Skip to content

Prepare CLI for TestPyPI publishing - #235

Open
RonaldHensbergen wants to merge 17 commits into
mainfrom
packaging/testpypi-cli
Open

Prepare CLI for TestPyPI publishing#235
RonaldHensbergen wants to merge 17 commits into
mainfrom
packaging/testpypi-cli

Conversation

@RonaldHensbergen

@RonaldHensbergen RonaldHensbergen commented Jul 25, 2026

Copy link
Copy Markdown
Owner

Summary

  • bundle security rules into the Python distribution and load them through importlib.resources
  • complete PyPI metadata and package-data configuration
  • build and smoke-test the wheel through pipx outside the source tree in CI
  • add a manual TestPyPI trusted-publishing workflow using GitHub OIDC
  • document the CLI-only package boundary and TestPyPI maintainer setup

Scope

This is the first phase of #52. It publishes the CLI and built-in runtime rules only. Profiles, modules, image build contexts, and workdirs remain external project content until registry-backed cds pull support is implemented.

Validation

  • make check
  • python -m build
  • python -m twine check dist/*
  • installed-wheel validation and packaged-rule loading from outside the source tree

Refs #52

@RonaldHensbergen
Prepare CLI for TestPyPI publishing
2b20344 
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@RonaldHensbergen RonaldHensbergen mentioned this pull request Jul 25, 2026
Open
RonaldHensbergen and others added 2 commits July 25, 2026 20:21
@RonaldHensbergen
Use explicit pipx app directory in CI
59b3cff 
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@RonaldHensbergen
Add biweekly issue consistency audit (#234)
6c77e8f 
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@RonaldHensbergen RonaldHensbergen mentioned this pull request Jul 25, 2026
Closed
renovate Bot and others added 4 commits July 26, 2026 00:06
@renovate @RonaldHensbergen
chore(deps): update all dependencies (major) (#225)
2a18a7d 
* chore(deps): update all dependencies

* fix(deps): update Superset uv

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: RonaldHensbergen <ronaldhensbergen@gmail.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@SemTiOne
Add missing cds preflight step to installation guide (#238)
07e68ad
@SemTiOne
Publish signed runtime images with SBOM/provenance attestation (#237)
179d13d 
* Publish signed runtime images with SBOM/provenance attestation

* fix: gate fixture recording on actual success, document cosign pin choice
@RonaldHensbergen
@renovate @SemTiOne
Add MVP CI proof workflow (#228)
377bbd4 
* Add MVP CI proof workflow

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Handle clean runner runtime setup

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Sign off MVP T9 CI proof

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Address MVP proof review feedback

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Correct MVP coverage signoff

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Complete MVP runtime signoff coverage

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Record full MVP proof evidence

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Convert MVP proof docs to profile tests

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* up to date (#239)

* Add MVP profile CI proof

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Use shared Unix socket for Dagster gRPC (#222)

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Add biweekly issue consistency audit (#234)

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* chore(deps): update all dependencies (major) (#225)

* chore(deps): update all dependencies

* fix(deps): update Superset uv

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: RonaldHensbergen <ronaldhensbergen@gmail.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Add missing cds preflight step to installation guide (#238)

* Publish signed runtime images with SBOM/provenance attestation (#237)

* Publish signed runtime images with SBOM/provenance attestation

* fix: gate fixture recording on actual success, document cosign pin choice

---------

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Dane Parin <emphyst80@gmail.com>

* Update tests/test_compose_runtime_smoke.py

Co-authored-by: Dane Parin <emphyst80@gmail.com>

---------

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Dane Parin <emphyst80@gmail.com>
@RonaldHensbergen RonaldHensbergen mentioned this pull request Jul 26, 2026
Merged
9 tasks
RonaldHensbergen and others added 10 commits July 26, 2026 19:15
@RonaldHensbergen
Add biweekly issue consistency audit (#234)
4c50577 
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@renovate @RonaldHensbergen
chore(deps): update all dependencies (major) (#225)
71d800e 
* chore(deps): update all dependencies

* fix(deps): update Superset uv

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: RonaldHensbergen <ronaldhensbergen@gmail.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@SemTiOne @RonaldHensbergen
Add missing cds preflight step to installation guide (#238)
766b69b
@SemTiOne @RonaldHensbergen
Publish signed runtime images with SBOM/provenance attestation (#237)
0b0903c 
* Publish signed runtime images with SBOM/provenance attestation

* fix: gate fixture recording on actual success, document cosign pin choice
@RonaldHensbergen
@renovate @SemTiOne
Add MVP CI proof workflow (#228)
3590255 
* Add MVP CI proof workflow

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Handle clean runner runtime setup

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Sign off MVP T9 CI proof

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Address MVP proof review feedback

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Correct MVP coverage signoff

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Complete MVP runtime signoff coverage

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Record full MVP proof evidence

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Convert MVP proof docs to profile tests

