Stale-doc cleanup + two small CI additions. No source code
changes. For the full machine-readable changelog, see
CHANGELOG.md.
docs/shipping-checklist.md refreshed v0.1.0 → v0.12.0
docs/plans/known-issues.md removed 2 resolved entries
.design/plans/validation-report closeout for v0.6+ TODOs
docs/README.md Tools section now lists all 18
.github/workflows/ci.yml + codecov upload (Ubuntu 3.12 cell)
.github/workflows/release.yml + verify-attestation smoke
docs/shipping-checklist.md was stuck at v0.1.0 references and
"PyPI deferred" markers. Refreshed to track the current state:
- ✅ Coverage push to 85% (v0.10.0)
- ✅ PyPI publish workflow restored (v0.11.0)
- ✅ Per-tool docs for every shipped tool
- ⏳
pypiGitHub Environment (user action) - ⏳ PyPI trusted-publisher config (user action)
- ⏳ Branch protection on
main(user action) - 🗑 Homebrew tap (originally Phase 3; never restored after the PyPI deferral; explicitly marked abandoned)
docs/plans/known-issues.md lost two entries that resolved:
- "Coverage gap to 85% — deferred" — hit 85% in v0.10.0.
- "Optional: gh attestation verify smoke test" — added to
release.ymlin this release.
.design/plans/validation-report.md "Follow-up TODOs (post-v0.5.0)"
got a closeout note showing every item shipped:
| TODO | Landed in |
|---|---|
shimkit cron |
v0.6.0 |
shimkit framework laravel |
v0.7.0 |
shimkit tls / certbot |
v0.8.0 (webroot; DNS-01 deferred to v0.13.0) |
--on-host for db |
v0.9.0 |
| Coverage push to 85% | v0.10.0 |
docs/README.md Tools section expanded from 5 listed tools to all
18, grouped into host tools / server-class (Docker-first) /
framework recipes.
ci.yml now uploads coverage to codecov.io after pytest:
- name: Upload coverage to Codecov
if: matrix.os == 'ubuntu-latest' && matrix.python-version == '3.12'
uses: codecov/codecov-action@v5
with:
files: ./coverage.xml
flags: unit
fail_ci_if_error: falseOnly the Ubuntu 3.12 cell uploads — other cells produce identical coverage modulo platform-gated test skips. The CI floor moved from 65% to 80% (we're at 85% as of v0.10.0; 80% leaves margin for those skips).
release.yml gained a verify-attestation smoke job after
github-release:
verify-attestation:
needs: github-release
steps:
- run: gh release download "$GITHUB_REF_NAME" --pattern '*.whl' --pattern '*.tar.gz'
- run: gh attestation verify dist/*.whl --owner simtabi
- run: gh attestation verify dist/*.tar.gz --owner simtabiCatches a misconfiguration of the publish flow (the build job
already publishes attestations via actions/attest-build- provenance@v3 to Sigstore's transparency log; nothing previously
read them back).
- Tests: unchanged (1027 passing, 85% coverage)
- Source LOC changes: 0
- CI workflow LOC: +20 lines
- Doc LOC: net +50 (cleanup removed more than it added)
uv tool upgrade shimkit
pipx upgrade shimkitNo behavioural changes. The codecov upload requires no setup for public repos (codecov-action@v5 uses tokenless OIDC).