Merge pull request #166 from sonatype-nexus-community/dev/4.x

feat!: `jake 4.0.0` release

Author: madpah

.github/workflows/ci.yml

@@ -27,7 +27,7 @@ on:
 
 env:
   PYTHON_VERSION_DEFAULT: "3.10"
-  POETRY_VERSION: "1.8.3"
+  POETRY_VERSION: "2.4.1"
   REPORTS_DIR: CI_reports
 
 jobs:
@@ -39,22 +39,15 @@ jobs:
       - name: Checkout
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
+      - name: Install Poetry
+        run: pipx install poetry==${{ env.POETRY_VERSION }}
+
       - name: Set up Python
         uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
         with:
           python-version: ${{ env.PYTHON_VERSION_DEFAULT }}
           architecture: 'x64'
-
-      - name: Install poetry
-        uses: Gr1N/setup-poetry@48b0f77c8c1b1b19cb962f0f00dff7b4be8f81ec # v9
-        with:
-          poetry-version: ${{ env.POETRY_VERSION }}
-
-      - name: Cache poetry virtualenv
-        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
-        with:
-          path: ~/.cache/pypoetry/virtualenvs
-          key: ${{ runner.os }}-poetry-lint-${{ hashFiles('poetry.lock') }}
+          cache: 'poetry'
 
       - name: Install dependencies
         run: poetry install --no-ansi
@@ -71,28 +64,21 @@ jobs:
         include:
           - python-version: "3.10"
             tox-env: mypy-locked
-          - python-version: "3.8"
+          - python-version: "3.10"
             tox-env: mypy-lowest
     steps:
       - name: Checkout
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
+      - name: Install Poetry
+        run: pipx install poetry==${{ env.POETRY_VERSION }}
+
       - name: Set up Python
         uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
         with:
           python-version: ${{ matrix.python-version }}
           architecture: 'x64'
-
-      - name: Install poetry
-        uses: Gr1N/setup-poetry@48b0f77c8c1b1b19cb962f0f00dff7b4be8f81ec # v9
-        with:
-          poetry-version: ${{ env.POETRY_VERSION }}
-
-      - name: Cache poetry virtualenv
-        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
-        with:
-          path: ~/.cache/pypoetry/virtualenvs
-          key: ${{ runner.os }}-poetry-${{ matrix.python-version }}-${{ hashFiles('poetry.lock') }}
+          cache: 'poetry'
 
       - name: Install dependencies
         run: poetry install --no-ansi
@@ -101,19 +87,21 @@ jobs:
         run: poetry run tox -e ${{ matrix.tox-env }}
 
   build-and-test:
-    name: Build & Test (Python ${{ matrix.python-version }}, ${{ matrix.deps }})
-    runs-on: ubuntu-latest
+    name: Build & Test (Python ${{ matrix.python-version }}, ${{ matrix.deps }}, ${{ matrix.os }})
+    runs-on: ${{ matrix.os }}
     env:
       REPORTS_ARTIFACT: tests-reports
     strategy:
       fail-fast: false
       matrix:
+        os:
+          - ubuntu-latest
+          - windows-latest
         python-version:
+          - "3.13"
           - "3.12"
           - "3.11"
           - "3.10"
-          - "3.9"
-          - "3.8"
         deps:
           - locked
           - lowest
@@ -125,22 +113,15 @@ jobs:
       - name: Create reports directory
         run: mkdir ${{ env.REPORTS_DIR }}
 
+      - name: Install Poetry
+        run: pipx install poetry==${{ env.POETRY_VERSION }}
+
       - name: Set up Python
         uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
         with:
           python-version: ${{ matrix.python-version }}
           architecture: 'x64'
-
-      - name: Install poetry
-        uses: Gr1N/setup-poetry@48b0f77c8c1b1b19cb962f0f00dff7b4be8f81ec # v9
-        with:
-          poetry-version: ${{ env.POETRY_VERSION }}
-
-      - name: Cache poetry virtualenv
-        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
-        with:
-          path: ~/.cache/pypoetry/virtualenvs
-          key: ${{ runner.os }}-poetry-${{ matrix.python-version }}-${{ matrix.deps }}-${{ hashFiles('poetry.lock') }}
+          cache: 'poetry'
 
       - name: Install dependencies
         run: poetry install --no-ansi
@@ -149,6 +130,7 @@ jobs:
         run: poetry build
 
       - name: Run tests
+        shell: bash
         run: |
           PY_VER=$(echo "${{ matrix.python-version }}" | tr -d '.')
           poetry run tox -e py${PY_VER}-${{ matrix.deps }}
@@ -163,12 +145,41 @@ jobs:
         if: ${{ ! cancelled() }}
         uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
-          name: ${{ env.REPORTS_ARTIFACT }}-${{ matrix.python-version }}-${{ matrix.deps }}
+          name: ${{ env.REPORTS_ARTIFACT }}-${{ matrix.os }}-${{ matrix.python-version }}-${{ matrix.deps }}
           path: ${{ env.REPORTS_DIR }}
           if-no-files-found: error
 
+  integration-guide:
+    name: Integration Test - Sonatype Guide
+    runs-on: ubuntu-latest
+    needs: build-and-test
+    # Secrets are unavailable on PRs from forks; skip rather than fail
+    if: ${{ github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository }}
+    steps:
+      - name: Checkout
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+
+      - name: Install Poetry
+        run: pipx install poetry==${{ env.POETRY_VERSION }}
+
+      - name: Set up Python
+        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
+        with:
+          python-version: ${{ env.PYTHON_VERSION_DEFAULT }}
+          architecture: 'x64'
+          cache: 'poetry'
+
+      - name: Install dependencies
+        run: poetry install --no-ansi
+
+      - name: Run Sonatype Guide scan
+        env:
+          SONATYPE_GUIDE_USERNAME: ${{ secrets.OSSI_USERNAME }}
+          SONATYPE_GUIDE_TOKEN: ${{ secrets.SONATYPE_GUIDE_TOKEN }}
+        run: poetry run jake -w guide
+
   sonatype-lifecycle:
-    name: Sonatype Lifecycle (Build Stage)
+    name: Sonatype Lifecycle Policy Evaluation
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
@@ -181,5 +192,5 @@ jobs:
           username: ${{ secrets.SONATYPE_LIFECYCLE_USERNAME }}
           password: ${{ secrets.SONATYPE_LIFECYCLE_PASSWORD }}
           application-id: jake
-          stage: build
+          stage: ${{ github.ref == 'refs/heads/main' && 'build' || 'develop' }}
           scan-targets: '.'

.gitignore

@@ -166,4 +166,7 @@ dmypy.json
 .sonatype-config
 
 # AI Coding Agents
-.claude
+.claude
+
+# Local planning documents
+MODERNISATION.md

.sonarcloud.properties

@@ -1,3 +1,4 @@
 sonar.sources=jake
 sonar.tests=tests
 sonar.python.coverage.reportPaths=CI_reports/coverage.xml
+sonar.python.version=3.13