Skip to content

Choose a tag to compare

@github-actions github-actions released this 21 Jun 06:41
· 95 commits to main since this release
Immutable release. Only release title and notes can be modified.
0181999

v1.2.23

CytoScnPy 1.2.23 improves CI/CD failure gates, dependency-gate behavior, Python package typing, and contributor validation documentation.

Highlights

  • Added new main-analysis failure gates: --fail-on-secrets, --fail-on-danger, --fail-on-missing-deps, and --fail-on-unused-deps.
  • Added dependency-subcommand gates: cytoscnpy deps --fail-on-unused, --fail-on-missing, --fail-on-extra-installed, and --fail-on-orphans.
  • Made security and dependency gates enable the scans they require, so gate commands fail on the intended result category without needing extra scan flags.
  • Improved gate output handling for structured outputs so JSON-style reports do not get mixed with human-readable gate banners.
  • Tightened Python package typing by adding a native-module stub and cleaning the Python CLI/pytest-plugin type surface for strict basedpyright.
  • Moved basedpyright into the normal prek run --all-files contributor workflow and refreshed dev dependency pins used by the checks.
  • Documented the new failure gates across README, CLI docs, usage docs, pre-commit docs, contributing docs, and roadmap notes.
  • Bumped core workspace/package metadata to 1.2.23 and VS Code extension metadata to 0.1.23.

Why This Matters

This release makes CytoScnPy stricter and more predictable in CI. A command such as --fail-on-danger or --fail-on-missing-deps now turns on the analysis needed for that gate and exits with code 1 when matching findings are present. That reduces false confidence from CI jobs that looked strict but did not run the required scan category.

For contributors, the release also makes the normal local gate closer to the project’s real release expectations by including strict Python type-checking and dependency auditing in the documented prek run --all-files path.

CLI And Config Gates

  • Main analysis can now fail on secrets, danger/taint findings, missing dependencies, and unused dependencies.
  • Config support was added for fail_on_secrets, fail_on_danger, and dependency gate settings under cytoscnpy.deps.
  • Gate status messages now respect structured output mode instead of printing extra text into JSON-like outputs.

Dependency Analysis

  • The deps subcommand can now return a failing exit code for unused, missing, extra-installed, or orphan dependency findings.
  • --fail-on-extra-installed and --fail-on-orphans also enable their matching reports, so those gates have findings to evaluate.

Python And Contributor Tooling

  • Added python/cytoscnpy/cytoscnpy.pyi so the native run(args) API has an explicit typed surface.
  • Cleaned python/cytoscnpy/cli.py and python/cytoscnpy/pytest_plugin.py for strict type checking.
  • Narrowed basedpyright to python/cytoscnpy and made the hook part of the normal pre-commit/prek run instead of push-only.
  • Refreshed dev dependency pins, including idna and pymdown-extensions.

Documentation And Packaging

  • Updated docs to show the new CI/CD gate flags and dependency-subcommand gate flags.
  • Updated contributor docs to make prek run --all-files the documented full local check.
  • Bumped Cargo workspace version to 1.2.23 and VS Code extension version to 0.1.23.

Merged Changes

  • #94 Add CI failure gates and basedpyright prek coverage
  • #95 Document fail gates and bump versions

Full Changelog: v1.2.22...v1.2.23