Merge branch 'develop' for v0.4.0 release

Author: tbitcs

.github/workflows/ci.yml

@@ -22,6 +22,7 @@ jobs:
         with:
           python-version: "3.12"
           cache: pip
+      - run: python -m pip install --upgrade pip
       - run: pip install ruff
       - run: ruff check src/ tests/
       - run: ruff format --check src/ tests/
@@ -34,6 +35,7 @@ jobs:
         with:
           python-version: "3.12"
           cache: pip
+      - run: python -m pip install --upgrade pip
       - run: pip install -e ".[dev]"
       - run: mypy src/specsmith/
 
@@ -51,6 +53,7 @@ jobs:
         with:
           python-version: ${{ matrix.python-version }}
           cache: pip
+      - run: python -m pip install --upgrade pip
       - run: pip install -e ".[dev]"
       - run: pytest --cov=specsmith --cov-report=term-missing
 
@@ -62,6 +65,7 @@ jobs:
         with:
           python-version: "3.12"
           cache: pip
+      - run: python -m pip install --upgrade pip
       - run: pip install pip-audit
       - run: pip install -e .
-      - run: pip-audit
+      - run: pip-audit --ignore-vuln CVE-2026-3219

.gitignore

@@ -26,6 +26,8 @@ venv/
 
 # Testing / coverage
 .pytest_cache/
+.pytest_tmp/
+.ruff_cache/
 .coverage
 htmlcov/
 .mypy_cache/
@@ -35,3 +37,7 @@ htmlcov/
 tmp/
 temp/
 *.log
+
+# Secrets and local-only Nexus artifacts
+.env
+.repo-index/