Merge pull request #28 from gene1wood/specify_dependency_versions

Set dependency versions

Author: gene1wood

.github/workflows/tests.yml

@@ -21,10 +21,10 @@ jobs:
 
     steps:
       - uses: actions/checkout@v5
-      - name: Set up Python 3.13
+      - name: Set up Python 3.14
         uses: actions/setup-python@v6
         with:
-          python-version: "3.13"
+          python-version: "3.14"
           cache: 'pip'
       - name: Install dependencies
         run: |

CHANGELOG.md

@@ -0,0 +1,48 @@
+# Changelog
+
+## [1.2.0] - 2025-12-17
+
+### Changed
+
+- Change unit test regex comparison of tool output so that errors are clearer. ([#19](https://github.com/mozilla/hsm-orchestrator/pull/19)) (Gene Wood)
+- Change minimum Python version to 3.10 ([#28](https://github.com/mozilla/hsm-orchestrator/issues/28)) (Gene Wood)
+
+### Added
+
+- Add a new check if the filenames of the .csr .cnf pair match an existing cert ([#27](https://github.com/mozilla/hsm-orchestrator/pull/27)) (Gene Wood)
+- Add a check and fix of filesystem permissions, specifically the execute bits of files on the USB stick ([#25](https://github.com/mozilla/hsm-orchestrator/pull/25)) (Gene Wood)
+- Add a check to confirm the USB stick is using a filesystem that the Offline HSM can recognize ([#21](https://github.com/mozilla/hsm-orchestrator/pull/21)) (Gene Wood)
+- Add a check for the openssl.cnf setting of `unique_subject=yes` and prompts the user to change it ([#17](https://github.com/mozilla/hsm-orchestrator/pull/17)) (Gene Wood)
+- Add a check if the `simple_test` private key is being used and warn the user ([#23](https://github.com/mozilla/hsm-orchestrator/pull/23)) (Gene Wood)
+- Add minimum versions for dependencies ([#28](https://github.com/mozilla/hsm-orchestrator/issues/28)) (Gene Wood)
+
+### Fixed
+
+- Fix case where the `certs_issued` directory is missing by creating it ([#24](https://github.com/mozilla/hsm-orchestrator/pull/24)) (Gene Wood)
+- Fix overly wide `pull-from-stick` output so it's readable ([#20](https://github.com/mozilla/hsm-orchestrator/pull/20)) (Gene Wood)
+
+## [1.1.0] - 2025-09-19
+
+### Changed
+
+- **Breaking:** Rename `push` and `pull` actions and add post-pull next steps ([#6]( https://github.com/mozilla/hsm-orchestrator/pull/6)) (Gene Wood)
+
+### Added
+
+- Add support for git repos which have an `https` remote instead of `ssh` ([#3](https://github.com/mozilla/hsm-orchestrator/pull/3)) (Gene Wood)
+
+## [1.0.2] - 2025-09-12
+
+_First publish to PyPi._
+
+## [1.0.1] - 2025-09-12
+
+_Initial release._
+
+[1.2.0]: https://github.com/mozilla/hsm-orchestrator/releases/tag/v1.2.0
+
+[1.1.0]: https://github.com/mozilla/hsm-orchestrator/releases/tag/v1.1.0
+
+[1.0.2]: https://github.com/mozilla/hsm-orchestrator/releases/tag/v1.0.2
+
+[1.0.1]: https://github.com/mozilla/hsm-orchestrator/releases/tag/v1.0.1

README.md

@@ -8,7 +8,7 @@ It provides commands to:
 * Push the necessary files to a USB stick for transfer to an offline HSM.
 * Pull back the signed certificate and updated Certificate Authority (CA) files from a USB stick.
 
-[![PyPI - Version](https://img.shields.io/pypi/v/hsm-orchestrator)](https://pypi.org/project/hsm-orchestrator/) [![Tests](https://github.com/mozilla/hsm-orchestrator/actions/workflows/tests.yml/badge.svg)](https://github.com/mozilla/hsm-orchestrator/actions/workflows/tests.yml)
+[![PyPI - Version](https://img.shields.io/pypi/v/hsm-orchestrator)](https://pypi.org/project/hsm-orchestrator/) [![Tests](https://github.com/mozilla/hsm-orchestrator/actions/workflows/tests.yml/badge.svg)](https://github.com/mozilla/hsm-orchestrator/actions/workflows/tests.yml) [![Common Changelog](https://common-changelog.org/badge.svg)](https://common-changelog.org)
 
 ---
 
@@ -102,7 +102,7 @@ move the files off of the USB stick and into the correct directories in the hsm
 
 ## Requirements
 
-* **Python** ≥ 3.9
+* **Python** ≥ 3.10
 * Dependencies (installed automatically):
 
     * [click](https://click.palletsprojects.com/) for CLI arguments

pyproject.toml

@@ -4,10 +4,10 @@ build-backend = "hatchling.build"
 
 [project]
 name = "hsm-orchestrator"
-version = "1.1.0"
+version = "1.2.0"
 description = "Orchestration tool for Mozilla's offline HSM which facilitates conveying a CSR to the air gapped HSM server"
 readme = "README.md"
-requires-python = ">=3.9"
+requires-python = ">=3.10"
 license = { file = "LICENSE.txt" }
 keywords = ["hsm"]
 authors = [{ name = "Gene Wood", email = "gene@mozilla.com" }]
@@ -22,28 +22,28 @@ classifiers = [
     "Topic :: Security :: Cryptography",
     "License :: OSI Approved :: Mozilla Public License 2.0 (MPL 2.0)",
     "Programming Language :: Python :: 3",
-    "Programming Language :: Python :: 3.9",
     "Programming Language :: Python :: 3.10",
     "Programming Language :: Python :: 3.11",
     "Programming Language :: Python :: 3.12",
     "Programming Language :: Python :: 3.13",
+    "Programming Language :: Python :: 3.14",
     "Programming Language :: Python :: 3 :: Only",
 ]
 dependencies = [
-    "click",
-    "rich",
-    "platformdirs",
-    "GitPython",
-    "psutil",
-    "configobj",
+    "click~=8.3.0",
+    "rich~=14.1.0",
+    "platformdirs~=4.4.0",
+    "GitPython~=3.1.45",
+    "psutil~=7.1.0",
+    "configobj~=5.0.9",
 ]
 
 [project.optional-dependencies]
 test = [
-    "coverage",
-    "pytest",
-    "pytest-datafiles",
-    "click"
+    "coverage~=7.10.6",
+    "pytest~=8.4.2",
+    "pytest-datafiles~=3.0.0",
+    "click~=8.3.0"
 ]
 
 [project.urls]
@@ -57,7 +57,7 @@ test = [
 hsm-orchestrator = "hsm_orchestrator:main"
 
 [tool.pytest.ini_options]
-minversion = "6.0"
+minversion = "8.4.2"
 # addopts = "--capture=no --log-cli-level=10"
 addopts = "--capture=no"
 testpaths = [