Merge remote-tracking branch 'origin/main'

Author: ahsimb

.github/workflows/pypi_release.yaml

@@ -10,16 +10,17 @@ jobs:
 
   cd-job:
     name: Continuous Delivery
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
 
       - name: SCM Checkout
         uses: actions/checkout@v4
 
       - name: Setup Python & Poetry Environment
-        uses: exasol/python-toolbox/.github/actions/python-environment@0.20.0
+        uses: exasol/python-toolbox/.github/actions/python-environment@v1
         with:
           python-version: "3.10"
+          poetry-version: "2.1.2"
 
       - name: Build Artifacts
         run: poetry build
@@ -35,5 +36,6 @@ jobs:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: >
           gh release create ${GITHUB_REF_NAME}
-          --title ${GITHUB_REF_NAME} -F "./doc/changes/changes_${GITHUB_REF_NAME}.md"
+          --title ${GITHUB_REF_NAME}
+          --notes-file ./doc/changes/changes_${GITHUB_REF_NAME}.md
           dist/*

.github/workflows/pytest.yaml

@@ -8,18 +8,18 @@ jobs:
       fail-fast: false
       matrix:
         python-version: [ "3.10", "3.11" ]
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
 
     steps:
 
       - name: SCM Checkout
         uses: actions/checkout@v4
 
       - name: Setup Python & Poetry Environment
-        uses: exasol/python-toolbox/.github/actions/python-environment@0.20.0
+        uses: exasol/python-toolbox/.github/actions/python-environment@v1
         with:
           python-version: ${{ matrix.python-version }}
-          poetry-version: '1.8.2'
+          poetry-version: '2.1.2'
 
       - name: Run pytest
-        run: poetry run python3 -m pytest
+        run: poetry run -- python3 -m pytest

SECURITY.md

@@ -0,0 +1,26 @@
+# Security
+
+If you believe you have found a new security vulnerability in this repository, please report it to us as follows.
+
+## Reporting Security Issues
+
+* Please do **not** report security vulnerabilities through public GitHub issues.
+
+* Please create a draft security advisory on the Github page: the reporting form is under `> Security > Advisories`. The URL is https://github.com/exasol/udf-mock-python/security/advisories/new.
+
+* If you prefer to email, please send your report to `infosec@exasol.com`.
+
+## Guidelines 
+
+* When reporting a vulnerability, please include as much information as possible, including the complete steps to reproduce the issue. 
+
+* Avoid sending us executables.
+
+* Feel free to include any script you wrote and used but avoid sending us scripts that download and run binaries. 
+
+* We will prioritise reports that show how the exploits work in realistic environments. 
+
+* We prefer all communications to be in English. 
+
+* We do not offer financial rewards. We are happy to acknowledge your research publicly when possible. 
+

doc/changes/changelog.md

@@ -1,7 +1,8 @@
 # Changelog
 
 * [unreleased](unreleased.md)
+* [0.5.0](changes_0.5.0.md)
 * [0.4.0](changes_0.4.0.md)
 * [0.3.0](changes_0.3.0.md)
 * [0.2.0](changes_0.2.0.md)
-* [0.1.0](changes_0.1.0.md)
+* [0.1.0](changes_0.1.0.md)

doc/changes/changes_0.5.0.md

@@ -0,0 +1,21 @@
+# 0.7.0 - 2025-09-11
+## Summary
+
+This release loosens the constraints for dependency `numpy` as python 3.13 is only available for numpy versions >2.
+
+### Refactorings
+
+* #64: Update to poetry 2.1.2
+* #66: Loosen constraint for dependency `numpy`
+
+## Dependency Updates
+
+### `main`
+* Removed dependency `dill:0.3.8`
+* Updated dependency `numpy:1.24.4` to `1.26.4`
+* Updated dependency `pandas:1.5.3` to `2.2.3`
+
+### `dev`
+* Added dependency `exasol-toolbox:1.9.0`
+* Added dependency `pytest:8.3.5`
+* Added dependency `pytest-cov:5.0.0`

doc/changes/unreleased.md

@@ -1 +1 @@
-# UDF Mock Python <version TBD>, released <date TBD>
+# Unreleased

noxconfig.py

@@ -0,0 +1,18 @@
+from collections.abc import Iterable
+from dataclasses import dataclass
+from pathlib import Path
+
+ROOT_DIR = Path(__file__).parent
+
+
+@dataclass(frozen=True)
+class Config:
+    root: Path = ROOT_DIR
+    doc: Path = ROOT_DIR / "doc"
+    version_file: Path = ROOT_DIR / "version.py"
+    path_filters: Iterable[str] = ("dist", ".eggs", "venv", ".workspace")
+    python_versions = ["3.10", "3.11", "3.12", "3.13"]
+    source: Path = Path("exasol_udf_mock_python")
+
+
+PROJECT_CONFIG = Config()

noxfile.py

@@ -0,0 +1,7 @@
+import nox
+
+# imports all nox task provided by the toolbox
+from exasol.toolbox.nox.tasks import *
+
+# default actions to be run if nothing is explicitly specified with the -s option
+nox.options.sessions = ["project:fix"]