Skip to content

chore: modernize Repren tooling and release pipeline - #53

Merged
jlevy merged 6 commits into
masterfrom
codex/upgrade-tbd-simple-modern-uv
Aug 26, 2026
Merged

chore: modernize Repren tooling and release pipeline#53
jlevy merged 6 commits into
masterfrom
codex/upgrade-tbd-simple-modern-uv

Conversation

@jlevy

@jlevy jlevy commented Aug 26, 2026

Copy link
Copy Markdown
Owner

Summary

  • upgrade the tbd integration and migrate Repren directly to Simple Modern uv v0.5.0 while preserving its Python 3.10 support, root package layout, and release-tag convention
  • remove distracting end-user supply-chain advice, lock Tryscript 0.2.1 and its transitive graph, and tighten dependency, source-distribution, and trusted-publishing boundaries
  • adopt the current Flowmark skill and repository process with recursive discovery, safe local auto-formatting, generated-doc handling, and a separately reviewed formatting baseline

Validation

  • 113 pytest cases on Python 3.10 through 3.14
  • 97 exact-pinned Tryscript golden sessions
  • lint, BasedPyright, Flowmark, generated-doc checks, hook smoke tests, locked builds, isolated wheel/sdist installs, and artifact metadata checks
  • pip-audit, npm audit, workflow/config parsing, tbd doctor, and final diff review

The detailed migration, threat-model, and upstream-template findings are recorded in docs/project/research/current/review-2026-08-25-simple-modern-uv-v0.5.0.md.

jlevy added 6 commits August 25, 2026 08:29
Upgrade the repository integration from tbd 0.1.22/f04 to 0.8.0/f08 and preserve the generated hooks and skill. Remove the optional uv cool-off and exact-version example from generated user documentation.

Supply-chain exception: tbd 0.8.0 was published within 14 days; the user explicitly requested the latest end-to-end tbd upgrade, and the generated fallback is exact-version pinned.

Reviewed-by: Joshua Levy <joshua@cal.berkeley.edu>
Apply the direct Copier migration while preserving Repren's Python 3.10 support, root package layout, unprefixed tags, generated docs, golden suite, and repository policy.

Lock Tryscript 0.2.1 under the maintainer-approved first-party cool-off exception while keeping every third-party npm package behind the normal 14-day gate. Harden CI and publishing with exact tools, immutable actions, reproducible builds, and least-privilege OIDC.

Validate lint, typing, generated docs, 113 tests on Python 3.10-3.14, 97 Tryscript sessions, audits, and isolated wheel/sdist installs.

Reviewed-by: Joshua Levy <joshua@cal.berkeley.edu>
@jlevy
jlevy merged commit 885ce5e into master Aug 26, 2026
5 checks passed
@jlevy
jlevy deleted the codex/upgrade-tbd-simple-modern-uv branch August 26, 2026 02:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant