Upstream changes

.github/renovate.json

@@ -0,0 +1,38 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": [
+    "config:recommended",
+    ":dependencyDashboard"
+  ],
+  "automerge": true,
+  "automergeType": "pr",
+  "automergeStrategy": "rebase",
+  "platformAutomerge": true,
+  "pre-commit": {
+    "enabled": true
+  },
+  "customManagers": [
+    {
+      "customType": "regex",
+      "fileMatch": [
+        "\\.pre-commit-config\\.yaml"
+      ],
+      "matchStrings": [
+        "(?<depName>[^'\" ]+)==(?<currentValue>[^'\" ,\\s]+)"
+      ],
+      "datasourceTemplate": "pypi",
+      "versioningTemplate": "pep440"
+    },
+    {
+      "customType": "regex",
+      "fileMatch": [
+        "\\.pre-commit-config\\.yaml"
+      ],
+      "matchStrings": [
+        "(?<depName>[^'\" ]+)@(?<currentValue>[^'\" ,\\s]+)"
+      ],
+      "datasourceTemplate": "npm",
+      "versioningTemplate": "npm"
+    }
+  ]
+}

.github/workflows/pre-commit-shared.yml

@@ -0,0 +1,27 @@
+name: pre-commit check
+
+on:
+  workflow_call:
+
+jobs:
+  pre-commit:
+    runs-on: ubuntu-latest
+
+    steps:
+    - uses: actions/checkout@v4
+
+    - uses: actions/cache@v4
+      with:
+        path: ~/.cache/pre-commit
+        key: ${{ runner.os }}-pre-commit-${{ hashFiles('.pre-commit-config.yaml', 'requirements*.txt') }}
+
+    - name: Setup Python
+      uses: actions/setup-python@v5
+      with:
+        python-version: 3.x
+
+    - uses: astral-sh/setup-uv@v5
+
+    - run: uvx pre-commit run --all
+      env:
+        RUFF_OUTPUT_FORMAT: github

.github/workflows/pre-commit.yml

@@ -0,0 +1,9 @@
+name: pre-commit check
+
+on:
+  push:
+  pull_request:
+
+jobs:
+  pre-commit:
+    uses: ./.github/workflows/pre-commit-shared.yml

.github/workflows/release-shared.yml

@@ -0,0 +1,56 @@
+name: Release
+
+on:
+  workflow_call:
+    inputs:
+      github_event_name:
+        required: true
+        type: string
+
+jobs:
+  release:
+    runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+    steps:
+    - uses: actions/checkout@v4
+    - uses: astral-sh/setup-uv@v5
+
+    - name: Verify tag is documented
+      if: inputs.github_event_name == 'release'
+      run: |
+        CURRENT_TAG=${GITHUB_REF#refs/tags/}
+        CURRENT_VERSION=$(sed -n 's/version = "\(.*\)"/\1/p'  pyproject.toml)
+        if [ "${CURRENT_VERSION}" != "${CURRENT_TAG}" ]; then
+            echo "========================================================================"
+            echo "Error: tag '${CURRENT_TAG}' and version '${CURRENT_VERSION}' don't match"
+            echo "========================================================================"
+            exit 1;
+        fi
+
+    - run: uv build
+
+    - name: Verify wheel install
+      run: |
+        uv venv venv-install-whl
+        source venv-install-whl/bin/activate
+        uv pip install dist/*.whl
+
+    - name: Verify source install
+      run: |
+        uv venv venv-install-tar
+        source venv-install-tar/bin/activate
+        uv pip install dist/*.tar.gz
+
+    - uses: actions/upload-artifact@v4
+      if: inputs.github_event_name == 'release'
+      with:
+        name: dist
+        path: |
+          dist/*.tar.gz
+          dist/*.whl
+
+    - run: uvx twine check dist/*
+
+    - if: inputs.github_event_name == 'release'
+      run: uv publish --trusted-publishing always

