release: promote 2.1.3 to main

.cz.yaml

@@ -2,6 +2,6 @@
 commitizen:
   name: cz_conventional_commits
   tag_format: $version
-  version: 2.0.1
+  version: 2.1.3
   version_files:
   - src/histdatacom/__init__.py

.dockerignore

@@ -0,0 +1,9 @@
+**
+!Dockerfile
+!pyproject.toml
+!README.md
+!LICENSE
+!container
+!container/constraints.txt
+!src
+!src/**

.github/workflows/ci.yml

@@ -32,6 +32,28 @@ jobs:
         run: ./actionlint -color
         shell: bash
 
+  docs:
+    name: Build documentation
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Check out source
+        uses: actions/checkout@v7.0.0
+
+      - name: Set up Python
+        uses: actions/setup-python@v6.3.0
+        with:
+          python-version: "3.13"
+          cache: pip
+
+      - name: Install documentation dependencies
+        run: |
+          python -m pip install --upgrade pip "setuptools>=77" wheel
+          python -m pip install -e ".[docs]"
+
+      - name: Build documentation with warnings as errors
+        run: python -m sphinx -W --keep-going -b html docs docs/_build/html
+
   test:
     name: Python ${{ matrix.python-version }} on ${{ matrix.os }}
     runs-on: ${{ matrix.os }}
@@ -57,7 +79,7 @@ jobs:
         uses: actions/checkout@v7.0.0
 
       - name: Set up Python
-        uses: actions/setup-python@v6.2.0
+        uses: actions/setup-python@v6.3.0
         with:
           python-version: ${{ matrix.python-version }}
           cache: pip
@@ -67,21 +89,8 @@ jobs:
           python -m pip install --upgrade pip "setuptools>=77" wheel
           python -m pip install -e ".[test]"
 
-      - name: Run tests with coverage
-        run: python -m pytest --cov=histdatacom --cov-report=term-missing:skip-covered --cov-report=xml --cov-report=html
-
-      - name: Enforce coverage threshold
-        run: python -m coverage report
-
-      - name: Upload coverage reports
-        if: always()
-        uses: actions/upload-artifact@v7.0.1
-        with:
-          name: coverage-${{ matrix.os }}-py${{ matrix.python-version }}
-          path: |
-            coverage.xml
-            htmlcov/
-          if-no-files-found: warn
+      - name: Run tests
+        run: python -m pytest
 
       - name: Compile source and tests
         run: python -m compileall -q src tests scripts samples test.py snippets.py
@@ -110,6 +119,42 @@ jobs:
           PY
         shell: bash
 
+  production-coverage:
+    name: Production coverage
+    if: github.event_name == 'pull_request' && github.base_ref == 'main' && github.head_ref == 'dev'
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Check out source
+        uses: actions/checkout@v7.0.0
+
+      - name: Set up Python
+        uses: actions/setup-python@v6.3.0
+        with:
+          python-version: "3.13"
+          cache: pip
+
+      - name: Install test dependencies
+        run: |
+          python -m pip install --upgrade pip "setuptools>=77" wheel
+          python -m pip install -e ".[test]"
+
+      - name: Run production coverage
+        run: python -m pytest --cov=histdatacom --cov-report=term-missing:skip-covered --cov-report=xml --cov-report=html
+
+      - name: Enforce coverage threshold
+        run: python -m coverage report
+
+      - name: Upload production coverage report
+        if: always()
+        uses: actions/upload-artifact@v7.0.1
+        with:
+          name: production-coverage
+          path: |
+            coverage.xml
+            htmlcov/
+          if-no-files-found: warn
+
   build:
     name: Build package artifacts
     runs-on: ubuntu-latest
@@ -119,7 +164,7 @@ jobs:
         uses: actions/checkout@v7.0.0
 
       - name: Set up Python
-        uses: actions/setup-python@v6.2.0
+        uses: actions/setup-python@v6.3.0
         with:
           python-version: "3.13"
           cache: pip
@@ -175,6 +220,8 @@ jobs:
               "jupyter",
               "pandas",
               "pyarrow",
+              "statsmodels",
+              "arch",
               "temporalio",
           ):
               metadata.version(distribution_name)
@@ -184,6 +231,8 @@ jobs:
               "ipywidgets",
               "pandas",
               "pyarrow",
+              "statsmodels",
+              "arch",
               "temporalio",
           ):
               if importlib.util.find_spec(module_name) is None:
@@ -215,7 +264,7 @@ jobs:
         uses: actions/checkout@v7.0.0
 
       - name: Set up Python
-        uses: actions/setup-python@v6.2.0
+        uses: actions/setup-python@v6.3.0
         with:
           python-version: "3.13"
           cache: pip

.github/workflows/container.yml

@@ -0,0 +1,105 @@
+name: Container
+
+on:
+  pull_request:
+    paths:
+      - ".dockerignore"
+      - ".github/workflows/container.yml"
+      - "Dockerfile"
+      - "container/constraints.txt"
+      - "scripts/smoke_container.py"
+      - "tests/unit/test_container_distribution.py"
+      - "tests/unit/test_smoke_container.py"
+  push:
+    tags:
+      - "v*"
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: ${{ github.event_name != 'push' }}
+
+jobs:
+  validate:
+    name: Build and smoke native image
+    runs-on: ubuntu-latest
+    timeout-minutes: 20
+
+    steps:
+      - name: Check out source
+        uses: actions/checkout@v7.0.0
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v4.2.0
+
+      - name: Build and smoke application image
+        run: |
+          python scripts/smoke_container.py \
+            --image histdatacom:ci-smoke \
+            --version "${GITHUB_REF_NAME}" \
+            --revision "${GITHUB_SHA}"
+        shell: bash
+
+  publish:
+    name: Publish multi-platform image
+    if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags/v')
+    needs: validate
+    runs-on: ubuntu-latest
+    timeout-minutes: 45
+    permissions:
+      contents: read
+      id-token: write
+      packages: write
+
+    steps:
+      - name: Check out source
+        uses: actions/checkout@v7.0.0
+
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v4.2.0
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v4.2.0
+
+      - name: Log in to GitHub Container Registry
+        uses: docker/login-action@v4.4.0
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Resolve image metadata
+        id: metadata
+        uses: docker/metadata-action@v6.2.0
+        with:
+          images: ghcr.io/${{ github.repository }}
+          flavor: latest=auto
+          tags: |
+            type=semver,pattern={{version}}
+            type=semver,pattern={{major}}.{{minor}}
+            type=sha,prefix=sha-
+
+      - name: Resolve build timestamp
+        id: build
+        run: echo "created=$(date -u +'%Y-%m-%dT%H:%M:%SZ')" >> "${GITHUB_OUTPUT}"
+        shell: bash
+
+      - name: Build and publish image
+        uses: docker/build-push-action@v7.3.0
+        with:
+          build-args: |
+            IMAGE_CREATED=${{ steps.build.outputs.created }}
+            IMAGE_REVISION=${{ github.sha }}
+            IMAGE_VERSION=${{ github.ref_name }}
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+          context: .
+          labels: ${{ steps.metadata.outputs.labels }}
+          platforms: linux/amd64,linux/arm64
+          provenance: mode=max
+          push: true
+          sbom: true
+          tags: ${{ steps.metadata.outputs.tags }}