Skip to content

feat(python): add package cooldown and pyrefly#3323

Merged
hubcio merged 6 commits into
apache:masterfrom
slbotbm:python-package-cooldown
May 28, 2026
Merged

feat(python): add package cooldown and pyrefly#3323
hubcio merged 6 commits into
apache:masterfrom
slbotbm:python-package-cooldown

Conversation

@slbotbm
Copy link
Copy Markdown
Contributor

@slbotbm slbotbm commented May 26, 2026

Which issue does this PR close?

Closes #3246

Rationale

  • 7 day cooldown was needed to harden supply chain
  • pyrefly replaces mypy as the type checker

What changed?

  • pyrefly was added to the sdk, examples, and bdd directories. It was also added in precommit and the ci. The resulting changes in python files are errors that it caught.
  • 7 day cooldown was added to all three pyproject.toml's

Local Execution

  • Passed
  • Pre-commit hooks ran

AI Usage

If AI tools were used, please answer:

  1. Which tools? codex
  2. Scope of usage? mistake correction
  3. How did you verify the generated code works correctly? verified manually
  4. Can you explain every line of the code if asked? yes

@github-actions
Copy link
Copy Markdown

Thanks for the pull request. It is now waiting for review, labeled S-waiting-on-review.

You can update that label as the review goes back and forth, with slash commands - each on its own line, in a regular PR comment (not an inline review reply):

  • /ready - mark it S-waiting-on-review again, after addressing feedback
  • /author - mark it S-waiting-on-author (maintainers, or anyone who has had a PR merged before)
  • /request-review @user ... - request reviewers (@user or @org/team)

Commands take up to ~90s to apply. If no reaction (👍 or 😕) appears on your comment, the apply step likely failed - check the repo's Actions tab for the PR Triage Apply run. Commands posted inside a review body (rather than a normal comment) cannot be reacted to, so they stay log-only.

See CONTRIBUTING.md for details.

@github-actions github-actions Bot added the S-waiting-on-review PR is waiting on a reviewer label May 26, 2026
Comment thread foreign/python/pyproject.toml
@codecov
Copy link
Copy Markdown

codecov Bot commented May 26, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 73.53%. Comparing base (0df7d38) to head (828a684).

Additional details and impacted files
@@             Coverage Diff              @@
##             master    #3323      +/-   ##
============================================
- Coverage     73.57%   73.53%   -0.05%     
  Complexity      943      943              
============================================
  Files          1241     1241              
  Lines        115147   115147              
  Branches      91634    91664      +30     
============================================
- Hits          84725    84676      -49     
- Misses        27574    27586      +12     
- Partials       2848     2885      +37     
Components Coverage Δ
Rust Core 74.50% <ø> (-0.02%) ⬇️
Java SDK 58.44% <ø> (ø)
C# SDK 70.14% <ø> (-0.63%) ⬇️
Python SDK 81.06% <ø> (ø)
Node SDK 91.53% <ø> (ø)
Go SDK 40.20% <ø> (ø)
see 27 files with indirect coverage changes
🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@hubcio hubcio merged commit a2316a0 into apache:master May 28, 2026
86 checks passed
@github-actions github-actions Bot removed the S-waiting-on-review PR is waiting on a reviewer label May 28, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[python sdk] implement protections against python supply chain attacks with uv

4 participants