Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/actions/security-issues/action.yml
Original file line number Diff line number Diff line change
Expand Up @@ -39,7 +39,7 @@ runs:
- name: Install Python Toolbox / Security tool
shell: bash
run: |
pip install exasol-toolbox==7.0.0
pip install exasol-toolbox==8.0.0

- name: Create Security Issue Report
shell: bash
Expand Down
2 changes: 2 additions & 0 deletions doc/changes/changelog.md

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

64 changes: 64 additions & 0 deletions doc/changes/changes_8.0.0.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,64 @@
# 8.0.0 - 2026-05-13

## Summary

In this major release, several modifications were made to the PTB's workflow templates:

* For automatically resolving vulnerabilities, the `dependency-update.yml` workflow was
added. For more details, see the [Update Dependencies](https://exasol.github.io/python-toolbox/main/user_guide/features/github_workflows/index.html#update-dependencies) section.
* The periodic run which was previously executed in the `ci.yml` has been moved to its
own `periodic-validation.yml` and will run weekly. This also has been modified to
run the `slow-checks.yml` so that more complete linting and coverage information is
sent to Sonar.
* With the addition of `periodic-validation.yml`, the `pr-merge.yml` was reduced so that
it only executes `gh-pages.yml`.
* The unit tests job has been moved from `checks.yml` to its own `fast-tests.yml` file.
* Workflow extensions were added to `fast-tests` and `merge-gate`. This allows users to
add custom `fast-tests-extension.yml` and `merge-gate-extension.yml` files. For more
details, check out the [Workflow Extensions](https://exasol.github.io/python-toolbox/main/user_guide/features/github_workflows/index.html#workflow-extensions) section.
* `slow-checks.yml` is only maintained by the project (not the PTB). See the [Not Maintained by the PTB](https://exasol.github.io/python-toolbox/main/user_guide/features/github_workflows/index.html#not-maintained-by-the-ptb) section.

## Features

* #829: Extended removing a job from a workflow to also remove it from the `needs` of another job
* #825: Created two workflows by splitting up previous ones:
* Moved the periodic jobs in `ci.yml` to its own `periodic-validation.yml`
* Moved the unit tests job in `checks.yml` to its own `fast-tests.yml`
* #730: Added workflow extensions to `fast-tests` and `merge-gate`
* #756: Added `dependency-update.yml` to automate resolving vulnerabilities with a generated pull request
* #792: Improved `dependency-update.yml` documentation
* #831: Switched `slow-checks.yml` to be provided by the project and not maintained by the PTB and improved output of pydantic validation of `.workflow-patcher.yml`

## Bugfix

* #563: Fixed merge-gate to prevent auto-merges from happening when integration tests failed

## Security Issues

This release fixes vulnerabilities by updating dependencies:

| Dependency | Vulnerability | Affected | Fixed in |
|------------|---------------|----------|----------|
| urllib3 | CVE-2026-44431 | 2.6.3 | 2.7.0 |
| urllib3 | CVE-2026-44432 | 2.6.3 | 2.7.0 |

* #836: Relocked `poetry.lock`

## Dependency Updates

### `main`

* Updated dependency `coverage:7.13.4` to `7.14.0`
* Updated dependency `importlib-resources:6.5.2` to `7.1.0`
* Updated dependency `mypy:1.19.1` to `2.1.0`
* Updated dependency `nox:2026.2.9` to `2026.4.10`
* Updated dependency `pip-licenses:5.5.1` to `5.5.5`
* Updated dependency `pre-commit:4.5.1` to `4.6.0`
* Updated dependency `pydantic:2.12.5` to `2.13.4`
* Updated dependency `pysonar:1.0.2.1722` to `1.5.0.4793`
* Updated dependency `sphinxcontrib-mermaid:2.0.1` to `2.0.2`
* Updated dependency `typer:0.24.1` to `0.25.1`

### `dev`

* Updated dependency `types-pyyaml:6.0.12.20250915` to `6.0.12.20260510`
36 changes: 0 additions & 36 deletions doc/changes/unreleased.md
Original file line number Diff line number Diff line change
@@ -1,39 +1,3 @@
# Unreleased

## Summary

In this major release, several modifications were made to the PTB's workflow templates:

* For automatically resolving vulnerabilities, the `dependency-update.yml` workflow was
added. For more details, see the [Dependency Update](https://exasol.github.io/python-toolbox/main/user_guide/features/github_workflows/index.html#dependency-update) section.
* The periodic run which was previously executed in the `ci.yml` has been moved to its
own `periodic-validation.yml` and will run weekly. This also has been modified to
run the `slow-checks.yml` so that more complete linting and coverage information is
sent to Sonar.
* With the addition of `periodic-validation.yml`, the `pr-merge.yml` was reduced so that
it only executes `gh-pages.yml`.
* The unit tests job has been moved from `checks.yml` to its own `fast-tests.yml` file.
* Workflow extensions were added to `fast-tests` and `merge-gate`. This allows users to
add custom `fast-tests-extension.yml` and `merge-gate-extension.yml` files. For more
details, check out the [Workflow Extensions](https://exasol.github.io/python-toolbox/main/user_guide/features/github_workflows/index.html#workflow-extensions) section.
* `slow-checks.yml` is only maintained by the project (not the PTB). See the [Not Maintained by the PTB](https://exasol.github.io/python-toolbox/main/user_guide/features/github_workflows/index.html#not-maintained-by-the-ptb) section.

