CHANGELOG.md

7.5.1 (2024-11-21)

Bug Fixes

• CodeArtifact: fix AWS CodeArtifact variant (c913e65)

7.5.0 (2024-11-11)

Features

• Ruff: add ruff-format job for code formatting (142589f)

7.4.0 (2024-11-08)

Features

• add AWS CodeArtifact support (variant) (128fb99)

7.3.3 (2024-11-06)

Bug Fixes

• correct bandit exclude of .venv and .cache (ed95527), closes #92

7.3.2 (2024-11-02)

Bug Fixes

• limit security reports access to developer role or higher (40c85ef)

7.3.1 (2024-10-25)

Bug Fixes

• Trivy: trivy scan fails when issues are found (671b781)
• use right options for uv with extras deps (354af5a)

7.3.0 (2024-10-15)

Features

• uv: add uv support as a new build system (8aeb20b), closes #80
• uv: add uv support as a new build system (d22ffba)

7.2.0 (2024-10-04)

Bug Fixes

• release: support full semantic-versioning specifcation (with prerelease and build metadata) (08e9d7e)
• trivy: use --pkg-types instead of deprecated --vuln-type option (5e0a0d2)

Features

• trivy: enable comprehensive priority (322eb1b)

7.1.1 (2024-10-03)

Bug Fixes

• Poetry Build system test (9505604)

7.1.0 (2024-09-15)

Bug Fixes

• check trivy activity to match new log format (edd8fcf)
• pylint --ignore .cache not working now use find to exclude .cache (e1463bc)

Features

• isort exclude .cache (e333183)
• remove unnecesary install when use poetry or pipenv (f025c6d)

7.0.2 (2024-05-20)

Bug Fixes

• issue #73 github_get_latest_version (ce26d5a)
• README for trivy now enabled by default (f5d5f2e)

7.0.1 (2024-05-17)

Bug Fixes

• remove useless apt commands (469ebec)

7.0.0 (2024-05-17)

Code Refactoring

• Trivy: py-trivy job is enabled by default (d9e8679)

Features

• add support for slim and alpine Python images + change default base image (22003d1)

BREAKING CHANGES

• Trivy: py-trivy job is enabled by default 'trivy-enabled' input is no longer supported - use 'trivy-disabled' instead
• the default base image has been changed to python:debian-slim

6.11.1 (2024-05-05)

Bug Fixes

• workflow: disable MR pipeline from prod & integ branches (8703dea)

6.11.0 (2024-04-28)

Bug Fixes

• cache: always keep cache (8cf171e)

Features

• add mypy job (cc22e8c)

6.10.0 (2024-04-14)

Features

• ruff: generate JSON report when SonarQube is detected (81e711d)

6.9.0 (2024-04-13)

Features

• add Ruff linter job (ef364ef)
• some log improvement (aef5a05)

6.8.1 (2024-04-03)

Bug Fixes

• vault: use vault-secrets-provider's "latest" image tag (4342c01)

6.8.0 (2024-04-02)

Features

• add GCP auth variant (0188ac9)

6.7.0 (2024-2-21)

Features

• add black job (054b040)
• add isort job (e8e068b)

6.6.5 (2024-2-15)

Bug Fixes

• more reliable retrieve url for Syft (5d83eaa), closes #65

6.6.4 (2024-2-2)

Bug Fixes

• sanitize variable substitution pattern (c1cf8c3)

6.6.3 (2024-1-26)

Bug Fixes

• resolve "python-index-cataloger does not exist" (69531a8)

6.6.2 (2024-1-22)

Bug Fixes

• avoid rate limiting for latest syft url query (21ce764)

6.6.1 (2023-12-19)

Bug Fixes

• add an info message when pyproject.toml found with no 'build-backend' (b4d95fb), closes #57
• bandit: exclude .cache/ dir (d62f2a2), closes #58

6.6.0 (2023-12-8)

Features

• use centralized service images (gitlab.com) (046d949)

6.5.0 (2023-12-01)

Features

• support CI/CD component design (0166bd4)
• version: minimal GitLab version requirements: 16.6

6.4.1 (2023-11-25)

Bug Fixes

• switch from bumpversion to bump-my-version (8b5c299)

6.4.0 (2023-11-02)

Features

• add vault variant (bf678c4)

6.3.5 (2023-10-16)

Bug Fixes

• declare all TBC stages (d8697c9)

6.3.4 (2023-09-22)

Bug Fixes

• bumpversion: fix bumpversion CLI arguments (7d95ca1), closes #53

6.3.3 (2023-08-09)

Bug Fixes

• add component name to sbom (6cb2719)

6.3.2 (2023-07-07)

Bug Fixes

• package: expire built artifacts (d4f7b4a)

6.3.1 (2023-06-27)

Bug Fixes

• publish: avoid rebuilding packages (optimization) (0002705)

6.3.0 (2023-05-28)

Features

• release: implement 2 steps release (1a58dd1)
• release: make release commit message configurable (2eba9cf)

6.2.0 (2023-05-27)

Features

• workflow: extend (skip ci) feature (ba47f0e)

6.1.5 (2023-03-28)

Bug Fixes

• sbom: add CycloneDX report (6525c1c)

6.1.4 (2023-03-18)

Bug Fixes

• bumpversion: use bumpversion configuration in priority if cfg file found (cd4abb3)

