Skip to content

Choose a tag to compare

@bact bact released this 19 Aug 13:55
· 1435 commits to main since this release

This patch release fixes SBOM Merkle-root/content-type accuracy in embed-wheel, stops the Action forcing a generic filename, adds PITLOOM_SBOM_OUTPUT_PATH output, and validates+attaches the SBOM in the release workflow.

Note

Limitation notes: While Pitloom can work with any Python project, it currently gathers more information from Hatchling project. More complete support for setuptools is planned for version 0.17.0. uv_build, Poetry Core, PDM-Backend, and Flit-Core are also in the plan. See full limitation notes.

Install for CLI/Python API:

pip install -U pitloom

Install for AI coding assistant:

See the website on how to install Pitloom AI skills and the Claude Code plugin.
Try asking the AI agent to "put SBOM into wheel".

Report issues: https://github.com/bact/pitloom/issues

What's changed

  • Use smart default name for GitHub Action by @bact in #171
  • Fix review findings: preserve wheel truth, decouple release upload, avoid mutation by @bact in #174
  • Fix content-type/file-header loss in embed-wheel SBOMs by @bact in #172

Full Changelog: v0.16.1...v0.16.2