style: apply black + fix RAT excludes for wheel dist-info

Two small fixes on top of t1mato/burr@ci/release-ci-followups so CI goes
green:

* Black formatting on the four new/modified files (auto-fix; contributor
  can pull this back locally, or maintainers can just squash-in on
  merge).

* Wheel RAT scan: sdist and src tarball RAT scans pass, but the
  newly-added wheel scan fails because auto-generated dist-info metadata
  files (METADATA, WHEEL, RECORD) have no source and no ASF header.
  Added those three basename globs to .rat-excludes.

Verified locally: black + flake8 + isort clean on the touched files.
RAT reproduction not possible without the jar, but the failure signature
in CI matches this class of file exactly and the excludes are the
minimum-necessary additions.

Author: elijahbenizzy

.rat-excludes

@@ -74,3 +74,11 @@
 **/*.gif
 **/*.ico
 **/*.jpg
+
+# Python wheel dist-info metadata files. These are auto-generated by the wheel
+# builder from pyproject.toml + package contents; they have no source and no
+# ASF header. Needed because Release Validation extracts and RAT-scans the
+# built wheel in addition to source and sdist tarballs.
+**/METADATA
+**/WHEEL
+**/RECORD

scripts/ci_smoke_server.py

@@ -242,7 +242,9 @@ def main() -> None:
         _log("Checking UI is served at GET /...")
         with urllib.request.urlopen(f"{base_url}/", timeout=5) as resp:
             if resp.status != 200:
-                _fail(f"GET / returned HTTP {resp.status}, expected 200 — UI may be missing from wheel")
+                _fail(
+                    f"GET / returned HTTP {resp.status}, expected 200 — UI may be missing from wheel"
+                )
         _log("UI served correctly")
 
         # 6. Run a tracked Burr app as a separate process using the venv.
@@ -284,9 +286,7 @@ def inc(state: State) -> State:
         # writes its data. Polling is preferable to a fixed sleep: it succeeds as soon
         # as the data appears and gives a clear failure message on timeout.
         _log("Waiting for server to report project 'ci-smoke-test'...")
-        if not _poll_projects(
-            base_url, "ci-smoke-test", timeout_s=30, server_proc=server_proc
-        ):
+        if not _poll_projects(base_url, "ci-smoke-test", timeout_s=30, server_proc=server_proc):
             if server_proc.poll() is not None:
                 _log(f"Server process exited with code {server_proc.returncode}")
             _log("--- server log ---")

scripts/verify_apache_artifacts.py

@@ -754,7 +754,9 @@ def verify_licenses(
         summary.fail("Apache RAT", "no tar.gz or .whl artifacts found")
         return False
 
-    print(f"Found {len(rat_artifacts)} artifact(s) to check ({len(tar_artifacts)} tarball(s), {len(wheel_artifacts)} wheel(s)):\n")
+    print(
+        f"Found {len(rat_artifacts)} artifact(s) to check ({len(tar_artifacts)} tarball(s), {len(wheel_artifacts)} wheel(s)):\n"
+    )
 
     all_valid = True
     for artifact_name in rat_artifacts:

tests/test_ci_smoke_server.py

@@ -107,6 +107,7 @@ class FakeResp:
 
             def read(self):
                 import json
+
                 return json.dumps([{"name": "ci-smoke-test"}, {"name": "other"}]).encode()
 
             def __enter__(self):
@@ -144,7 +145,11 @@ class FakeProc:
         def poll(self):
             return 1  # non-None → process is dead
 
-    monkeypatch.setattr(smoke.urllib.request, "urlopen", lambda *a, **kw: (_ for _ in ()).throw(AssertionError("should not reach urlopen")))
+    monkeypatch.setattr(
+        smoke.urllib.request,
+        "urlopen",
+        lambda *a, **kw: (_ for _ in ()).throw(AssertionError("should not reach urlopen")),
+    )
 
     result = smoke._poll_projects(
         "http://127.0.0.1:9999", "ci-smoke-test", timeout_s=5, server_proc=FakeProc()
@@ -155,6 +160,7 @@ def poll(self):
 def test_poll_projects_keeps_trying_until_project_appears(monkeypatch):
     """Retries when project is absent, then succeeds once it appears."""
     import json
+
     responses = [
         json.dumps([]).encode(),
         json.dumps([{"name": "other"}]).encode(),

tests/test_verify_apache_artifacts.py

@@ -267,6 +267,7 @@ def test_artifact_files_ignores_rat_reports():
 def test_wheel_content_hashes_returns_sha256_per_file(tmp_path):
     """Returns a dict mapping each member path to its SHA256 hex digest."""
     import hashlib
+
     wheel_path = tmp_path / "test-1.0-py3-none-any.whl"
     content = b"hello burr"
     _write_wheel(wheel_path, {"burr/__init__.py": content})
@@ -280,10 +281,13 @@ def test_wheel_content_hashes_excludes_record_file(tmp_path):
     """RECORD (the manifest) is excluded — it lists other files' hashes and
     will legitimately differ between two wheels built from identical source."""
     wheel_path = tmp_path / "test-1.0-py3-none-any.whl"
-    _write_wheel(wheel_path, {
-        "burr/__init__.py": b"code",
-        "burr-1.0.dist-info/RECORD": b"burr/__init__.py,sha256=abc,4\n",
-    })
+    _write_wheel(
+        wheel_path,
+        {
+            "burr/__init__.py": b"code",
+            "burr-1.0.dist-info/RECORD": b"burr/__init__.py,sha256=abc,4\n",
+        },
+    )
 
     hashes = verify._wheel_content_hashes(str(wheel_path))
 
@@ -294,10 +298,13 @@ def test_wheel_content_hashes_excludes_record_file(tmp_path):
 def test_wheel_content_hashes_excludes_directory_entries(tmp_path):
     """Directory entries (zip members whose name ends with /) have no content."""
     wheel_path = tmp_path / "test-1.0-py3-none-any.whl"
-    _write_wheel(wheel_path, {
-        "burr/": b"",
-        "burr/__init__.py": b"code",
-    })
+    _write_wheel(
+        wheel_path,
+        {
+            "burr/": b"",
+            "burr/__init__.py": b"code",
+        },
+    )
 
     hashes = verify._wheel_content_hashes(str(wheel_path))
 
@@ -323,14 +330,20 @@ def test_compare_wheel_contents_ignores_record_differences(tmp_path):
     """RECORD files that differ between wheels are not reported as differences."""
     wheel_a = tmp_path / "a.whl"
     wheel_b = tmp_path / "b.whl"
-    _write_wheel(wheel_a, {
-        "burr/__init__.py": b"code",
-        "burr-1.0.dist-info/RECORD": b"burr/__init__.py,sha256=aaa,4\n",
-    })
-    _write_wheel(wheel_b, {
-        "burr/__init__.py": b"code",
-        "burr-1.0.dist-info/RECORD": b"burr/__init__.py,sha256=bbb,4\n",
-    })
+    _write_wheel(
+        wheel_a,
+        {
+            "burr/__init__.py": b"code",
+            "burr-1.0.dist-info/RECORD": b"burr/__init__.py,sha256=aaa,4\n",
+        },
+    )
+    _write_wheel(
+        wheel_b,
+        {
+            "burr/__init__.py": b"code",
+            "burr-1.0.dist-info/RECORD": b"burr/__init__.py,sha256=bbb,4\n",
+        },
+    )
 
     match, diffs = verify._compare_wheel_contents(str(wheel_a), str(wheel_b))