A Python CLI and pyproject.toml configuration that let you release Python packages multiple times a day with only 2-clicks. Designed for uv-based Python projects, but usable for other projects too. Every step is a CLI command: reusable GitHub Actions workflows are only the trigger, so the same automation runs on your machine.

Maintainer-in-the-loop: nothing is done behind your back. A PR or issue is created every time a change is proposed or action is needed.

What it automates

• Version bumping, git tagging, and GitHub release creation
• Changelog management
• Python package building and PyPI publishing with supply chain attestations
• Cross-platform binary compilation (Linux / macOS / Windows, x86_64 / arm64)
• Formatting autofix for Python, Markdown, JSON, Shell, and typos
• Linting: Python types with mypy, YAML, GitHub Actions, workflow security, URLs, secrets, and Awesome lists
• Synchronization of uv.lock, GitHub Action pins, workflow version literals, and repomatic run tool versions with configurable stabilization cooldowns
• Synchronization of .gitignore, .mailmap, and Mermaid dependency graph
• Label management with file-based and content-based rules
• Inactive issue locking
• Static image optimization
• Sphinx documentation building, deployment, and autodoc updates
• Awesome list template synchronization

Why repomatic

repomatic does for the release process what ruff did for linting and uv did for packaging: replace a stack of single-purpose tools with one.

• 18 third-party GitHub Actions replaced by internal CLI commands and SHA-256-verified binary downloads, keeping the supply chain attack surface minimal
• 8 Python linters and formatters (pylint, black, isort, pyupgrade, pydocstyle, pycln, docformatter, blacken-docs) consolidated into ruff
• 5 packaging and install tools (poetry, build, twine, check-wheel-contents, pip-audit) consolidated into uv
• All uses: references pinned to full commit SHAs with stabilization windows before adopting new versions, managed entirely by self-hosted sync jobs
• SLSA provenance attestations on every release artifact (wheels and compiled binaries)
• VirusTotal scanning of compiled binaries to seed AV vendor databases and reduce false positives
• Trusted Publishing for PyPI uploads: no long-lived tokens stored as secrets
• Immutable releases enforced via GitHub's tag protection and release locking
• Workflow security linting with zizmor on every push to catch dangerous triggers and excessive permissions
• Credential scanning with gitleaks to prevent secret leakage
• Single pyproject.toml configuration: no extra dotfiles, no JSON configs, no YAML presets to maintain
• The CLI itself ships as standalone binaries (Linux / macOS / Windows, x86_64 / arm64): no Python environment needed to run it
• 15+ code quality tools (ruff, mypy, biome, typos, mdformat, shfmt, yamllint, actionlint, lychee, oxipng, jpegoptim, pyproject-fmt, labelmaker, gitleaks, zizmor) managed through one repomatic run <tool> interface with automatic installation and platform-specific binary caching

Quick start

$ cd my-project
$ uvx -- repomatic init
$ git add .
$ git commit -m "Add repomatic"
$ git push

Works for new and existing repositories. Managed files are always regenerated to the latest version; changelog.md is never overwritten. Push, and the workflows guide you through remaining setup via issues and PRs.

The workflows only call CLI commands, so every automated step can also be run and previewed locally:

$ uvx -- repomatic sync-deps --dry-run
$ uvx -- repomatic run ruff -- check

See repomatic init --help for available components and options.

Documentation

See the full documentation for:

• Installation methods and executables
• [tool.repomatic] configuration reference
• CLI parameters
• Reusable workflow reference (all 13 workflows with job descriptions)
• Security practices and token setup
• Claude Code skills
• API reference
• Project history

Used in

Check these projects to get real-life examples of usage and inspiration:

• Awesome Falsehood - Falsehoods Programmers Believe in.
• Awesome Engineering Team Management - How to transition from software development to engineering management.
• Awesome IAM - Identity and Access Management knowledge for cloud platforms.
• Awesome Billing - Billing & Payments knowledge for cloud platforms.
• Meta Package Manager - A unifying CLI for multiple package managers.
• Mail Deduplicate - A CLI to deduplicate similar emails.
• dotfiles - macOS dotfiles for Python developers.
• Click Extra - Extra colorization and configuration loading for Click.
• repomatic - Itself. Eat your own dog-food.
• Extra Platforms - Detect platforms and group them by family.

Send a PR to add your project if you use repomatic.