Adjustments

Author: gergelykovacs

.github/workflows/ci.yml

@@ -5,26 +5,36 @@ on: [push, pull_request]
 jobs:
   build:
     runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        # Define the specific versions you want to test against
+        python-version: ["3.10", "3.11", "3.12", "3.13"]
     steps:
       - uses: actions/checkout@v4
 
       - name: Set up Python
         uses: actions/setup-python@v4
         with:
-          python-version: "3.10"
+          python-version: ${{ matrix.python-version }}
           cache: "pip"
 
       - name: Install Dependencies
-        # Installs the package in editable mode along with dev tools
         run: |
           pip install --upgrade pip
-          pip install -e .[dev]
+          # Install pinned dependencies first for reproducibility
+          if [ -f requirements.txt ]; then pip install -r requirements.txt; fi
+          # Install the project in editable mode + dev tools
+          pip install -e ".[dev]"
 
       - name: Lint & Format Check (Ruff)
         run: |
           ruff check .
           ruff format --check .
 
+      - name: Security (Bandit)
+        run: |
+          bandit -c pyproject.toml -r .
+
       - name: Run Tests with Coverage
         # pytest will read config from pyproject.toml
         run: |

README.md

@@ -6,47 +6,44 @@ Python Project Blueprint
 
 Check the [Makefile](./Makefile) for automation as the initial step, it defines all project commands.
 
-Short summary of commands in a desired order of use.
+### Make Commands
+
+| Make Command          | Description                                                                             |
+|:----------------------|:----------------------------------------------------------------------------------------|
+| `make venv`           | Creates a virtual environment in `.venv`.                                               |
+| `make lock`           | Generates `requirements.txt` from `pyproject.toml` using `pip-compile`.                 |
+| `make upgrade`        | Updates all packages in `requirements.txt` to the latest allowed versions.              |
+| `make install`        | Syncs the environment with locked dependencies and installs the app in editable mode.   |
+| `make setup`          | Installs dependencies and sets up git hooks (runs `install` and `pre-commit install`).  |
+| `make outdated`       | Checks for newer versions of dependencies using `pip-check-updates`.                    |
+| `make pip-upgrade`    | Upgrades `pip` to its latest version.                                                   |
+| `make lint`           | Checks code style using `ruff` without modifying files.                                 |
+| `make format`         | Automatically fixes code style issues using `ruff`.                                     |
+| `make security`       | Runs `bandit` to check for security vulnerabilities.                                    |
+| `make test`           | Runs unit and integration tests using `pytest` (also runs `security`).                  |
+| `make sbom`           | Generates a Software Bill of Materials (SBOM) in `sbom.json`.                           |
+| `make audit`          | Generates a security audit report in `audit.json`.                                      |
+| `make build`          | Creates distribution files (Wheel & Tarball) in `dist/`.                                |
+| `make publish`        | Uploads artifacts to the repository using `twine`.                                      |
+| `make docker-up`      | Starts the application locally using `docker-compose`.                                  |
+| `make docker-down`    | Stops the application running via `docker-compose`.                                     |
+| `make docker-build`   | Builds the Docker image for the application.                                            |
+| `make aws-login`      | Authenticates Docker with AWS ECR.                                                      |
+| `make docker-publish` | Tags and pushes the Docker image to AWS ECR.                                            |
+| `make docs`           | Generates documentation from docstrings into the `docs/` directory.                     |
+| `make clean`          | Removes build artifacts, caches, and generated files.                                   |
+| `make all`            | Runs the full development cycle: `lock`, `install`, `upgrade`, `lint`, `test`, `build`. |
+
+The `make publish` require 
 
 ```shell
-make venv # Create virtual environment (first step)
-
-make install # Install dependencies (second step)
-make setup   # Install dependencies and git hooks (runs install)
-
-mske lock     # Lock dependencies
-make upgrade  # Upgrade dependencies
-make outdated # Check for outdated dependencies
-
-make lint     # Check the code style
-make format   # Fix style issues
-make security # Check for security issues
-make test     # Run tests
-
-make sbom  # Generate Software Bill of Materials - run it when dependencies change
-make audit # Run vulnerability audit - not tracked by Git
-
-make build # Create distributable packages (artefacts)
-
-make docker-build   # Build Docker image
-make aws-login      # Login to the ECR repository
-make docker-publish # Run Docker container
-make docker-up      # Run the Docker container
-make docker-down    # Stop Docker container and clean up
-
-# Set repository access configurations
-# Alternative configuration is provided in the notes section
 export TWINE_USERNAME=your_ldap_user
 export TWINE_PASSWORD=your_ldap_password
 export TWINE_REPOSITORY_URL="https://nexus.mycompany.com/repository/pypi-internal/"
-make publish # Publish the artefacts
-
-make clean # Remove all generated files
-make docs  # Generate documentation - not tracked by Git
-
-make all # In development (lock install upgrade lint test build)
 ```
 
