CHANGELOG.md

6.9.0 (2024-05-15)

Bug Fixes

• cache: always keep cache (8cf171e)
• workflow: disable MR pipeline from prod & integ branches (8703dea)

Features

• add Ruff linter job (ef364ef)
• add mypy job (cc22e8c)
• ruff: generate JSON report when SonarQube is detected (81e711d)
• some log improvement (aef5a05)

6.11.1 (2024-05-05)

Bug Fixes

• workflow: disable MR pipeline from prod & integ branches (8703dea)

6.11.0 (2024-04-28)

Bug Fixes

• cache: always keep cache (8cf171e)

Features

• add mypy job (cc22e8c)

6.10.0 (2024-04-14)

Features

• ruff: generate JSON report when SonarQube is detected (81e711d)

6.9.0 (2024-04-13)

Features

• add Ruff linter job (ef364ef)
• some log improvement (aef5a05)

6.8.1 (2024-04-03)

Bug Fixes

• vault: use vault-secrets-provider's "latest" image tag (4342c01)

6.8.0 (2024-04-02)

Features

• add GCP auth variant (0188ac9)

6.7.0 (2024-2-21)

Features

• add black job (054b040)
• add isort job (e8e068b)

6.6.5 (2024-2-15)

Bug Fixes

• more reliable retrieve url for Syft (5d83eaa), closes #65

6.6.4 (2024-2-2)

Bug Fixes

• sanitize variable substitution pattern (c1cf8c3)

6.6.3 (2024-1-26)

Bug Fixes

• resolve "python-index-cataloger does not exist" (69531a8)

6.6.2 (2024-1-22)

Bug Fixes

• avoid rate limiting for latest syft url query (21ce764)

6.6.1 (2023-12-19)

Bug Fixes

• add an info message when pyproject.toml found with no 'build-backend' (b4d95fb), closes #57
• bandit: exclude .cache/ dir (d62f2a2), closes #58

6.6.0 (2023-12-8)

Features

• use centralized service images (gitlab.com) (046d949)

6.5.0 (2023-12-01)

Features

• support CI/CD component design (0166bd4)
• version: minimal GitLab version requirements: 16.6

6.4.1 (2023-11-25)

Bug Fixes

• switch from bumpversion to bump-my-version (8b5c299)

6.4.0 (2023-11-02)

Features

• add vault variant (bf678c4)

6.3.5 (2023-10-16)

Bug Fixes

• declare all TBC stages (d8697c9)

6.3.4 (2023-09-22)

Bug Fixes

• bumpversion: fix bumpversion CLI arguments (7d95ca1), closes #53

6.3.3 (2023-08-09)

Bug Fixes

• add component name to sbom (6cb2719)

6.3.2 (2023-07-07)

Bug Fixes

• package: expire built artifacts (d4f7b4a)

6.3.1 (2023-06-27)

Bug Fixes

• publish: avoid rebuilding packages (optimization) (0002705)

6.3.0 (2023-05-28)

Features

• release: implement 2 steps release (1a58dd1)
• release: make release commit message configurable (2eba9cf)

6.2.0 (2023-05-27)

Features

• workflow: extend (skip ci) feature (ba47f0e)

6.1.5 (2023-03-28)

Bug Fixes

• sbom: add CycloneDX report (6525c1c)

6.1.4 (2023-03-18)

Bug Fixes

• bumpversion: use bumpversion configuration in priority if cfg file found (cd4abb3)

6.1.3 (2023-01-29)

Bug Fixes

• replace wget and curl by python scripts (ef78ec7)

6.1.2 (2023-01-28)

Bug Fixes

• PYTHON_PROJECT_DIR support for py-sbom (2e7dc62)

6.1.1 (2023-01-27)

Bug Fixes

• "Add registry name in all Docker images" (5650f7e)

6.1.0 (2022-12-13)

Features

• add a job generating software bill of materials (4c56888)

6.0.2 (2022-10-17)

Bug Fixes

• bumpversion when using only setup.py. Refs: #36 (2944687)

6.0.1 (2022-10-04)

Bug Fixes

• bandit: fix shell syntax error (bb64f96)

6.0.0 (2022-10-04)

Features

• normalize reports (d591f6d)

BREAKING CHANGES

• generated reports have changed (see doc). It is a breaking change if you're using SonarQube.

5.1.0 (2022-09-11)

Features

• add ability to setup build tool version in PYTHON_BUILD_SYSTEM (5bea2dd)

5.0.0 (2022-08-05)

Features

• adaptive pipeline rules (543b4fe)
• switch to Merge Request pipelines as default (714e066)

BREAKING CHANGES

• change default workflow from Branch pipeline to MR pipeline

4.2.0 (2022-06-10)

Features

• lint: add a report for SonarQube (ba73998)

4.1.1 (2022-05-06)

Bug Fixes

• Manage deprecation for artifacts:report:cobertura (9d7bcf3)

4.1.0 (2022-05-01)

Bug Fixes

• migrate deprecated CI_BUILD_REF_NAME variable (eb115a2)

Features

• configurable tracking image (2a0229f)

4.0.1 (2022-03-22)

Bug Fixes

• Trivy: Scan transitive dependencies (11d96db)

4.0.0 (2022-02-25)

Bug Fixes

• Poetry: Poetry cache in GitLab CI cache (9fbaa6d)

chore

• renamed unprefixed variables (8c8a873)

Features

• add multi build-system support (Poetry, Setuptools or requirements file) (130e210)
• add Pipenv support (7afc0db)
• release: complete release process refactoring (ff8b985)

BREAKING CHANGES

• release: complete refactoring or release process, including variables and jobs redefinition

• no more separate publish job: the entire release process is now performed by the py-release job
• TWINE_XXX variables removed and replaced by PYTHON_REPOSITORY_XXX
• RELEASE_VERSION_PART variable replaced by PYTHON_RELEASE_NEXT

For additional info, see the doc.

• rename $REQUIREMENTS_FILE as $PYTHON_REQS_FILE and $PYTHON_REQS_FILE as $PYTHON_EXTRA_REQS_FILES default extra requirements changed from 'test-requirements.txt' to 'requirements-dev.txt'
• removed $PYTHON_POETRY_DISABLED with $PYTHON_BUILD_SYSTEM (see doc)

3.2.1 (2021-12-21)

Bug Fixes

• safety: fix command not found when poetry is used (1ee673b)

3.2.0 (2021-12-20)

Features

• add Trivy dependency scanner (f0faed0)

3.1.1 (2021-12-17)

Bug Fixes

• switch from safety image to install safety (e2b42c4)

3.1.0 (2021-12-10)

Features

• publish: configure the GitLab Packages registry as default Python registry for publish (891c32a)

3.0.1 (2021-12-10)

Bug Fixes

• preserve explicit project dependencies versions when installing tools (c0c9464)

3.0.0 (2021-11-20)

Features

• fully integration of poetry (f0406de)

refacto

• py-doc: remove Python doc build (10a8150)

BREAKING CHANGES