Merge branch 'main' into pyproject-build

Author: bmos

.github/workflows/python-checks.yml

@@ -32,7 +32,7 @@ jobs:
                   python-version: ${{ matrix.python-version }}
 
             - name: Install uv
-              uses: install-pinned/uv@51bb057ca8857db7531f188d414ba32b7bb16d2b  # 0.4.12
+              uses: install-pinned/uv@05389e8b8c79922b1376aee8c2d598b3219da230  # 0.4.12
 
             - name: Install dependencies
               env:
@@ -66,7 +66,7 @@ jobs:
                   python-version: "3.13"
 
             - name: Install uv
-              uses: install-pinned/uv@51bb057ca8857db7531f188d414ba32b7bb16d2b  # 0.4.12
+              uses: install-pinned/uv@05389e8b8c79922b1376aee8c2d598b3219da230  # 0.4.12
 
             - name: Install dependencies
               run: |
@@ -88,7 +88,7 @@ jobs:
                   python-version: "3.13"
 
             - name: Install uv
-              uses: install-pinned/uv@51bb057ca8857db7531f188d414ba32b7bb16d2b  # 0.4.12
+              uses: install-pinned/uv@05389e8b8c79922b1376aee8c2d598b3219da230  # 0.4.12
 
             - name: Install dependencies
               run: |
@@ -110,7 +110,7 @@ jobs:
                   python-version: "3.13"
 
             - name: Install uv
-              uses: install-pinned/uv@51bb057ca8857db7531f188d414ba32b7bb16d2b  # 0.4.12
+              uses: install-pinned/uv@05389e8b8c79922b1376aee8c2d598b3219da230  # 0.4.12
 
             - name: Install bandit
               run: |
@@ -145,7 +145,7 @@ jobs:
                   cache: pip
 
             - name: Install uv
-              uses: install-pinned/uv@51bb057ca8857db7531f188d414ba32b7bb16d2b  # 0.4.12
+              uses: install-pinned/uv@05389e8b8c79922b1376aee8c2d598b3219da230  # 0.4.12
 
             - name: Install module and dependencies
               run: |

.github/workflows/release.yml

@@ -2,20 +2,24 @@ name: Build & Publish Wheels + Source
 
 on:
   release:
-    types: [published]
+    types:
+      - published
+  workflow_dispatch:    
 
 permissions:
     contents: read
+    
 
 jobs:
-  build_wheels:
-    name: Build wheels on ${{ matrix.os }}
-    runs-on: ${{ matrix.os }}
+  build_source:
+    if: github.repository_owner == 'move-coop'
+    environment: release
+        
+    runs-on: ubuntu-latest
 
-    strategy:
-      fail-fast: false
-      matrix:
-        os: [ubuntu-latest, windows-latest, macos-latest]
+    permissions:
+      # IMPORTANT: this permission is mandatory for trusted publishing
+      id-token: write
 
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
@@ -27,7 +31,7 @@ jobs:
             cache: "pip"
 
       - name: Install uv
-        uses: install-pinned/uv@b9511b633710c8bbe8ba48376771dba624746799  # 0.4.12
+        uses: install-pinned/uv@05389e8b8c79922b1376aee8c2d598b3219da230  # 0.4.12
 
       - name: Install dependencies
         run: |
@@ -39,46 +43,14 @@ jobs:
           python setup.py check
 
       - name: Build src dist
-        if: ${{ matrix.os == 'ubuntu-latest' }}
         run: |
-          python -m build --sdist --outdir wheels parsons
-
-      - name: Build wheels
-        run: git pull && python -m cibuildwheel parsons/ --output-dir wheels
-
-       # Save wheels as artifacts
-      - name: Upload built wheels
-        uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1
-        with:
-          name: wheels-${{ matrix.os }}
-          path: wheels
-
-  publish_wheels:
-    if: github.repository_owner == 'move-coop'
-    needs: build_wheels
-
-    runs-on: ubuntu-latest
-    environment: release
-
-    permissions:
-      # IMPORTANT: this permission is mandatory for trusted publishing
-      id-token: write
-
-    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-
-      - name: Download wheels
-        uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # v4.1.9
-        with:
-          pattern: wheels-*
-          path: wheels
-          merge-multiple: true
+          python -m build --sdist --outdir dist
 
       # Publish
       - name: Publish
         uses: pypa/gh-action-pypi-publish@76f52bc884231f62b9a034ebfe128415bbaabdfc # v1.12.4
         with:
           verify-metadata: true
           skip-existing: true
-          packages-dir: wheels
+          packages-dir: dist
           verbose: true

.github/workflows/security_scorecard.yml

@@ -74,6 +74,6 @@ jobs:
       # Upload the results to GitHub's code scanning dashboard (optional).
       # Commenting out will disable upload of results to your repo's Code Scanning dashboard
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@39edc492dbe16b1465b0cafca41432d857bdb31a # v3.29.1
+        uses: github/codeql-action/upload-sarif@181d5eefc20863364f96762470ba6f862bdef56b # v3.29.2
         with:
           sarif_file: results.sarif

requirements-dev.txt

@@ -3,7 +3,7 @@ bandit[toml]==1.8.3
 coverage==7.8.0
 pre-commit==4.2.0
 pytest-cov==6.1.1
-pytest-datadir==1.6.1
+pytest-datadir==1.7.2
 pytest-mock==3.14.0
 pytest-xdist==3.6.1
 pytest==8.4.1
@@ -12,9 +12,9 @@ ruff==0.11.7
 testfixtures==8.3.0
 
 # Build and publish requirements
-cibuildwheel==2.23.0
 twine==6.1.0
-wheel==0.45.1
+build
+
 
 # Docs Requirements
 myst-parser==3.0.1;python_version<'3.10'

requirements.txt

@@ -2,12 +2,12 @@ pyairtable==3.0.2
 azure-storage-blob==12.25.1
 boto3>=1.17.98
 boxsdk==3.14.0
-braintree==4.31.0
+braintree==4.37.0
 bs4==0.0.2
 censusgeocode==0.5.2
 civis==1.16.1;python_version<"3.10"  # later Civis versions do not support Python 3.9
 civis==2.4.3;python_version>="3.10"  
-curlify==2.2.1
+curlify==3.0.0
 dbt_core>=1.5.0
 defusedxml>=0.7.1, <=0.8.0
 facebook-business==22.0.2