build: package/configs/workflow update for Python 3.13

Author: lapets

.github/workflows/build-publish-sign-release.yml

@@ -12,11 +12,11 @@ jobs:
     name: Build package.
     needs:
       - call-workflow-lint-test-cover-docs
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - name: Install Python.
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: 3.12
           architecture: x64
@@ -34,15 +34,15 @@ jobs:
     if: startsWith(github.ref, 'refs/tags/') # Publish on tag pushes.
     needs:
       - build
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     environment:
       name: pypi
       url: https://pypi.org/p/blindfold
     permissions:
       id-token: write
     steps:
       - name: Download all the package distributions.
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v5
         with:
           name: python-package-distributions
           path: dist/
@@ -52,18 +52,18 @@ jobs:
     name: Sign package distributions with Sigstore and upload them to a GitHub release.
     needs:
       - publish
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     permissions:
       contents: write # For GitHub.
       id-token: write # For Sigstore.
     steps:
       - name: Download all the package distributions.
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v5
         with:
           name: python-package-distributions
           path: dist/
       - name: Sign the package distributions with Sigstore.
-        uses: sigstore/gh-action-sigstore-python@v3.0.0
+        uses: sigstore/gh-action-sigstore-python@v3.0.1
         with:
           inputs: >-
             ./dist/*.tar.gz

.github/workflows/lint-test-cover-docs.yml

@@ -6,15 +6,15 @@ on:
   workflow_call: # If invoked by build-publish-sign-release workflow.
 jobs:
   lint_test_cover_docs:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     strategy:
       matrix:
-        python-version: ['3.9', '3.10', '3.11', '3.12']
+        python-version: ['3.9', '3.10', '3.11', '3.12', '3.13']
     name: Python ${{ matrix.python-version }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - name: Install Python.
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: ${{ matrix.python-version }}
           architecture: x64
@@ -27,7 +27,7 @@ jobs:
         run: |
           pip install -U .[coveralls]
           python -m coveralls --service=github # Submit to coveralls.
-        if: matrix.python-version == '3.11'
+        if: matrix.python-version == '3.12'
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           COVERALLS_REPO_TOKEN: ${{ secrets.COVERALLS_REPO_TOKEN }}

.gitignore

@@ -159,4 +159,14 @@ cython_debug/
 #  be found at https://github.com/github/gitignore/blob/main/Global/JetBrains.gitignore
 #  and can be added to the global gitignore or merged into this file.  For a more nuclear
 #  option (not recommended) you can uncomment the following to ignore the entire idea folder.
-#.idea/
+.idea/
+
+# IDE
+.idea/
+.vscode/
+*.swp
+*.swo
+
+# macOS
+.DS_Store
+.DS_Store?

.pylintrc

@@ -59,10 +59,11 @@ ignore-paths=
 # Emacs file locks
 ignore-patterns=^\.#
 
-# List of module names for which member attributes should not be checked
-# (useful for modules/projects where namespaces are manipulated during runtime
-# and thus existing member attributes cannot be deduced by static analysis). It
-# supports qualified module names, as well as Unix pattern matching.
+# List of module names for which member attributes should not be checked and
+# will not be imported (useful for modules/projects where namespaces are
+# manipulated during runtime and thus existing member attributes cannot be
+# deduced by static analysis). It supports qualified module names, as well as
+# Unix pattern matching.
 ignored-modules=
 
 # Python code to execute, usually for sys.path manipulation such as
@@ -86,9 +87,13 @@ load-plugins=
 # Pickle collected data for later comparisons.
 persistent=yes
 
+# Resolve imports to .pyi stubs if available. May reduce no-member messages and
+# increase not-an-iterable messages.
+prefer-stubs=no
+
 # Minimum Python version to use for version dependent checks. Will default to
 # the version used to run pylint.
-py-version=3.10
+py-version=3.12
 
 # Discover python modules and packages in the file system subtree.
 recursive=no
@@ -302,6 +307,9 @@ max-locals=30
 # Maximum number of parents for a class (see R0901).
 max-parents=7
 
+# Maximum number of positional arguments for function / method.
+max-positional-arguments=5
+
 # Maximum number of public methods for a class (see R0904).
 max-public-methods=20
 
@@ -429,14 +437,16 @@ disable=raw-checker-failed,
         useless-suppression,
         deprecated-pragma,
         use-symbolic-message-instead,
+        use-implicit-booleaness-not-comparison-to-string,
+        use-implicit-booleaness-not-comparison-to-zero,
         unnecessary-lambda-assignment,
         redundant-unittest-assert
 
 # Enable the message, report, category or checker with the given id(s). You can
 # either give multiple identifier separated by comma (,) or put this option
 # multiple time (only on the command line, not in the configuration file where
 # it should appear only once). See also the "--disable" option for examples.
-enable=c-extension-no-member
+enable=
 
 
 [METHOD_ARGS]
@@ -468,6 +478,11 @@ max-nested-blocks=5
 # printed.
 never-returning-functions=sys.exit,argparse.parse_error
 
+# Let 'consider-using-join' be raised when the separator to join on would be
+# non-empty (resulting in expected fixes of the type: ``"- " + " -
+# ".join(items)``)
+suggest-join-with-non-empty-separator=yes
+
 
 [REPORTS]
 
@@ -482,9 +497,10 @@ evaluation=max(0, 0 if fatal else 10.0 - ((float(5 * error + warning + refactor
 # used to format the message information. See doc for all details.
 msg-template=
 
-# Set the output format. Available formats are text, parseable, colorized, json
-# and msvs (visual studio). You can also give a reporter class, e.g.
-# mypackage.mymodule.MyReporterClass.
+# Set the output format. Available formats are: 'text', 'parseable',
+# 'colorized', 'json2' (improved json format), 'json' (old json format), msvs
+# (visual studio) and 'github' (GitHub actions). You can also give a reporter
+# class, e.g. mypackage.mymodule.MyReporterClass.
 #output-format=
 
 # Tells whether to display a full report or only the messages.
@@ -518,7 +534,7 @@ min-similarity-lines=4
 max-spelling-suggestions=4
 
 # Spelling dictionary name. No available dictionaries : You need to install
-# both the python package and the system dependency for enchant to work..
+# both the python package and the system dependency for enchant to work.
 spelling-dict=
 
 # List of comma separated words that should be considered directives if they
@@ -586,7 +602,7 @@ ignored-classes=optparse.Values,thread._local,_thread._local,argparse.Namespace
 # of finding the hint is based on edit distance.
 missing-member-hint=yes
 
-# The minimum edit distance a name should have in order to be considered a
+# The maximum edit distance a name should have in order to be considered a
 # similar match for a missing member name.
 missing-member-hint-distance=1
 

docs/conf.py

@@ -105,7 +105,6 @@ def rtd_url_for_installed_version(name):
 
 # Theme options for Read the Docs.
 html_theme_options = {
-    'display_version': True,
     'collapse_navigation': True,
     'navigation_depth': 1,
     'titles_only': True

pyproject.toml

@@ -1,16 +1,16 @@
 [project]
 name = "blindfold"
-version = "0.1.0"
+version = "1.0.0rc0"
 description = "Library for working with encrypted data within nilDB queries and replies."
-license = {text = "MIT"}
+license = "MIT"
 readme = "README.rst"
 requires-python = ">=3.9"
 dependencies = [
     "parts~=4.0",
     "hkdfs~=0.1",
-    "bcl~=2.3",
+    "bcl~=3.0",
     "shamirs~=4.0",
-    "pailliers~=0.1"
+    "pailliers>=0.3,<2.0.0"
 ]
 
 [project.urls]
@@ -20,28 +20,28 @@ Documentation = "https://blindfold.readthedocs.io"
 [project.optional-dependencies]
 docs = [
     "toml~=0.10.2",
-    "sphinx~=5.0",
-    "sphinx-rtd-theme~=2.0.0",
-    "sphinx-autodoc-typehints~=1.23.0"
+    "sphinx~=7.4",
+    "sphinx-rtd-theme~=3.0",
+    "sphinx-autodoc-typehints~=2.3"
 ]
 test = [
-    "pytest~=8.2",
-    "pytest-cov~=5.0"
+    "pytest~=8.4",
+    "pytest-cov~=7.0"
 ]
 lint = [
-    "pylint~=3.2.0"
+    "pylint~=3.3"
 ]
 coveralls = [
     "coveralls~=4.0"
 ]
 publish = [
-    "build~=0.10",
+    "build~=1.3",
     "twine~=4.0"
 ]
 
 [build-system]
 requires = [
-    "setuptools~=68.0"
+    "setuptools>=77.0"
 ]
 build-backend = "setuptools.build_meta"