Merge feature/add-cicd-workflow into master

Author: unsektor

.github/workflows/ci.yaml

@@ -0,0 +1,118 @@
+name: CI/CD Pipeline
+
+on:
+  push:
+    tags: '*.*.*'
+  release:
+    types: [ published ]
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        python-version:
+          - '3.8'
+          - '3.9'
+          - '3.10'
+          - '3.11'
+          - '3.12'
+          - '3.13'
+          - '3.14'
+
+    steps:
+    - uses: actions/checkout@v3
+
+    - name: Set up Python ${{ matrix.python-version }}
+      uses: actions/setup-python@v4
+      with:
+        python-version: ${{ matrix.python-version }}
+
+    - name: Install dependencies
+      run: |
+        python -m pip install --upgrade pip
+        python -m pip install pytest pytest-cov
+        # pip install -e ".[test]"
+
+    - name: Run tests
+      run: |
+        # python -m pytest tests/ --cov=lib --cov-report=xml
+        export PYTHONPATH="$(pwd -P)/lib:$PYTHONPATH"
+        python -m pytest tests/ --cov=lib --cov-report=term
+
+    # - name: Upload coverage to Codecov
+    #   uses: codecov/codecov-action@v3
+    #   if: matrix.python-version == '3.10'
+    #   with:
+    #     file: ./coverage.xml
+    #     fail_ci_if_error: true
+
+  security:
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v3
+
+    - name: Set up Python
+      uses: actions/setup-python@v4
+      with:
+        python-version: '3.10'
+
+    - name: Install safety
+      run: pip install safety
+
+    - name: Check dependencies for vulnerabilities
+      run: safety check --full-report
+
+    - name: Install bandit
+      run: pip install bandit
+
+    - name: Static security analysis
+      run: bandit -r lib/ -f json -o bandit-report.json --skip B101
+
+  type-check:
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v3
+
+    - name: Set up Python
+      uses: actions/setup-python@v4
+      with:
+        python-version: '3.10'
+
+    - name: Install mypy
+      run: pip install mypy
+
+    - name: Type checking
+      run: |
+        export PYTHONPATH="$(pwd -P)/lib:$PYTHONPATH"
+        mypy lib/ --disable-error-code import-untyped
+
+  build:
+    needs: [test, security, type-check]
+    runs-on: ubuntu-latest
+
+    steps:
+    - uses: actions/checkout@v3
+
+    - name: Set up Python
+      uses: actions/setup-python@v4
+      with:
+        python-version: '3.10'
+
+    - name: Install build dependencies
+      run: pip install build wheel
+
+    - name: Build wheel package
+      run: python -m build --wheel
+
+    - name: List artifacts
+      run: ls -la dist/
+
+    - name: Upload wheel to GitHub Releases
+      uses: svenstaro/upload-release-action@v2
+      with:
+        repo_token: ${{ secrets.GITHUB_TOKEN }}
+        file: dist/*.whl
+        tag: ${{ github.ref }}
+        overwrite: true
+        file_glob: true

changelog.md

@@ -6,13 +6,23 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 ## Unreleased
+### Added
 
 - [ ] feature: implement r/w stream edit using reading by chunks instead of by lines 
 - [ ] enhancement: change dictionary format: better compress
 - [ ] feature: extend dictionary: add more words, handle separately lower/upper-cased specific words
 - [ ] feature: add lint option
 - [ ] feature: add replacement stats
 
+## [0.1.2] — 2025-12-28
+### Added
+
+- [x] feature: setup github CI/CD workflow configuration
+
+### Fixed
+
+- [x] fix: `mypy` & `bandit` warnings
+
 ## [0.1.1] — 2025-03-02
 ### Fixed
 
@@ -76,5 +86,6 @@ Initial release
 
 </details>
 
-[0.1.1]: https://github.com/md-py/md.language.yofication/releases/tag/0.1.1
+[0.2.0]: https://github.com/md-py/md.language.yofication/releases/compare/0.1.1...0.1.2
+[0.1.1]: https://github.com/md-py/md.language.yofication/releases/compare/0.1.0...0.1.1
 [0.1.0]: https://github.com/md-py/md.language.yofication/releases/tag/0.1.0

lib/md/language/yofication/__main__.py

@@ -110,7 +110,7 @@ def main(arguments: typing.Sequence[str]) -> int:
 
     if not parsed_arguments.replace:
         # todo consider to separate to `--interactive/-i` and `-`$
-        application = ApplicationEchoLines(yoficate=yoficate)
+        application: ApplicationEchoLines = ApplicationEchoLines(yoficate=yoficate)
         if file_path_count == 0:
             application.run(input_stream=sys.stdin)
             return 0
@@ -121,8 +121,8 @@ def main(arguments: typing.Sequence[str]) -> int:
         return 0
 
     assert parsed_arguments.replace and file_path_count >= 1
-    application = ApplicationReplaceLines(yoficate=yoficate)
-    application.run(file_path_list=parsed_arguments.file_path)
+    application: ApplicationReplaceLines = ApplicationReplaceLines(yoficate=yoficate)  # type: ignore[no-redef]
+    application.run(file_path_list=parsed_arguments.file_path)  # type: ignore[call-arg]
     return 0
 
 

setup.py

@@ -6,7 +6,7 @@
     long_description = fh.read()
 
 
-def create_zip():
+def create_zip() -> None:
     with open('lib/md/language/yofication/_data/dictionary.ru_RU.txt', 'rb') as source:
         with bz2.BZ2File('lib/md/language/yofication/_data/dictionary.ru_RU.txt.bz2', 'w') as stream:
             stream.write(source.read())