## Features


* #829: Extended removing a job from a workflow to also remove it from the `needs` of another job
* #825: Created two workflows by splitting up previous ones:
* Moved the periodic jobs in `ci.yml` to its own `periodic-validation.yml`
* Moved the unit tests job in `checks.yml` to its own `fast-tests.yml`
* #730: Added workflow extensions to `fast-tests` and `merge-gate`
* #756: Added `dependency-update.yml` to automate resolving vulnerabilities with a generated pull request
* #792: Improved `dependency-update.yml` documentation
* #831: Switched `slow-checks.yml` to be provided by the project and not maintained by the PTB and improved output of pydantic validation of `.workflow-patcher.yml`

## Bugfix

* #563: Fixed merge-gate to prevent auto-merges from happening when integration tests failed

## Security Issues

* #836: Relocked `poetry.lock`
Original file line number Diff line number Diff line change
Expand Up @@ -19,7 +19,7 @@ jobs:

- name: Set up Python & Poetry Environment
id: set-up-python-and-poetry-environment
uses: exasol/python-toolbox/.github/actions/python-environment@v7
uses: exasol/python-toolbox/.github/actions/python-environment@v8
with:
python-version: "(( minimum_python_version ))"
poetry-version: "(( dependency_manager_version ))"
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -17,7 +17,7 @@ jobs:

- name: Set up Python & Poetry Environment
id: set-up-python-and-poetry-environment
uses: exasol/python-toolbox/.github/actions/python-environment@v7
uses: exasol/python-toolbox/.github/actions/python-environment@v8
with:
python-version: "(( minimum_python_version ))"
poetry-version: "(( dependency_manager_version ))"
Expand Down
14 changes: 7 additions & 7 deletions exasol/toolbox/templates/github/workflows/checks.yml
Original file line number Diff line number Diff line change
Expand Up @@ -16,7 +16,7 @@ jobs:

- name: Set up Python & Poetry Environment
id: set-up-python-and-poetry-environment
uses: exasol/python-toolbox/.github/actions/python-environment@v7
uses: exasol/python-toolbox/.github/actions/python-environment@v8
with:
python-version: "(( minimum_python_version ))"
poetry-version: "(( dependency_manager_version ))"
Expand All @@ -42,7 +42,7 @@ jobs:

- name: Set up Python & Poetry Environment
id: set-up-python-and-poetry-environment
uses: exasol/python-toolbox/.github/actions/python-environment@v7
uses: exasol/python-toolbox/.github/actions/python-environment@v8
with:
python-version: "(( minimum_python_version ))"
poetry-version: "(( dependency_manager_version ))"
Expand All @@ -67,7 +67,7 @@ jobs:

- name: Set up Python & Poetry Environment
id: set-up-python-and-poetry-environment
uses: exasol/python-toolbox/.github/actions/python-environment@v7
uses: exasol/python-toolbox/.github/actions/python-environment@v8
with:
python-version: ${{ matrix.python-versions }}
poetry-version: "(( dependency_manager_version ))"
Expand Down Expand Up @@ -103,7 +103,7 @@ jobs:

- name: Set up Python & Poetry Environment
id: set-up-python-and-poetry-environment
uses: exasol/python-toolbox/.github/actions/python-environment@v7
uses: exasol/python-toolbox/.github/actions/python-environment@v8
with:
python-version: ${{ matrix.python-versions }}
poetry-version: "(( dependency_manager_version ))"
Expand All @@ -129,7 +129,7 @@ jobs:

- name: Set up Python & Poetry Environment
id: set-up-python-and-poetry-environment
uses: exasol/python-toolbox/.github/actions/python-environment@v7
uses: exasol/python-toolbox/.github/actions/python-environment@v8
with:
python-version: ${{ matrix.python-versions }}
poetry-version: "(( dependency_manager_version ))"
Expand Down Expand Up @@ -159,7 +159,7 @@ jobs:

- name: Set up Python & Poetry Environment
id: set-up-python-and-poetry-environment
uses: exasol/python-toolbox/.github/actions/python-environment@v7
uses: exasol/python-toolbox/.github/actions/python-environment@v8
with:
python-version: "(( minimum_python_version ))"
poetry-version: "(( dependency_manager_version ))"
Expand All @@ -181,7 +181,7 @@ jobs:

- name: Set up Python & Poetry Environment
id: set-up-python-and-poetry-environment
uses: exasol/python-toolbox/.github/actions/python-environment@v7
uses: exasol/python-toolbox/.github/actions/python-environment@v8
with:
python-version: "(( minimum_python_version ))"
poetry-version: "(( dependency_manager_version ))"
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -31,7 +31,7 @@ jobs:

