Skip to content

Migrate from socket-sdk-python to socketdev>=3.0.0 and switch to uv #113

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 2 commits into from
Aug 24, 2025

Conversation

dacoburn
Copy link
Collaborator

  • Update pyproject.toml to use socketdev>=3.0.0,<4.0.0 instead of socket-sdk-python
  • Replace pip-tools with uv for dependency management
  • Update Makefile to use uv commands (uv pip compile, uv pip sync, etc.)
  • Update Dockerfile to install socketdev instead of socket-sdk-python
  • Update deployment scripts to reference socketdev
  • Update README to reflect uv usage
  • Regenerate all requirements files with uv
  • Add requirements-test.txt file
  • Update SOCKET_SDK_PATH references to point to ../socketdev
  • Version bump to 2.2.3

Public Changelog

  • Switched to using the renamed Python SDK socketdev at version 3.0.0
  • Switched to uv from rye

- Update pyproject.toml to use socketdev>=3.0.0,<4.0.0 instead of socket-sdk-python
- Replace pip-tools with uv for dependency management
- Update Makefile to use uv commands (uv pip compile, uv pip sync, etc.)
- Update Dockerfile to install socketdev instead of socket-sdk-python
- Update deployment scripts to reference socketdev
- Update README to reflect uv usage
- Regenerate all requirements files with uv
- Add requirements-test.txt file
- Update SOCKET_SDK_PATH references to point to ../socketdev
- Version bump to 2.2.3
@dacoburn dacoburn requested a review from a team as a code owner August 23, 2025 23:19
@dacoburn dacoburn requested review from mikolalysenko and cenobitedk and removed request for a team August 23, 2025 23:19
Copy link

socket-security bot commented Aug 23, 2025

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Addedjeepney@​0.9.098100100100100
Addedsocketdev@​3.0.099100100100100
Addedbackports-tarfile@​1.2.099100100100100
Addedpywin32-ctypes@​0.2.3100100100100100
Addedbackports-asyncio-runner@​1.2.0100100100100100

View full report

Copy link

github-actions bot commented Aug 23, 2025

🚀 Preview package published!

Install with:

pip install --index-url https://test.pypi.org/simple/ --extra-index-url https://pypi.org/simple socketsecurity==2.2.4.dev1

Docker image: socketdev/cli:pr-113

Copy link

socket-security-staging bot commented Aug 23, 2025

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Addedjeepney@​0.9.098100100100100
Addedsocketdev@​3.0.099100100100100
Addedbackports-tarfile@​1.2.099100100100100
Addedpywin32-ctypes@​0.2.3100100100100100
Addedbackports-asyncio-runner@​1.2.0100100100100100

View full report

- Replace requirements.txt files with uv.lock
- Update Makefile to use 'uv sync' instead of pip-compile workflow
- Simplify dependency management with 'uv lock' and 'uv sync --all-extras'
- Update test and lint commands to use 'uv run'
- Remove old requirements.txt, requirements-dev.txt, requirements-test.txt files
- Update README documentation to reflect uv.lock workflow
- Version bump to 2.2.4
@dacoburn dacoburn added the Product Changelog New features for the public changelog label Aug 23, 2025
Copy link
Member

@Planeshifter Planeshifter left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks fine to me and Claude didn't flag anything either.

@dacoburn dacoburn merged commit f808583 into main Aug 24, 2025
6 checks passed
@dacoburn dacoburn deleted the doug/migrate-to-socketdev-and-uv branch August 24, 2025 00:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Product Changelog New features for the public changelog
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants