Publish release v0.79.0

.bumpversion.cfg

@@ -1,5 +1,5 @@
 [bumpversion]
-current_version = 0.78.0
+current_version = 0.79.0
 commit = True
 tag = False
 message = chore: Bump version from {current_version} to {new_version}

.github/workflows/ci-cd.yaml

@@ -64,18 +64,18 @@ jobs:
 
   # -----END Release Job-----
 
-  # -----BEGIN Deploy Job-----
-  deploy:
-    name: Deploy
+  # -----BEGIN Publish Job-----
+  publish:
+    name: Publish
     if: ${{ github.ref == needs.workflow_config.outputs.PRODUCTION_VCS_REF }}
     needs:
       - release
       - workflow_config
 
-    uses: ./.github/workflows/deploy.yaml
+    uses: ./.github/workflows/publish.yaml
     with:
       deploy_env: prod
       artifacts_path: ${{ needs.release.outputs.artifacts_path }}
     secrets: inherit
 
-  # -----END Deploy Job-----
+  # -----END Publish Job-----

.github/workflows/ci.yaml

@@ -36,29 +36,36 @@ jobs:
 
     steps:
       - name: Check Out VCS Repository
-        uses: actions/checkout@v6.0.3
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Set Up Python ${{ matrix.python_version }}
         id: set_up_python
-        uses: actions/setup-python@v6.2.0
+        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
         with:
           python-version: "${{ matrix.python_version }}"
           check-latest: true
 
       - name: Install Pip
         run: make python-pip-install
 
-      - name: Create Python Virtual Environment
-        run: make python-virtualenv PYTHON_VIRTUALENV_DIR="venv"
-
       - name: Restoring/Saving Cache
-        uses: actions/cache@v5.0.5
+        id: restoring_saving_cache
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: |
             .tox
             venv
           key: py-v1-deps-${{ runner.os }}-${{ steps.set_up_python.outputs.python-version }}-${{ hashFiles('pyproject.toml', 'requirements.txt', 'requirements-dev.txt', 'Makefile', 'make/**.mk') }}
 
+      - name: Create Python Virtual Environment
+        # Only when the cache was not restored. The cache is restored by extracting an archive
+        # over the workspace, so restoring it over an existing virtual environment merges the Pip
+        # installation that `python -m venv` bootstraps with the cached one, instead of replacing
+        # it. That leaves an unusable Pip whenever the two versions lay out their internal modules
+        # differently.
+        if: ${{ steps.restoring_saving_cache.outputs.cache-hit != 'true' }}
+        run: make python-virtualenv PYTHON_VIRTUALENV_DIR="venv"
+
       - name: Install Dependencies
         run: |
           source "$PYTHON_VIRTUALENV_ACTIVATE"
@@ -97,17 +104,17 @@ jobs:
 
     steps:
       - name: Check Out VCS Repository
-        uses: actions/checkout@v6.0.3
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Set Up Python ${{ matrix.python_version }}
         id: set_up_python
-        uses: actions/setup-python@v6.2.0
+        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
         with:
           python-version: "${{ matrix.python_version }}"
           check-latest: true
 
       - name: Restoring/Saving Cache
-        uses: actions/cache@v5.0.5
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: |
             .tox
@@ -163,7 +170,7 @@ jobs:
 
       - name: Store Artifacts
         if: ${{ always() }}
-        uses: actions/upload-artifact@v7.0.1
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: test_reports_${{ matrix.python_version }}
           path: test-reports/

.github/workflows/dependency-review.yaml

@@ -6,7 +6,6 @@ on:
       - opened
       - reopened
       - synchronize
-      - ready_for_review
 
 permissions:
   contents: read
@@ -22,9 +21,9 @@ jobs:
 
     steps:
       - name: Check Out VCS Repository
-        uses: actions/checkout@v6.0.3
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Dependency Review
-        uses: actions/dependency-review-action@v5.0.0
+        uses: actions/dependency-review-action@a1d282b36b6f3519aa1f3fc636f609c47dddb294 # v5.0.0
         with:
           fail-on-severity: critical

.github/workflows/git-commit-lint.yaml

@@ -8,7 +8,6 @@ on:
       - opened
       - reopened
       - synchronize
-      - ready_for_review
 
 permissions:
   contents: read

.github/workflows/deploy.yaml → .github/workflows/publish.yaml

@@ -1,6 +1,6 @@
-# GitHub Actions Workflow for Deployment
+# GitHub Actions Workflow for Publication
 
-name: Deploy
+name: Publish
 
 on:
   workflow_call:
@@ -18,7 +18,7 @@ permissions:
 
 # -----BEGIN Environment Variables-----
 
-# Environment variables required for deployment:
+# Environment variables required for publication:
 #
 # - PYPI_PASSWORD := PyPI password or API token.
 # - PYPI_USERNAME := PyPI username. For API tokens, use "__token__".
@@ -31,36 +31,36 @@ env:
 # -----END Environment Variables-----
 
 jobs:
-  deploy:
-    name: Deploy
+  publish:
+    name: Publish
     runs-on: ubuntu-22.04
     environment: ${{ inputs.deploy_env }}
 
     steps:
       - name: Check Out VCS Repository
-        uses: actions/checkout@v6.0.3
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Set Up Python
         id: set_up_python
-        uses: actions/setup-python@v6.2.0
+        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
         with:
           python-version-file: "pyproject.toml"
           check-latest: true
 
       - name: Restoring/Saving Cache
-        uses: actions/cache@v5.0.5
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: "venv"
           key: py-v1-deps-${{ runner.os }}-${{ steps.set_up_python.outputs.python-version }}-${{ hashFiles('pyproject.toml', 'requirements.txt', 'requirements-dev.txt', 'Makefile', 'make/**.mk') }}
           fail-on-cache-miss: true
 
       - name: Restore Artifacts (Release)
-        uses: actions/download-artifact@v8.0.1
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           name: release
           path: ${{ inputs.artifacts_path }}/
 
-      - name: Deploy
+      - name: Publish
         run: |
           source "$PYTHON_VIRTUALENV_ACTIVATE"
           make deploy \

.github/workflows/release.yaml

@@ -35,24 +35,31 @@ jobs:
 
     steps:
       - name: Check Out VCS Repository
-        uses: actions/checkout@v6.0.3
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Set Up Python
         id: set_up_python
-        uses: actions/setup-python@v6.2.0
+        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
         with:
           python-version-file: "pyproject.toml"
           check-latest: true
 
-      - name: Create Python Virtual Environment
-        run: make python-virtualenv PYTHON_VIRTUALENV_DIR="venv"
-
       - name: Restoring/Saving Cache
-        uses: actions/cache@v5.0.5
+        id: restoring_saving_cache
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: "venv"
           key: py-v1-deps-${{ runner.os }}-${{ steps.set_up_python.outputs.python-version }}-${{ hashFiles('pyproject.toml', 'requirements.txt', 'requirements-dev.txt', 'Makefile', 'make/**.mk') }}
 
+      - name: Create Python Virtual Environment
+        # Only when the cache was not restored. The cache is restored by extracting an archive
+        # over the workspace, so restoring it over an existing virtual environment merges the Pip
+        # installation that `python -m venv` bootstraps with the cached one, instead of replacing
+        # it. That leaves an unusable Pip whenever the two versions lay out their internal modules
+        # differently.
+        if: ${{ steps.restoring_saving_cache.outputs.cache-hit != 'true' }}
+        run: make python-virtualenv PYTHON_VIRTUALENV_DIR="venv"
+
       - name: Install Dependencies
         run: |
           source "$PYTHON_VIRTUALENV_ACTIVATE"
@@ -69,7 +76,7 @@ jobs:
           make dist
 
       - name: Store Artifacts
-        uses: actions/upload-artifact@v7.0.1
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: release
           path: ${{ env.ARTIFACTS_PATH }}/

.github/workflows/task-release-and-publish.yaml

@@ -0,0 +1,21 @@
+# GitHub Actions Workflow for 'Release and Publish' Task
+
+name: "Task: Release and Publish"
+
+on:
+  pull_request:
+    types:
+      - closed
+    branches: # Base reference
+      - develop
+
+permissions: {}
+
+jobs:
+  publish:
+    name: Publish
+    if: ${{ github.event.pull_request.merged == true && startsWith(github.head_ref, 'release/') }}
+    permissions:
+      contents: write
+      pull-requests: write
+    uses: cordada/github-actions-utils/.github/workflows/task-release-and-publish.yaml@master

CONTRIBUTING.md

@@ -154,7 +154,7 @@ Then wait for the CI tests (`develop` branch) to finish and verify they were suc
   base branch.
 
 
-### Pull Request for Deployment
+### Pull Request for Publication
 
 - Check out the **main VCS branch**:
 
@@ -174,7 +174,7 @@ Then wait for the CI tests (`develop` branch) to finish and verify they were suc
 - Create a **new branch**:
 
   ```sh
-  git checkout -b deploy/vX.Y.Z
+  git checkout -b publish/vX.Y.Z
   ```
 
 - Push the branch to `origin`:
@@ -185,8 +185,8 @@ Then wait for the CI tests (`develop` branch) to finish and verify they were suc
 
 - Create a **pull request**:
   - *Base reference*: `master`
-  - *Head reference*: `deploy/vX.Y.Z`
-  - *Title*: `Deploy release vX.Y.Z`
+  - *Head reference*: `publish/vX.Y.Z`
+  - *Title*: `Publish release vX.Y.Z`
   - *Description*:
 
     ```markdown
@@ -195,7 +195,7 @@ Then wait for the CI tests (`develop` branch) to finish and verify they were suc
 
   - *Labels*:
     - `task`
-    - `kind: deploy`
+    - `kind: publish`
 - **Assign** the pull request to the appropriate developer (usually yourself).
 - Wait until the CI checks have finished.
 - Request pull request **reviews**.

HISTORY.md

@@ -1,5 +1,19 @@
 # History
 
+## 0.79.0 (2026-09-30)
+
+- (PR #1044, 2026-06-17) Do not trigger Commit Linter/Dependency Review for draft PRs marked ready
+- (PR #1047, 2026-07-01) chore(deps): Bump the github-actions-production group with 3 updates
+- (PR #1048, 2026-07-01) deps: Update `signxml` from 4.2.0 to 4.3.1
+- (PR #1060, 2026-09-10) workflows: Use reusable workflow for release and publication task
+- (PR #1061, 2026-09-10) workflows: Label a release publication `kind: publish`
+- (PR #1062, 2026-09-10) workflows: Restore the dependency cache before creating the virtual environment
+- (PR #1063, 2026-09-10) workflows: Restore dependency cache before creating venv in "Release"
+- (PR #1064, 2026-09-10) workflows: Rename workflow "Deploy" to "Publish"
+- (PR #1052, 2026-09-10) chore(deps): Bump github-actions-production group (2 updates)
+- (PR #1065, 2026-09-14) workflows: Pin GitHub Actions to commit hashes
+- (PR #1057, 2026-09-24) rtc: Fall back to a lossless encoding when parsing "cesiones periodo" files
+
 ## 0.78.0 (2026-06-08)
 
 - (PR #1031, 2026-05-28) chore(deps): Bump build from 1.4.2 to 1.4.4 in the python-development group