v3.0.1

What's Changed

• fix bug in Python version glob expansion (passing incorrect repository URL to supported-pythons) by @zacharyburnett in #405

Full Changelog: v3.0.0...v3.0.1

v3.0.0

Breaking Changes

• If a value is provided for coverage uploading (coverage: codecov, coverage: codecov-oidc, or coverage: github), tests must end with a .coverage file at the workspace root. Use the COVERAGE_FILE environment variable; for instance, you can set it explicitly in tox.ini. See the relevant section of the docs for more information.

  set_env =
    COVERAGE_FILE={toxinidir}/.coverage

• The fill:, fill_platforms:, and fill_factors: inputs are now removed in favor of using version glob syntax py3* directly in envs:. For example, to produce the following set of envs:

      envs: |
         - linux: pep8
           pytest: false
         - linux: py311-xdist
         - linux: py312-xdist
         - linux: py313-xdist
         - linux: py314-xdist
         - macos: py311-xdist
         - macos: py312-xdist
         - macos: py313-xdist
         - macos: py314-xdist

  on OpenAstronomy/github-actions-workflows@v2 you would have used fill:, fill_platforms:, and fill_factors::

   uses: OpenAstronomy/github-actions-workflows/.github/workflows/tox.yml@v2
     with:
       envs: |
         - linux: pep8
           pytest: false
       fill: true
       fill_platforms: linux,macos
       fill_factors: xdist

  but now with OpenAstronomy/github-actions-workflows@v3 you use a py* version glob instead:

   uses: OpenAstronomy/github-actions-workflows/.github/workflows/tox.yml@v3
     with:
       envs: |
         - linux: pep8
           pytest: false
         - linux: py3*-xdist
         - macos: py3*-xdist

What's Changed

• Coverage reporting refactor and cleanup by @Cadair in #397
• Update codecov/codecov-action to 7.0 to fix signature error by @Cadair in #400
• Better Reporting of Coverage Reporting Errors by @Cadair in #399
• Disable codecov comments by @Cadair in #401
• DEP: upgrade cibuildwheel to 4.0.0 by @neutrinoceros in #393
• DEP: upgrade Github Action dependencies by @neutrinoceros in #398
• replace fill: parameter with logic to expand py3* glob syntax in envs by @zacharyburnett in #392

Full Changelog: v2.6.5...v3.0.0

v2.6.5

What's Changed

• Do not explicitly specify uv version in calls to setup-uv by @Cadair in #396
• Bump codecov/code-covaction to 7.0 to fix signature verification issue in #400

Full Changelog: v2.6.4...v2.6.5

v2.6.4

What's Changed

• bump tag used in docs examples by @zacharyburnett in #382
• fix incorrect key in supported_pythons.py by @zacharyburnett in #388
• Bump the versions of the following actions:
  • pypa/gh-action-pypi-publish == 1.14
  • actions/upload-artifact == v7.0.1
  • astral-sh/setup-uv == 8.1.0
  • test-summary/action == 2.6

Full Changelog: v2.6.2...v2.6.4

v2.6.3

What's Changed

• bump tag used in docs examples by @zacharyburnett in #382
• fix incorrect key in supported_pythons.py by @zacharyburnett in #388
• Bump the actions group in /.github/workflows with 2 updates by @dependabot[bot] in #387

Full Changelog: v2.6.2...v2.6.3

v2.6.2

What's Changed

• Revert adding --cov to pytest args when using codecov by @Cadair in #384

Full Changelog: v2.6.1...v2.6.2

v2.6.1

What's Changed

• Fix incorrect include-hidden-files argument to upload-artifact by @Cadair in #381

Full Changelog: v2.6.0...v2.6.1

v2.6.0

What's Changed

This release includes some new features for artifacts and automatic selection of python versions, as well as the deprecation of the conda support as the tox-conda plugin is no longer maintained.

Features

• dynamically add supported Python versions to tox matrix, drawing from package metadata (requires-python) by @zacharyburnett in #326
• deprecate conda parameter with warning by @zacharyburnett in #360
• Add an artifact-archive flag to allow upload of non-zipped artifacts by @Cadair in #378
• Add a way to pass include-hidden-files and if-no-files-found to upload-artifact action by @Cadair in #379

Internal

• SEC: add cooldown period to dependabot settings by @neutrinoceros in #365
• SEC: disable default gha permissions by @neutrinoceros in #367
• SEC: avoid leaking credentials by @neutrinoceros in #366
• SEC/DEP: consistently use exact commit hashes for dependency pinning by @neutrinoceros in #371
• use uv to manage Python installation and run scripts by @zacharyburnett in #353
• SEC: fix exploitable template-injection surface (1/n) by @neutrinoceros in #369
• SEC: fix exploitable template-injection surface (2/n) by @neutrinoceros in #370
• don't try to build or restore a cache for the tox_matrix.py script by @zacharyburnett in #375
• SEC: disable default gha permissions (2/2) by @neutrinoceros in #377
• SEC: setup zizmor's pre-commit hook by @neutrinoceros in #376
• Bump the actions group in /.github/workflows with 5 updates by @dependabot[bot] in #380

Full Changelog: v2.5.0...v2.6.0

v2.5.0

What's Changed

• Add the ability to specify a custom working directory for tox and custom build directory for publish by @astrofrog in #358
• Add option to generate test coverage report without codecov by @zacharyburnett in #207
• Don't use dep groups in tox pipeline by @Cadair in #356

Full Changelog: v2.4.0...v2.5.0

v2.4.0

The main feature added in this release is support for uploading dists built with the publish workflows in a subsequent step in your workflow.
This, amongst other things, allows you to use PyPI's Trusted Publishers for authentication.

What's Changed

• add save_artifacts option to publish workflow by @braingram in #346
• ensure uv is always available from cibuildwheel by @neutrinoceros in #331
• Add documentation and tests for using external upload-to-pypi, which enables using trusted publishing by @Cadair in #348
• Add permissions to trusted publishing example by @Cadair in #349

Full Changelog: v2.3.1...v2.4.0