- name: Set up Python & Poetry Environment
id: set-up-python-and-poetry-environment
uses: exasol/python-toolbox/.github/actions/python-environment@v6
uses: exasol/python-toolbox/.github/actions/python-environment@v8
with:
python-version: "(( minimum_python_version ))"
poetry-version: "(( dependency_manager_version ))"
Expand Down
2 changes: 1 addition & 1 deletion exasol/toolbox/templates/github/workflows/fast-tests.yml
Original file line number Diff line number Diff line change
Expand Up @@ -21,7 +21,7 @@ jobs:

- name: Set up Python & Poetry Environment
id: set-up-python-and-poetry-environment
uses: exasol/python-toolbox/.github/actions/python-environment@v7
uses: exasol/python-toolbox/.github/actions/python-environment@v8
with:
python-version: ${{ matrix.python-versions }}
poetry-version: "(( dependency_manager_version ))"
Expand Down
2 changes: 1 addition & 1 deletion exasol/toolbox/templates/github/workflows/gh-pages.yml
Original file line number Diff line number Diff line change
Expand Up @@ -19,7 +19,7 @@ jobs:

- name: Set up Python & Poetry Environment
id: set-up-python-and-poetry-environment
uses: exasol/python-toolbox/.github/actions/python-environment@v7
uses: exasol/python-toolbox/.github/actions/python-environment@v8
with:
python-version: "(( minimum_python_version ))"
poetry-version: "(( dependency_manager_version ))"
Expand Down
2 changes: 1 addition & 1 deletion exasol/toolbox/templates/github/workflows/matrix-all.yml
Original file line number Diff line number Diff line change
Expand Up @@ -19,7 +19,7 @@ jobs:

- name: Set up Python & Poetry Environment
id: set-up-python-and-poetry-environment
uses: exasol/python-toolbox/.github/actions/python-environment@v7
uses: exasol/python-toolbox/.github/actions/python-environment@v8
with:
python-version: "(( minimum_python_version ))"
poetry-version: "(( dependency_manager_version ))"
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -19,7 +19,7 @@ jobs:

- name: Set up Python & Poetry Environment
id: set-up-python-and-poetry-environment
uses: exasol/python-toolbox/.github/actions/python-environment@v7
uses: exasol/python-toolbox/.github/actions/python-environment@v8
with:
python-version: "(( minimum_python_version ))"
poetry-version: "(( dependency_manager_version ))"
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -19,7 +19,7 @@ jobs:

- name: Set up Python & Poetry Environment
id: set-up-python-and-poetry-environment
uses: exasol/python-toolbox/.github/actions/python-environment@v7
uses: exasol/python-toolbox/.github/actions/python-environment@v8
with:
python-version: "(( minimum_python_version ))"
poetry-version: "(( dependency_manager_version ))"
Expand Down
2 changes: 1 addition & 1 deletion exasol/toolbox/templates/github/workflows/report.yml
Original file line number Diff line number Diff line change
Expand Up @@ -20,7 +20,7 @@ jobs:

- name: Set up Python & Poetry Environment
id: set-up-python-and-poetry-environment
uses: exasol/python-toolbox/.github/actions/python-environment@v7
uses: exasol/python-toolbox/.github/actions/python-environment@v8
with:
python-version: "(( minimum_python_version ))"
poetry-version: "(( dependency_manager_version ))"
Expand Down
2 changes: 1 addition & 1 deletion exasol/toolbox/templates/github/workflows/slow-checks.yml
Original file line number Diff line number Diff line change
Expand Up @@ -31,7 +31,7 @@ jobs:

- name: Set up Python & Poetry Environment
id: set-up-python-and-poetry-environment
uses: exasol/python-toolbox/.github/actions/python-environment@v7
uses: exasol/python-toolbox/.github/actions/python-environment@v8
with:
python-version: ${{ matrix.python-version }}
poetry-version: "(( dependency_manager_version ))"
Expand Down
2 changes: 1 addition & 1 deletion project-template/cookiecutter.json
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,7 @@
"author_email": "opensource@exasol.com",
"project_short_tag": "",
"python_version_min": "3.10",
"exasol_toolbox_version_range": ">=7.0.0,<8",
"exasol_toolbox_version_range": ">=8.0.0,<9",
"license_year": "{% now 'utc', '%Y' %}",
"__repo_name_slug": "{{cookiecutter.package_name}}",
"__package_name_slug": "{{cookiecutter.package_name}}",
Expand Down
2 changes: 1 addition & 1 deletion pyproject.toml
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
[project]
name = "exasol-toolbox"
version = "7.0.0"
version = "8.0.0"
description = "Your one-stop solution for managing all standard tasks and core workflows of your Python project."
authors = [
{ name = "Nicola Coretti", email = "nicola.coretti@exasol.com" },
Expand Down