v4.2.10 — Self-Contained Publish (Umbrella Only)

v4.2.10 — Self-Contained Publish (Umbrella Only)

The first fully working PyPI release via Trusted Publishing (OIDC), with PEP 740 attestations attached.

What changed

• jack-data-science-agent is now self-contained: all dsa_* modules are vendored into the wheel (src/data_science_agent/_vendor), so pip install jack-data-science-agent works standalone — no separate dsa-* distributions needed.
• Publish workflow publishes only the umbrella: rm -rf dist && uv build + packages-dir: dist/. Prior attempts failed because all workspace packages were built into dist/ and the dsa-* have no trusted publisher (HTTP 400).

Verified

• pip install jack-data-science-agent from PyPI succeeds; Agent().analyze_sync() runs end-to-end from the vendored copy (COMPLETED + evidence).
• Wheel: 0 dsa-* Requires-Dist, includes the dsa console script.
• Gates: pytest 257 · mypy 104 clean · ruff pass · mkdocs --strict pass.

Provenance

• Attestations: jack_data_science_agent-4.2.10-py3-none-any.whl.publish.attestation + sdist — verify with gh attestation verify or PyPI.
• Tags v4.2.0–v4.2.9 unchanged.