v7.10.0

Note

7.10.0 is available on 🐍 PyPI and 🐙 GitHub.

• Breaking: the update-dep-graph job moved from autofix.yaml into the release engine, its only firing moment being a release push. A required check or needs: edge naming it under Autofix must follow.
• Breaking: manual version-bump commits now read [changelog] Bump minor version to `vX.Y.0`: every version-machinery commit carries the [changelog] prefix, and anything matching the old unprefixed titles must follow.
• Breaking: the default test matrix moved to ubuntu-26.04-arm and ubuntu-26.04, retiring ubuntu-slim: every job now runs on a test-matrix runner. Pin the old images back with test-matrix.replace.os = { "ubuntu-26.04-arm" = "ubuntu-24.04-arm" }.
• Breaking: a report emitted with --output-format github-actions now travels as a file: the step output is named <key>_file and holds a path, so a large report reaches a PR body intact. A workflow reading steps.<id>.outputs.diff_table must read .diff_table_file instead.
• New lint-deps command and release-lane job, blocking a release whose dependencies do not all resolve from PyPI: git branches, forks, local paths, direct URLs and private indexes. Exempt a package with [tool.repomatic] lint-deps.allow.
• New runner-images job and CLI command, opening an issue that lists GitHub's open runner-image announcements and flags the ones retiring an image the repo runs on. Opt out with runner-images = false.
• New is_python_package metadata key. sync-bumpversion now gates on it instead of is_python_project, so the job no longer opens [tool.bumpversion] PRs against a uv virtual project ([tool.uv] package = false).
• New --prefix-file option on pr-body, and a matching GHA_PR_BODY_PREFIX_FILE variable, reading the body prefix from a file.
• Autofix jobs no longer run on version-bump pushes, which only re-checked machine-generated commits; drift stays covered by the next push and the weekly sweep.
• repomatic init no longer writes the running version's workflow content beside a pin the cooldown held back: a repository that already carries workflows keeps them untouched until the release is adopted.
• The repomatic-ship skill now reconciles bundled skills and agents as a third pass, judges a false-positive autofix PR against current main, and distinguishes a superseded intra-cycle measurement from a genuine contradiction.
• macOS Nuitka builds now hit their compile cache: ccache hashes paths relative to the runner root (base_dir), so uv's randomly-named cache path no longer changes the hashed compiler arguments every run.
• The tool runner now retries a download up to 3 times on transient network failures, instead of failing the job on a one-off TLS or truncation error.
• Standalone binary tests now run for every healthy target when a sibling build fails, instead of being skipped wholesale.
• Oversized step outputs are trimmed instead of killing the step that reads them with Argument list too long.
• The setup guide issue now reopens when Actions SHA pinning is turned off, instead of closing while reporting every repository setting complete.

Full changelog: v7.9.0...v7.10.0