ci: Future-proof range of tested Python versions

.github/workflows/constraints.txt

@@ -1 +1,2 @@
-nox==2026.2.9
+tox==4.50.1
+tox-uv==1.33.4

.github/workflows/release.yaml

@@ -23,7 +23,7 @@ jobs:
       with:
         fetch-depth: 0
         persist-credentials: false
-    - uses: hynek/build-and-inspect-python-package@efb823f52190ad02594531168b7a2d5790e66516 # v2.14.0
+    - uses: hynek/build-and-inspect-python-package@f3d069d0f9a3c9169d1a483318bb0e09876a6fd6 # v2.15.0
       id: baipp
 
   publish:
@@ -37,7 +37,7 @@ jobs:
     permissions:
       id-token: write  # Needed for OIDC PyPI publishing
     steps:
-    - uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
+    - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
       with:
         name: Packages
         path: dist

.github/workflows/test.yml

@@ -8,63 +8,89 @@ on:
     - .github/workflows/test.yml
     - tap_pulumi_cloud/**
     - tests/**
-    - noxfile.py
     - pyproject.toml
     - uv.lock
   pull_request:
-    branches: [main]
-    types: [opened, synchronize, reopened]
     paths:
     - .github/workflows/constraints.txt
     - .github/workflows/test.yml
     - tap_pulumi_cloud/**
     - tests/**
-    - noxfile.py
     - pyproject.toml
     - uv.lock
+  workflow_dispatch:
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+
+env:
+  FORCE_COLOR: 1
 
 jobs:
+  build-package:
+    name: Build & verify package
+    runs-on: ubuntu-latest
+    outputs:
+      supported-python-versions: ${{ steps.baipp.outputs.supported_python_classifiers_json_array }}
+    steps:
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        with:
+          fetch-depth: 0
+          persist-credentials: false
+      - uses: hynek/build-and-inspect-python-package@f3d069d0f9a3c9169d1a483318bb0e09876a6fd6 # v2.15.0
+        id: baipp
+
   test:
+    name: Tests
     runs-on: ubuntu-latest
-    env:
-      FORCE_COLOR: "1"
-      NOXSESSION: tests-${{ matrix.python-version }}
-      UV_CONSTRAINT: ${{ github.workspace }}/.github/workflows/constraints.txt
-      UV_PYTHON: ${{ matrix.python-version }}
+    needs: [build-package]
     strategy:
-      fail-fast: false
+      fail-fast: true
+      max-parallel: 1
       matrix:
-        python-version:
-        - "3.10"
-        - "3.11"
-        - "3.12"
-        - "3.13"
-        - "3.14"
+        python-version: ${{ fromJson(needs.build-package.outputs.supported-python-versions) }}
 
     steps:
     - name: Checkout code
       uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       with:
-        fetch-depth: 0
+        persist-credentials: false
 
-    - name: Set up Python ${{ matrix.python-version }}
-      uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
+    - name: Install uv
+      uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
       with:
         python-version: ${{ matrix.python-version }}
-        allow-prereleases: true
-
-    - name: Install uv
-      uses: astral-sh/setup-uv@803947b9bd8e9f986429fa0c5a41c367cd732b41 # v7.2.1
 
     - name: Install Nox
+      env:
+        UV_CONSTRAINT: ${{ github.workspace }}/.github/workflows/constraints.txt
       run: |
-        uv tool install nox
-        nox --version
+        uv tool install --with tox-uv tox
+        tox --version
 
     - name: Run tests
       env:
         TAP_PULUMI_CLOUD_TOKEN: ${{ secrets.TAP_PULUMI_CLOUD_TOKEN }}
         TAP_PULUMI_CLOUD_ORGANIZATIONS: ${{ secrets.TAP_PULUMI_CLOUD_ORGANIZATIONS }}
         TAP_PULUMI_CLOUD_START_DATE: ${{ secrets.TAP_PULUMI_CLOUD_START_DATE }}
+        PYTHON_VERSION: ${{ matrix.python-version }}
       run: |
-        nox
+        tox -e ${PYTHON_VERSION}
+
+  typing:
+    name: Type Checking
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+    - name: Setup uv
+      uses: astral-sh/setup-uv@6ee6290f1cbc4156c0bdd66691b2c144ef8df19a # v7.4.0
+    - name: Run Tox
+      run: >
+        uvx
+        --managed-python
+        --with=tox-uv
+        tox -e typing

.pre-commit-config.yaml

@@ -16,26 +16,31 @@ repos:
   - id: trailing-whitespace
 
 - repo: https://github.com/tox-dev/pyproject-fmt
-  rev: v2.11.1
+  rev: v2.20.0
   hooks:
   - id: pyproject-fmt
 
 - repo: https://github.com/astral-sh/ruff-pre-commit
-  rev: v0.14.10
+  rev: v0.15.6
   hooks:
   - id: ruff-check
     args: [--fix, --exit-non-zero-on-fix, --show-fixes]
   - id: ruff-format
 
 - repo: https://github.com/astral-sh/uv-pre-commit
-  rev: 0.9.26
+  rev: 0.10.11
   hooks:
   - id: uv-lock
   - id: uv-sync
 
 - repo: https://github.com/python-jsonschema/check-jsonschema
-  rev: 0.36.1
+  rev: 0.37.0
   hooks:
   - id: check-dependabot
   - id: check-github-workflows
   - id: check-meltano
+
+- repo: https://github.com/hukkin/mdformat
+  rev: 1.0.0
+  hooks:
+  - id: mdformat

README.md

@@ -6,27 +6,27 @@ Built with the [Meltano Singer SDK](https://sdk.meltano.com).
 
 ## Capabilities
 
-* `catalog`
-* `discover`
-* `about`
-* `stream-maps`
-* `schema-flattening`
+- `catalog`
+- `discover`
+- `about`
+- `stream-maps`
+- `schema-flattening`
 
 > **Note**
 > Incremental replication is not supported by any streams, so the `state` capability is not supported by this tap.
 
 ## Settings
 
-| Setting             | Required | Default | Description |
+| Setting | Required | Default | Description |
 |:--------------------|:--------:|:-------:|:------------|
-| token               | True     | None    | API Token for Pulumi Cloud |
-| organizations       | True     | None    | List of organizations to sync |
-| start_date          | False    | None    | Earliest datetime to get data from |
-| requests_cache      | False    | None    | Cache configuration for HTTP requests |
-| stream_maps         | False    | None    | Config object for stream maps capability. For more information check out [Stream Maps](https://sdk.meltano.com/en/latest/stream_maps.html). |
-| stream_map_config   | False    | None    | User-defined config values to be used within map expressions. |
-| flattening_enabled  | False    | None    | 'True' to enable schema flattening and automatically expand nested properties. |
-| flattening_max_depth| False    | None    | The max depth to flatten schemas. |
+| token | True | None | API Token for Pulumi Cloud |
+| organizations | True | None | List of organizations to sync |
+| start_date | False | None | Earliest datetime to get data from |
+| requests_cache | False | None | Cache configuration for HTTP requests |
+| stream_maps | False | None | Config object for stream maps capability. For more information check out [Stream Maps](https://sdk.meltano.com/en/latest/stream_maps.html). |
+| stream_map_config | False | None | User-defined config values to be used within map expressions. |
+| flattening_enabled | False | None | 'True' to enable schema flattening and automatically expand nested properties. |
+| flattening_max_depth| False | None | The max depth to flatten schemas. |
 
 A full list of supported settings and capabilities is available by running: `tap-pulumi-cloud --about`