+environment variables.
+
 ## Usage
 
 Start the application

pyproject.toml

@@ -9,7 +9,7 @@ description = "A production-ready Python project blueprint"
 requires-python = ">=3.10"
 dependencies = [
     "httpx>=0.28.1",
-    "fastapi>=0.129.0",
+    "fastapi>=0.133.1",
     "uvicorn[standard]>=0.41.0"
 ]
 
@@ -21,11 +21,11 @@ dev = [
     "pytest>=9.0.2",
     "pytest-cov>=7.0.0",
     "pytest-mock>=3.15.1",
-    "ruff>=0.15.1",
-    "cyclonedx-bom>=7.2.1",
+    "ruff>=0.15.4",
+    "cyclonedx-bom>=7.2.2",
     "pip-audit>=2.10.0",
     "pdoc>=16.0.0",
-    "bandit>=1.9.3",
+    "bandit>=1.9.4",
     "pre-commit>=4.5.1",
     "pip-check-updates>=0.28.0",
 ]

requirements.txt

@@ -13,13 +13,13 @@ anyio==4.12.1
     #   httpx
     #   starlette
     #   watchfiles
-certifi==2026.1.4
+certifi==2026.2.25
     # via
     #   httpcore
     #   httpx
 click==8.3.1
     # via uvicorn
-fastapi==0.129.0
+fastapi==0.133.1
     # via my-app (pyproject.toml)
 h11==0.16.0
     # via

sbom.json

@@ -47,7 +47,7 @@
     },
     {
       "bom-ref": "requirements-L16",
-      "description": "requirements line 16: certifi==2026.1.4",
+      "description": "requirements line 16: certifi==2026.2.25",
       "externalReferences": [
         {
           "comment": "implicit dist url",
@@ -56,9 +56,9 @@
         }
       ],
       "name": "certifi",
-      "purl": "pkg:pypi/certifi@2026.1.4",
+      "purl": "pkg:pypi/certifi@2026.2.25",
       "type": "library",
-      "version": "2026.1.4"
+      "version": "2026.2.25"
     },
     {
       "bom-ref": "requirements-L20",
@@ -77,7 +77,7 @@
     },
     {
       "bom-ref": "requirements-L22",
-      "description": "requirements line 22: fastapi==0.129.0",
+      "description": "requirements line 22: fastapi==0.133.1",
       "externalReferences": [
         {
           "comment": "implicit dist url",
@@ -86,9 +86,9 @@
         }
       ],
       "name": "fastapi",
-      "purl": "pkg:pypi/fastapi@0.129.0",
+      "purl": "pkg:pypi/fastapi@0.133.1",
       "type": "library",
-      "version": "0.129.0"
+      "version": "0.133.1"
     },
     {
       "bom-ref": "requirements-L24",
@@ -406,7 +406,7 @@
     }
   ],
   "metadata": {
-    "timestamp": "2026-02-17T23:27:51.185704+00:00",
+    "timestamp": "2026-02-26T23:45:52.734310+00:00",
     "tools": {
       "components": [
         {
@@ -456,7 +456,7 @@
           ],
           "name": "cyclonedx-py",
           "type": "application",
-          "version": "7.2.1"
+          "version": "7.2.2"
         },
         {
           "description": "Python library for CycloneDX",
@@ -510,7 +510,7 @@
       ]
     }
   },
-  "serialNumber": "urn:uuid:40a26945-26aa-49ff-9825-e93fa28c7d96",
+  "serialNumber": "urn:uuid:0b90b493-fcf8-4060-88cf-3172d9b1e09c",
   "version": 1,
   "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
   "bomFormat": "CycloneDX",