·
95 commits
to main
since this release
Immutable
release. Only release title and notes can be modified.
v1.2.23
CytoScnPy 1.2.23 improves CI/CD failure gates, dependency-gate behavior, Python package typing, and contributor validation documentation.
Highlights
- Added new main-analysis failure gates:
--fail-on-secrets,--fail-on-danger,--fail-on-missing-deps, and--fail-on-unused-deps. - Added dependency-subcommand gates:
cytoscnpy deps --fail-on-unused,--fail-on-missing,--fail-on-extra-installed, and--fail-on-orphans. - Made security and dependency gates enable the scans they require, so gate commands fail on the intended result category without needing extra scan flags.
- Improved gate output handling for structured outputs so JSON-style reports do not get mixed with human-readable gate banners.
- Tightened Python package typing by adding a native-module stub and cleaning the Python CLI/pytest-plugin type surface for strict
basedpyright. - Moved
basedpyrightinto the normalprek run --all-filescontributor workflow and refreshed dev dependency pins used by the checks. - Documented the new failure gates across README, CLI docs, usage docs, pre-commit docs, contributing docs, and roadmap notes.
- Bumped core workspace/package metadata to
1.2.23and VS Code extension metadata to0.1.23.
Why This Matters
This release makes CytoScnPy stricter and more predictable in CI. A command such as --fail-on-danger or --fail-on-missing-deps now turns on the analysis needed for that gate and exits with code 1 when matching findings are present. That reduces false confidence from CI jobs that looked strict but did not run the required scan category.
For contributors, the release also makes the normal local gate closer to the project’s real release expectations by including strict Python type-checking and dependency auditing in the documented prek run --all-files path.
CLI And Config Gates
- Main analysis can now fail on secrets, danger/taint findings, missing dependencies, and unused dependencies.
- Config support was added for
fail_on_secrets,fail_on_danger, and dependency gate settings undercytoscnpy.deps. - Gate status messages now respect structured output mode instead of printing extra text into JSON-like outputs.
Dependency Analysis
- The
depssubcommand can now return a failing exit code for unused, missing, extra-installed, or orphan dependency findings. --fail-on-extra-installedand--fail-on-orphansalso enable their matching reports, so those gates have findings to evaluate.
Python And Contributor Tooling
- Added
python/cytoscnpy/cytoscnpy.pyiso the nativerun(args)API has an explicit typed surface. - Cleaned
python/cytoscnpy/cli.pyandpython/cytoscnpy/pytest_plugin.pyfor strict type checking. - Narrowed
basedpyrighttopython/cytoscnpyand made the hook part of the normal pre-commit/prek run instead of push-only. - Refreshed dev dependency pins, including
idnaandpymdown-extensions.
Documentation And Packaging
- Updated docs to show the new CI/CD gate flags and dependency-subcommand gate flags.
- Updated contributor docs to make
prek run --all-filesthe documented full local check. - Bumped Cargo workspace version to
1.2.23and VS Code extension version to0.1.23.
Merged Changes
Full Changelog: v1.2.22...v1.2.23