.

v2.0.2

Bug fixes

• fix: Switch import location (7948fc2)

  In Python 3.9, typing.Sequence was deprecated in favor of
  collections.abc.Sequence (see PEP 585).

v2.0.1

Patch

• patch: Support Python 3.13 (453fd05)