6.1.3 (2023-01-29)

Bug Fixes

• replace wget and curl by python scripts (ef78ec7)

6.1.2 (2023-01-28)

Bug Fixes

• PYTHON_PROJECT_DIR support for py-sbom (2e7dc62)

6.1.1 (2023-01-27)

Bug Fixes

• "Add registry name in all Docker images" (5650f7e)

6.1.0 (2022-12-13)

Features

• add a job generating software bill of materials (4c56888)

6.0.2 (2022-10-17)

Bug Fixes

• bumpversion when using only setup.py. Refs: #36 (2944687)

6.0.1 (2022-10-04)

Bug Fixes

• bandit: fix shell syntax error (bb64f96)

6.0.0 (2022-10-04)

Features

• normalize reports (d591f6d)

BREAKING CHANGES

• generated reports have changed (see doc). It is a breaking change if you're using SonarQube.

5.1.0 (2022-09-11)

Features

• add ability to setup build tool version in PYTHON_BUILD_SYSTEM (5bea2dd)

5.0.0 (2022-08-05)

Features

• adaptive pipeline rules (543b4fe)
• switch to Merge Request pipelines as default (714e066)

BREAKING CHANGES

• change default workflow from Branch pipeline to MR pipeline

4.2.0 (2022-06-10)

Features

• lint: add a report for SonarQube (ba73998)

4.1.1 (2022-05-06)

Bug Fixes

• Manage deprecation for artifacts:report:cobertura (9d7bcf3)

4.1.0 (2022-05-01)

Bug Fixes

• migrate deprecated CI_BUILD_REF_NAME variable (eb115a2)

Features

• configurable tracking image (2a0229f)

4.0.1 (2022-03-22)

Bug Fixes

• Trivy: Scan transitive dependencies (11d96db)

4.0.0 (2022-02-25)

Bug Fixes

• Poetry: Poetry cache in GitLab CI cache (9fbaa6d)

chore

• renamed unprefixed variables (8c8a873)

Features

• add multi build-system support (Poetry, Setuptools or requirements file) (130e210)
• add Pipenv support (7afc0db)
• release: complete release process refactoring (ff8b985)

BREAKING CHANGES

• release: complete refactoring or release process, including variables and jobs redefinition

• no more separate publish job: the entire release process is now performed by the py-release job
• TWINE_XXX variables removed and replaced by PYTHON_REPOSITORY_XXX
• RELEASE_VERSION_PART variable replaced by PYTHON_RELEASE_NEXT

For additional info, see the doc.

• rename $REQUIREMENTS_FILE as $PYTHON_REQS_FILE and $PYTHON_REQS_FILE as $PYTHON_EXTRA_REQS_FILES default extra requirements changed from 'test-requirements.txt' to 'requirements-dev.txt'
• removed $PYTHON_POETRY_DISABLED with $PYTHON_BUILD_SYSTEM (see doc)

3.2.1 (2021-12-21)

Bug Fixes

• safety: fix command not found when poetry is used (1ee673b)

3.2.0 (2021-12-20)

Features

• add Trivy dependency scanner (f0faed0)

3.1.1 (2021-12-17)

Bug Fixes

• switch from safety image to install safety (e2b42c4)

3.1.0 (2021-12-10)

Features

• publish: configure the GitLab Packages registry as default Python registry for publish (891c32a)

3.0.1 (2021-12-10)

Bug Fixes

• preserve explicit project dependencies versions when installing tools (c0c9464)

3.0.0 (2021-11-20)

Features

• fully integration of poetry (f0406de)

refacto

• py-doc: remove Python doc build (10a8150)

BREAKING CHANGES

• py-doc: doc job removed this job has to been rewritten :
  • it is in a wrong stage
  • needs an other tool (make)
  • generated doc is not publish anywhere
  • no ability to choise doc generation tool

in to-be-continuous, there is mkdocs template which is able to generate python doc too

Conflicts:

templates/gitlab-ci-python.yml

2.2.0 (2021-11-15)

Features

• move packaging to a separate stage (945fc8a)

2.1.1 (2021-11-09)

Bug Fixes

• Use PIP_OPTS for setup.py based install (3ea29e6)

2.0.3 (2021-10-12)

Bug Fixes

• disable poetry usage (py-doc) (73d5f2a)

2.0.2 (2021-10-07)

Bug Fixes

• use master or main for production env (77af297)

2.0.1 (2021-10-04)

Bug Fixes

• disable poetry usage (17d57cb)

2.0.0 (2021-09-08)

Features

• Change boolean variable behaviour (4bb11b9)

BREAKING CHANGES

• boolean variable now triggered on explicit 'true' value

1.3.0 (2021-09-03)

Features

• add Poetry extras support (PYTHON_POETRY_EXTRAS variable) (e079e30)

1.2.3 (2021-07-26)

Bug Fixes

• poetry: add option to disable poetry (dbfe6f6)

1.2.2 (2021-06-24)

Bug Fixes

• permission on reports directory (f44e03a)

1.2.1 (2021-06-23)

Bug Fixes

• "Missing git package for py-release job" (082f308)

1.2.0 (2021-06-10)

Features

• move group (688d6f2)

1.1.0 (2021-05-18)

Features

• add scoped variables support (73dbac6)

1.0.0 (2021-05-06)

Features

• initial release (a1a8677)