Skip to content

fix(release): align package metadata and workflow action pins#468

Merged
thomasc-adyen merged 1 commit into
mainfrom
fix/release-publishing
Mar 31, 2026
Merged

fix(release): align package metadata and workflow action pins#468
thomasc-adyen merged 1 commit into
mainfrom
fix/release-publishing

Conversation

@thomasc-adyen

Copy link
Copy Markdown
Contributor

Ensure release automation updates pyproject metadata to prevent duplicate-version PyPI publishes, and pin workflow actions to current immutable SHAs for consistency and security.

@thomasc-adyen thomasc-adyen requested review from a team as code owners March 30, 2026 09:41

@gemini-code-assist gemini-code-assist Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request updates the project version to 15.0.0 and introduces pydantic as a mandatory dependency in setup.py. The reviewer recommends consolidating all package metadata into pyproject.toml to follow modern Python packaging standards (PEP 621), which would resolve the current issue of duplicated metadata across configuration files.

Comment thread setup.py Outdated
Ensure release automation updates pyproject metadata to prevent duplicate-version PyPI publishes, and pin workflow actions to current immutable SHAs for consistency and security.

Co-authored-by: factory-droid[bot] <138933559+factory-droid[bot]@users.noreply.github.com>
@thomasc-adyen thomasc-adyen force-pushed the fix/release-publishing branch from 1c585b1 to 64097b3 Compare March 31, 2026 08:29
@sonarqubecloud

Copy link
Copy Markdown

@thomasc-adyen thomasc-adyen added this pull request to the merge queue Mar 31, 2026
Merged via the queue into main with commit 86cfb2b Mar 31, 2026
14 checks passed
@thomasc-adyen thomasc-adyen deleted the fix/release-publishing branch March 31, 2026 09:18
erdemtuna added a commit to erdemtuna/adyen-python-api-library that referenced this pull request Apr 7, 2026
Make pyproject.toml the single source of truth for all package metadata,
eliminating the duplication between setup.py and pyproject.toml that
caused the pydantic dependency bug (PR Adyen#468).

Changes:
- Simplify setup.py to minimal 2-line shim (FR-002)
- Bump build-system.requires to setuptools>=61.0.0 (FR-005)
- Add [project.urls] with Homepage/Repository/Issues (FR-004)
- Add [tool.setuptools.packages.find] with include=["Adyen*"] (FR-003)
- Update Makefile install to use pyproject.toml extras (FR-006)
- Remove setup.py from release.yml version-files (FR-007)
- Update lint.yml cache key to hash pyproject.toml (FR-008)

Resolves Adyen#471

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants