For a project that uses e.g. hatch-vcs to dynamically set the package version, it would be possible to push a release to PyPI having forgotten to use bump-my-version to bump all the ancillary files (CHANGELOG.md, CITATION.cff, etc). Human memory is the main risk in a manual-bumping workflow. A partial solution is to use GitHub actions for the entire flow from bump to pushing a tag but that's manually-triggered doesn't prevent anyone from doing the bump and tag locally (maybe they're overloaded from maintaining a bunch of projects and forget about the GHA workflow).
Right now we're using a bespoke bash script, but it would be lovely to use bump-my-version to do the check.
For a project that uses e.g. hatch-vcs to dynamically set the package version, it would be possible to push a release to PyPI having forgotten to use
bump-my-versionto bump all the ancillary files (CHANGELOG.md,CITATION.cff, etc). Human memory is the main risk in a manual-bumping workflow. A partial solution is to use GitHub actions for the entire flow from bump to pushing a tag but that's manually-triggered doesn't prevent anyone from doing the bump and tag locally (maybe they're overloaded from maintaining a bunch of projects and forget about the GHA workflow).Right now we're using a bespoke bash script, but it would be lovely to use
bump-my-versionto do the check.