Added
- Security tooling: pip-audit, bandit, detect-secrets, cyclonedx-bom, pip-licenses
- CI security job running pip-audit, detect-secrets, and bandit in parallel
- CI build-and-validate job with SBOM generation and license report
- Dependabot configuration for Python dependencies and GitHub Actions
.secrets.baseline for detect-secrets
[tool.bandit] configuration in pyproject.toml
- Version-tag sanity check in release workflow
- SBOM and license report attached to GitHub Releases
Changed
- CI workflow: added
tags-ignore, concurrency control, updated actions (checkout@v6, setup-uv@v7, codecov@v5)
- Release workflow: removed redundant test re-runs, streamlined to build → TestPyPI → PyPI → GitHub Release
- License format migrated to plain SPDX string (
license = "Apache-2.0") for setuptools 77+
Removed
- Redundant
License :: classifier (superseded by SPDX license field)
[dependency-groups] section (twine moved into dev extras)
Installation
uv add cuvis-ai-schemas==0.1.4
# With extras:
uv add 'cuvis-ai-schemas[proto]==0.1.4'
PyPI: https://pypi.org/project/cuvis-ai-schemas/0.1.4/