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* up to date (#239)

* Add MVP profile CI proof

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Use shared Unix socket for Dagster gRPC (#222)

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Add biweekly issue consistency audit (#234)

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* chore(deps): update all dependencies (major) (#225)

* chore(deps): update all dependencies

* fix(deps): update Superset uv

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: RonaldHensbergen <ronaldhensbergen@gmail.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Add missing cds preflight step to installation guide (#238)

* Publish signed runtime images with SBOM/provenance attestation (#237)

* Publish signed runtime images with SBOM/provenance attestation

* fix: gate fixture recording on actual success, document cosign pin choice

---------

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Dane Parin <emphyst80@gmail.com>

* Update tests/test_compose_runtime_smoke.py

Co-authored-by: Dane Parin <emphyst80@gmail.com>

---------

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Dane Parin <emphyst80@gmail.com>
@RonaldHensbergen
@renovate @SemTiOne
get up to date (#241)
840a94a 
* Add biweekly issue consistency audit (#234)

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* chore(deps): update all dependencies (major) (#225)

* chore(deps): update all dependencies

* fix(deps): update Superset uv

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: RonaldHensbergen <ronaldhensbergen@gmail.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Add missing cds preflight step to installation guide (#238)

* Publish signed runtime images with SBOM/provenance attestation (#237)

* Publish signed runtime images with SBOM/provenance attestation

* fix: gate fixture recording on actual success, document cosign pin choice

* Add MVP CI proof workflow (#228)

* Add MVP CI proof workflow

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Handle clean runner runtime setup

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Sign off MVP T9 CI proof

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Address MVP proof review feedback

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Correct MVP coverage signoff

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Complete MVP runtime signoff coverage

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Record full MVP proof evidence

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Convert MVP proof docs to profile tests

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* up to date (#239)

* Add MVP profile CI proof

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Use shared Unix socket for Dagster gRPC (#222)

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Add biweekly issue consistency audit (#234)

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* chore(deps): update all dependencies (major) (#225)

* chore(deps): update all dependencies

* fix(deps): update Superset uv

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: RonaldHensbergen <ronaldhensbergen@gmail.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Add missing cds preflight step to installation guide (#238)

* Publish signed runtime images with SBOM/provenance attestation (#237)

* Publish signed runtime images with SBOM/provenance attestation

* fix: gate fixture recording on actual success, document cosign pin choice

---------

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Dane Parin <emphyst80@gmail.com>

* Update tests/test_compose_runtime_smoke.py

Co-authored-by: Dane Parin <emphyst80@gmail.com>

---------

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Dane Parin <emphyst80@gmail.com>

---------

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Dane Parin <emphyst80@gmail.com>
@RonaldHensbergen
Prepare CLI for TestPyPI publishing
617a41d 
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@RonaldHensbergen
Use explicit pipx app directory in CI
4812a79 
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@RonaldHensbergen
@renovate @SemTiOne
get up to date (#241)
167f5cb 
* Add biweekly issue consistency audit (#234)

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* chore(deps): update all dependencies (major) (#225)

* chore(deps): update all dependencies

* fix(deps): update Superset uv

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: RonaldHensbergen <ronaldhensbergen@gmail.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Add missing cds preflight step to installation guide (#238)

* Publish signed runtime images with SBOM/provenance attestation (#237)

* Publish signed runtime images with SBOM/provenance attestation

* fix: gate fixture recording on actual success, document cosign pin choice

* Add MVP CI proof workflow (#228)

* Add MVP CI proof workflow

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Handle clean runner runtime setup

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Sign off MVP T9 CI proof

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Address MVP proof review feedback

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Correct MVP coverage signoff

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Complete MVP runtime signoff coverage

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Record full MVP proof evidence

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Convert MVP proof docs to profile tests

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* up to date (#239)

* Add MVP profile CI proof

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Use shared Unix socket for Dagster gRPC (#222)

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Add biweekly issue consistency audit (#234)

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* chore(deps): update all dependencies (major) (#225)

* chore(deps): update all dependencies

* fix(deps): update Superset uv

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: RonaldHensbergen <ronaldhensbergen@gmail.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

* Add missing cds preflight step to installation guide (#238)

* Publish signed runtime images with SBOM/provenance attestation (#237)

* Publish signed runtime images with SBOM/provenance attestation

* fix: gate fixture recording on actual success, document cosign pin choice

---------

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Dane Parin <emphyst80@gmail.com>

* Update tests/test_compose_runtime_smoke.py

Co-authored-by: Dane Parin <emphyst80@gmail.com>

---------

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Dane Parin <emphyst80@gmail.com>

---------

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Dane Parin <emphyst80@gmail.com>
@RonaldHensbergen
Merge remote-tracking branch 'refs/remotes/origin/packaging/testpypi-…
9532bfc 
…cli' into packaging/testpypi-cli
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@RonaldHensbergen @SemTiOne