v2.19.0 (2026-04-08)

Feat

• add a Makefile goal simple-index that generates a PEP-503 compatible Simple Index directory inside the dist (#947)
• add a workflow to run Macaron for supply chain security detection (#1099)

Fix

• the generated sdist file should contain everything needed to check and test the code, and to build the documentation as well (#967)
• use proper SPDX license identifier in pyproject.toml and add correct copyright comments to package source and tests (#1109)
• make sure that the build epoch is always updated whenever the distribution packages are being built (#1118)
• ci: automatically merge Dependabot PRs upon approval again, again (#1119)
• ci: automatically merge Dependabot PRs upon approval again (#1117)

v2.18.0 (2025-12-03)

Feat

• using pytest as a test runner, diversify the tests into unit, integration, and performance tests (#1028)

Fix

• invoke flit through the Python interpreter’s module-call argument to ensure the Python venv’s flit is being run (#1045)
• ci: undo temporary ignore of GHSA-4xh5-x5gv-qwph (CVE-2025-8869) because the latest pip v25.3 addressed the issue (#1022)
• ci: temporarily ignore GHSA-4xh5-x5gv-qwph (CVE-2025-8869) until pip fixes the problem (#1018)

v2.17.0 (2025-09-20)

Feat

• add actions to CodeQL languages (#991)
• ci: cancel existing running workflows for a PR when a new change is pushed to that PR (#927)

Fix

• remove various repo files that leaked into the sdist of the package (#948)
• building the package’s dist files should always generate the build’s epoch as well, even when using the individual package goals only (#950)
• make sure isort skips over files listed as such in the pyproject.toml tool configuration (#968)

Perf

• test: use Python’s system monitoring facilities to improve performance of test runs (#933)

v2.16.0 (2025-04-05)

Feat

• change the release and staging branching model (#900)
• test: add the pytest-cases package and a simple example of how to use it (#873)

v2.15.0 (2024-12-26)

Feat

• test: add the duration of tests to the printed test summary (#852)

Fix

• don’t attempt to sort imports on git push (they must already be sorted) (#851)
• when nuking then also nuke any installed git hooks (except pre-installed sample hooks) to avoid leaving stale hooks behind (#850)
• declare check-actionlint goal in Makefile as proper phony (#849)
• package metadata did not constrain the upper limit of Python’s version range, set now to <3.14 (#848)

v2.14.0 (2024-11-19)

Feat

• add support for Python 3.13 (#815)

v2.13.4 (2024-09-04)

Fix

• ci: also update setuptools when setting up the virtual environment (#795)

v2.13.3 (2024-06-16)

Fix

• ci: commitizen and CI should fail if the bumped version strings contain inconsistent version numbers (#747)

v2.13.2 (2024-05-14)

Fix

• ci: use actions/upload-artifact@v4 to be compatible with slsa provenance action (#735)

v2.12.1 (2024-01-23)

Fix

• deps-dev: revert artifact download and upload GitHub Actions to v3 (#686)