Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Adopt nexB/skeleton and bump dependencies #2818

Merged
merged 134 commits into from
Jan 30, 2022
Merged

Adopt nexB/skeleton and bump dependencies #2818

merged 134 commits into from
Jan 30, 2022

Conversation

pombredanne
Copy link
Member

This PR adopts the https://github.com/nexB/skeleton

This means mostly switching using venv/ subdir for the virtual env, instead of the root repo directory.

In addition it also updates dependency versions for bugs and security updates.

Some highlights include:

Tasks

  • Reviewed contribution guidelines
  • PR is descriptively titled 📑 and links the original issue above 🔗
  • Tests pass -- look for a green checkbox ✔️ a few minutes after opening your PR
    Run tests locally to check for errors.
  • Commits are in uniquely-named feature branch and has no merge conflicts 📁
  • Signed-off-by: Philippe Ombredanne pombredanne@nexb.com

steven-esser and others added 30 commits September 22, 2020 15:53
Signed-off-by: Steven Esser <sesser@nexb.com>
This commit adds the inital skeleton files needed for a bare-bones
python library. Includes a simple configure script and setup.py file

Signed-off-by: Steven Esser <sesser@nexb.com>
Signed-off-by: Steven Esser <sesser@nexb.com>
* Add AUTHORS.rst
* Add CHANGELOG.rst
* Add setup.cfg

Signed-off-by: Steven Esser <sesser@nexb.com>
* Add PEP 517/518 pyproject.toml file
* Add setuptools_scm to handle versioning
* Add setup.py content to setup.cfg
* Update setup.py to act as a shim (so pip install -e works)

Addresses: #2

Signed-off-by: Steven Esser <sesser@nexb.com>
Signed-off-by: Steven Esser <sesser@nexb.com>
Signed-off-by: Steven Esser <sesser@nexb.com>
Signed-off-by: Steven Esser <sesser@nexb.com>
Signed-off-by: Steven Esser <sesser@nexb.com>
Signed-off-by: Steven Esser <sesser@nexb.com>
    * Create configure.bat so we can use our skeleton for Windows projects

Signed-off-by: Jono Yang <jyang@nexb.com>
    * Remove unused variables and options

Signed-off-by: Jono Yang <jyang@nexb.com>
Signed-off-by: Jono Yang <jyang@nexb.com>
    * Remove rerun option from azure-pipelines.yml

Signed-off-by: Jono Yang <jyang@nexb.com>
Signed-off-by: Jono Yang <jyang@nexb.com>
    * We have this to ensure the line ending of configure.bat is always CRLF

Signed-off-by: Jono Yang <jyang@nexb.com>
Signed-off-by: Jono Yang <jyang@nexb.com>
Merge changes from develop to main
Signed-off-by: Ayan Sinha Mahapatra <ayansmahapatra@gmail.com>
Update .gitignore to ignore Jupyter temp files
Signed-off-by: Steven Esser <sesser@nexb.com>
Adds a RTD configuration file (v2) to customize builds.

Signed-off-by: Ayan Sinha Mahapatra <ayansmahapatra@gmail.com>
Signed-off-by: Ayan Sinha Mahapatra <ayansmahapatra@gmail.com>
Signed-off-by: Ayan Sinha Mahapatra <ayansmahapatra@gmail.com>
Signed-off-by: Ayan Sinha Mahapatra <ayansmahapatra@gmail.com>
Taken from https://www.apache.org/licenses/LICENSE-2.0.txt

Signed-off-by: Philippe Ombredanne <pombredanne@nexb.com>
Ensure we use official full text of Apache 2.0
Signed-off-by: Philippe Ombredanne <pombredanne@nexb.com>
Signed-off-by: Philippe Ombredanne <pombredanne@nexb.com>
Allow to launch builds and then fetch built wheels later
Improve support for newer Pythons and OS versions.

Signed-off-by: Philippe Ombredanne <pombredanne@nexb.com>
Signed-off-by: Philippe Ombredanne <pombredanne@nexb.com>
Signed-off-by: Philippe Ombredanne <pombredanne@nexb.com>
Signed-off-by: Philippe Ombredanne <pombredanne@nexb.com>
Signed-off-by: Philippe Ombredanne <pombredanne@nexb.com>
Signed-off-by: Philippe Ombredanne <pombredanne@nexb.com>
Signed-off-by: Philippe Ombredanne <pombredanne@nexb.com>
This is confusing and counter-productive. SCANCODE_DEV_MODE env var
can be used if needed.

Signed-off-by: Philippe Ombredanne <pombredanne@nexb.com>
Signed-off-by: Philippe Ombredanne <pombredanne@nexb.com>
Make fetch_built_wheel work
Add new strip classifiers option to fix_thirdparty
Improve simple requirements parsing to get the latest versions

Signed-off-by: Philippe Ombredanne <pombredanne@nexb.com>
Use venv/bin paths everywhere
Correct extras (ScanCode uses dev and not testing)
Format Windows BAT files

Signed-off-by: Philippe Ombredanne <pombredanne@nexb.com>
Signed-off-by: Philippe Ombredanne <pombredanne@nexb.com>
Signed-off-by: Philippe Ombredanne <pombredanne@nexb.com>
Also align setup-mini.cfg with setup.cfg

Signed-off-by: Philippe Ombredanne <pombredanne@nexb.com>
Signed-off-by: Philippe Ombredanne <pombredanne@nexb.com>
These were left behind after a rename

Signed-off-by: Philippe Ombredanne <pombredanne@nexb.com>
Signed-off-by: Philippe Ombredanne <pombredanne@nexb.com>
Signed-off-by: Philippe Ombredanne <pombredanne@nexb.com>
Now using dparse2, pkginfo2 and pip-requirement-parser
This addresses a security vulnerability in dparse.

Signed-off-by: Philippe Ombredanne <pombredanne@nexb.com>
This is a fix for a security issue CVE-2021-43818

Signed-off-by: Philippe Ombredanne <pombredanne@nexb.com>
Signed-off-by: Philippe Ombredanne <pombredanne@nexb.com>
Use consistentently the venv subdirectory in scripts and documentation

Signed-off-by: Philippe Ombredanne <pombredanne@nexb.com>
The [packages] extra is only for Linux and provides support for RPMs
and Windows registry handling. It is needed when doing a develoipment
installation for testing.

Signed-off-by: Philippe Ombredanne <pombredanne@nexb.com>
@pombredanne pombredanne merged commit bcc541f into develop Jan 30, 2022
@pombredanne pombredanne deleted the adopt-skeleton branch January 30, 2022 16:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants