Merge branch 'develop' into beta

Author: alperenkose

.github/actions/discover_python_version/action.yml

@@ -0,0 +1,31 @@
+name: Discover minimum Python version
+description: Discover the lowest supported Python version based on pyptoject.toml file
+
+inputs:
+  working-directory:
+    required: false
+    default: "./"
+
+outputs:
+  pyversion:
+    description: Lowest supported python version
+    value: ${{ steps.pyversion.outputs.pyver }}
+
+runs:
+  using: composite
+  steps:
+    - name: extract Python version
+      id: pyversion
+      shell: bash
+      run: |
+        # try to extract the 'python = "xxx"' string from TOML file
+        CONSTRAINT=$(grep -E '^python\s*=' pyproject.toml | cut -d= -f2- | tr -d ' "')
+
+        if [[ $CONSTRAINT =~ (>=|\^|~)([0-9]+\.[0-9]+) ]]; then
+            # echo "Operator: ${BASH_REMATCH[1]}"
+            echo "pyver=${BASH_REMATCH[2]}" >> $GITHUB_OUTPUT
+        else
+            echo "No valid Python version found."
+            return 1
+        fi
+      working-directory: ${{ inputs.working-directory }}

.github/do-release.sh

@@ -2,4 +2,4 @@
 
 ansible-galaxy collection build
 ansible-galaxy collection publish paloaltonetworks-panos-* --server release_galaxy
-ansible-galaxy collection publish paloaltonetworks-panos-* --server automation_hub
+ansible-galaxy collection publish paloaltonetworks-panos-* --server automation_hub

.github/update-requirements.py

@@ -0,0 +1,44 @@
+# This script updates the requirements file to match with version constraints in pyproject.yml
+# and also removes subdependencies keeping only the main dependencies
+
+import toml
+import re
+
+# Load pyproject.toml
+with open("pyproject.toml", "r") as f:
+    pyproject = toml.load(f)
+
+# Extract dependencies with their correct version constraints
+main_deps = pyproject["tool"]["poetry"]["dependencies"]
+main_deps.pop("python", None)  # Remove Python entry
+
+# Read exported requirements.txt
+with open("requirements.txt", "r") as f:
+    exported_reqs = f.readlines()
+
+main_reqs = [
+    line
+    for line in exported_reqs
+    if any(line.split("=")[0] == dep for dep in main_deps.keys())
+]
+
+
+# Function to replace package version while keeping extras/markers
+def replace_version(line):
+    match = re.match(r"^([a-zA-Z0-9\-_]+)(\[.*\])?([=><~!]+[^\s;]+)(.*)", line)
+    if match:
+        pkg_name, extras, constraint, rest = match.groups()
+        pkg_name_lower = pkg_name.lower()
+
+        if pkg_name_lower in main_deps:
+            return f"{pkg_name}{extras or ''}{main_deps[pkg_name_lower]}{rest}\n"
+
+    return line
+
+
+# Process and replace package versions
+updated_reqs = [replace_version(line) for line in main_reqs]
+
+# Write cleaned requirements.txt
+with open("requirements.txt", "w") as f:
+    f.writelines(updated_reqs)

.github/workflows/_discover_python_ver.yml

@@ -0,0 +1,28 @@
+name: (sub) Discover Python version
+
+defaults:
+  run:
+    shell: bash
+
+permissions:
+  contents: read
+
+on:
+  workflow_call:
+    outputs:
+      pyversion:
+        description: A discovered Python version
+        value: ${{ jobs.pyversion.outputs.pyversion }}
+
+jobs:
+  pyversion:
+    name: Discover minimum Python version
+    runs-on: ubuntu-latest
+    outputs:
+      pyversion: ${{ steps.pyversion.outputs.pyversion }}
+    steps:
+      - name: checkout code
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+      - name: discover Python version
+        id: pyversion
+        uses: ./.github/actions/discover_python_version

.github/workflows/check_requirements.yml

@@ -0,0 +1,53 @@
+name: Check Requirements
+
+on:
+  workflow_call:
+    inputs:
+      python-version:
+        type: string
+        required: true
+
+env:
+  NAMESPACE: paloaltonetworks
+  COLLECTION_NAME: panos
+
+jobs:
+  needs-update:
+    name: Need Requirements Update
+    runs-on: ubuntu-latest
+    defaults:
+      run:
+        working-directory: ./ansible_collections/${{ env.NAMESPACE }}/${{ env.COLLECTION_NAME }}
+
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        with:
+          path: ./ansible_collections/${{ env.NAMESPACE }}/${{ env.COLLECTION_NAME }}
+
+      - name: Install Python
+        uses: actions/setup-python@b64ffcaf5b410884ad320a9cfac8866006a109aa # v4
+        with:
+          python-version: ${{ inputs.python-version }}
+
+      - name: Install Poetry
+        uses: Gr1N/setup-poetry@15821dc8a61bc630db542ae4baf6a7c19a994844 # v8
+        with:
+          poetry-version: "1.8.5"
+
+      - name: Install dependencies
+        run: poetry install
+
+      - name: Install temp dependencies
+        run: poetry run pip install toml
+
+      - name: Make requirements.txt
+        run: poetry run make reqs
+
+      - name: Check for changes in requirements.txt
+        run: |
+          if git diff --exit-code requirements.txt; then
+            echo "✅ No changes in requirements.txt"
+          else
+            echo "❌ requirements.txt is outdated. Please update it with "make reqs" and commit the changes."
+            exit 1
+          fi