.github/workflows/release.yml

@@ -3,52 +3,13 @@ name: Release
 on:
   release:
     types: [published]
+  push:
+  pull_request:
 
 jobs:
   release:
-    runs-on: ubuntu-latest
-    steps:
-    - uses: actions/checkout@v4
-
-    - name: Set up Python
-      uses: actions/setup-python@v4
-      with:
-        python-version: '3.9'
-        cache: pip
-        cache-dependency-path: requirements*.txt
-
-    - name: Install Python dependencies
-      run: |
-        python -m pip install --upgrade pip
-        pip install wheel twine
-
-    - name: Verify tag is documented
-      run: |
-        CURRENT_TAG=${GITHUB_REF#refs/tags/}
-        CURRENT_VERSION=$(head -n1 social_core/__init__.py | awk '{print $3}' | sed 's/[^0-9\.]//g')
-        if [ "${CURRENT_VERSION}" != "${CURRENT_TAG}" ]; then
-            echo "========================================================================"
-            echo "Error: tag '${CURRENT_TAG}' and version '${CURRENT_VERSION}' don't match"
-            echo "========================================================================"
-            exit 1;
-        fi
-
-    - name: Build dist
-      run: python setup.py sdist bdist_wheel --python-tag py3
-
-    - name: Archive dist
-      uses: actions/upload-artifact@v3
-      with:
-        name: dist
-        path: |
-          dist/*.tar.gz
-          dist/*.whl
-
-    - name: Verify long description rendering
-      run: twine check dist/*
-
-    - name: Publish
-      env:
-        PYPI_API_TOKEN: ${{ secrets.PYPI_API_TOKEN }}
-      run: |
-        twine upload --non-interactive -u __token__ -p "${PYPI_API_TOKEN}" dist/*
+    uses: ./.github/workflows/release-shared.yml
+    with:
+      github_event_name: ${{ github.event_name }}
+    permissions:
+      id-token: write

.github/workflows/test.yml

@@ -3,15 +3,54 @@ name: Tests
 on: [push, pull_request]
 
 jobs:
+  types:
+    runs-on: ubuntu-24.04
+    strategy:
+      fail-fast: false
+      matrix:
+        python-version:
+        - '3.9'
+        - '3.13'
+    env:
+      PYTHON_VERSION: ${{ matrix.python-version }}
+      PYTHONUNBUFFERED: 1
+
+    steps:
+    - uses: actions/checkout@v4
+      with:
+        persist-credentials: false
+
+    - name: Set up Python ${{ matrix.python-version }}
+      uses: actions/setup-python@v5
+      with:
+        python-version: ${{ matrix.python-version }}
+        cache: pip
+        cache-dependency-path: pyproject.toml
+
+    - name: Install System dependencies
+      run: |
+        sudo apt-get update
+        sudo apt-get install -qq -y --no-install-recommends libxmlsec1-dev swig
+
+    - name: Install Python dependencies
+      run: |
+        python -m pip install --upgrade pip
+        pip install tox
+
+    - name: Type check with tox
+      run: tox -e "py${PYTHON_VERSION/\./}-pyright"
+
   test:
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-24.04
     strategy:
+      fail-fast: false
       matrix:
         python-version:
-        - '3.8'
         - '3.9'
         - '3.10'
         - '3.11'
+        - '3.12'
+        - '3.13'
     env:
       PYTHON_VERSION: ${{ matrix.python-version }}
       PYTHONUNBUFFERED: 1
@@ -20,7 +59,7 @@ jobs:
     - uses: actions/checkout@v4
 
     - name: Set up Python ${{ matrix.python-version }}
-      uses: actions/setup-python@v4
+      uses: actions/setup-python@v5
       with:
         python-version: ${{ matrix.python-version }}
         cache: pip
@@ -39,7 +78,7 @@ jobs:
     - name: Test with tox
       run: tox -e "py${PYTHON_VERSION/\./}"
 
-    - uses: codecov/codecov-action@v3
+    - uses: codecov/codecov-action@v5
       with:
         flags: unittests
         name: Python ${{ matrix.python-version }}

.gitignore

@@ -52,5 +52,4 @@ changelog.sh
 
 .pytest_cache/
 
-files/local.env
 .env