Migrate to salt extension

.github/dependabot.yml

@@ -0,0 +1,13 @@
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/.github/workflows"
+    schedule:
+      # Check for updates to GitHub Actions every month
+      interval: "monthly"
+
+  - package-ecosystem: "pip"
+    directory: "/"
+    schedule:
+      # Check for Python dependency updates every month
+      interval: "monthly"

.github/workflows/pr.yml

@@ -0,0 +1,66 @@
+name: pr
+
+on:
+  pull_request:
+    branches:
+      - master
+      - main
+
+jobs:
+  quality:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.11"
+
+      - name: Install dependencies
+        run: |
+          python -m pip install --upgrade pip
+          python -m pip install -e '.[dev,tests]'
+
+      - name: Lint
+        run: nox -e lint
+
+      - name: Validate changelog
+        run: nox -e changelog
+
+      - name: Build package
+        run: python -m build --outdir dist
+
+  tests:
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        python-version: ["3.10", "3.11", "3.12"]
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Python ${{ matrix.python-version }}
+        uses: actions/setup-python@v5
+        with:
+          python-version: ${{ matrix.python-version }}
+
+      - name: Install nox
+        run: python -m pip install nox
+
+      - name: Run tests
+        run: nox -s "tests-${{ matrix.python-version }}"
+
+  integration:
+    runs-on: ubuntu-latest
+    needs:
+      - quality
+      - tests
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Run integration tests
+        run: make integration clean

.github/workflows/push.yml

@@ -0,0 +1,57 @@
+name: push
+
+on:
+  push:
+    branches:
+      - master
+      - main
+
+jobs:
+  quality:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.11"
+
+      - name: Install dependencies
+        run: |
+          python -m pip install --upgrade pip
+          python -m pip install -e '.[dev,tests,docs]'
+
+      - name: Lint
+        run: nox -e lint
+
+      - name: Validate changelog
+        run: nox -e changelog
+
+      - name: Build docs
+        run: nox -e docs
+
+      - name: Build package
+        run: python -m build --outdir dist
+
+  tests:
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        python-version: ["3.10", "3.11", "3.12"]
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Python ${{ matrix.python-version }}
+        uses: actions/setup-python@v5
+        with:
+          python-version: ${{ matrix.python-version }}
+
+      - name: Install nox
+        run: python -m pip install nox
+
+      - name: Run tests
+        run: nox -s "tests-${{ matrix.python-version }}"

.github/workflows/tag.yml

@@ -0,0 +1,90 @@
+name: tag
+
+on:
+  push:
+    tags:
+      - "v*"
+  workflow_dispatch:
+    inputs:
+      tag:
+        description: "Tag to release (for example, v0.4.0)"
+        required: true
+        type: string
+
+permissions:
+  contents: write
+  id-token: write
+
+jobs:
+  verify:
+    if: github.event_name == 'push'
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.11"
+
+      - name: Install dependencies
+        run: |
+          python -m pip install --upgrade pip
+          python -m pip install -e '.[dev,tests,docs]'
+
+      - name: Lint
+        run: nox -e lint
+
+      - name: Unit and functional tests
+        run: nox -s "tests-3.11"
+
+      - name: Build docs
+        run: nox -e docs
+
+      - name: Build package
+        run: python -m build --outdir dist
+
+      - name: Upload release artifacts
+        uses: actions/upload-artifact@v4
+        with:
+          name: release-artifacts
+          path: |
+            dist/*
+            docs/_build/html/**
+
+  release:
+    if: github.event_name == 'workflow_dispatch'
+    runs-on: ubuntu-latest
+    steps:
+      - name: Validate tag format
+        run: |
+          case "${{ github.event.inputs.tag }}" in
+            v*) ;;
+            *) echo "Tag must start with 'v'"; exit 1 ;;
+          esac
+
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          ref: ${{ github.event.inputs.tag }}
+
+      - name: Setup Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.11"
+
+      - name: Install dependencies
+        run: |
+          python -m pip install --upgrade pip
+          python -m pip install -e '.[dev,tests,docs]'
+
+      - name: Rebuild package for release
+        run: python -m build --outdir dist
+
+      - name: Create GitHub release
+        uses: softprops/action-gh-release@v2
+        with:
+          tag_name: ${{ github.event.inputs.tag }}
+          files: |
+            dist/*

.gitignore

@@ -3,4 +3,9 @@ __pycache__
 *.pyc
 *.log
 .vagrant
-.env
+.env
+*.egg-info/
+*.egg
+build/
+dist/
+docs/_build/

.pre-commit-config.yaml

@@ -0,0 +1,7 @@
+repos:
+  - repo: https://github.com/astral-sh/ruff-pre-commit
+    rev: v0.14.0
+    hooks:
+      - id: ruff
+        args: ["--fix"]
+      - id: ruff-format

Makefile

@@ -1,17 +1,25 @@
 PASSWORD=$$(docker exec nexus3 bash -c 'cat /nexus-data/admin.password')
 COMPOSE_FILE=docker-compose.yml
 
-.PHONY: start start_nexus stop integration reload clean shell docs docs-check set-version
+.PHONY: start start_nexus stop integration reload clean shell docs docs-check docs-sphinx set-version test test-integration lint format changelog-draft sync-src
 
 start: start_nexus
-	@docker compose --progress quiet pull
-	@docker compose up -d
+	@echo "==> target=start COMPOSE_FILE=$(COMPOSE_FILE)"
+	@docker compose --progress quiet -f $(COMPOSE_FILE) pull
+	@docker compose -f $(COMPOSE_FILE) up -d
+
+	@sleep 5
+	@echo " installing package in salt containers..."
+	@docker exec salt-master sh -c 'python3 -m pip install -e /workspace >/dev/null'
+	@docker exec salt-minion sh -c 'python3 -m pip install -e /workspace >/dev/null'
+	@docker restart salt-minion > /dev/null
 
 	@sleep 10
 	@echo " syncing files with minion..."
 	@docker exec salt-master sh -c 'salt \* saltutil.sync_all' > /dev/null 2>&1
 
 start_nexus:
+	@echo "==> target=start_nexus COMPOSE_FILE=$(COMPOSE_FILE)"
 	@docker compose --progress quiet -f $(COMPOSE_FILE) pull
 	@docker compose -f $(COMPOSE_FILE) up -d nexus3
 
@@ -22,15 +30,31 @@ start_nexus:
 	@docker exec nexus3 bash -c 'cat /nexus-data/admin.password'
 	@echo
 	@echo "NEXUS_PASSWORD=$(PASSWORD)" > .env
+	@echo "NEXUS_PASSWORD=$(PASSWORD)" > $(dir $(COMPOSE_FILE)).env
 
 stop:
 	@docker compose -f $(COMPOSE_FILE) stop
 
 integration: clean
+	@echo "==> target=integration: invoking start with COMPOSE_FILE=tests/files/integration.yml"
 	@$(MAKE) COMPOSE_FILE=tests/files/integration.yml start
-	@docker exec -w /tests/integration salt-master ash -c 'pip install pytest; pytest ./'
+	@echo "==> target=integration: running pytest in salt-master"
+	@docker exec -w /tests/integration salt-master ash -c 'pip install pytest; pytest -c /workspace/pyproject.toml ./'
+	@echo "==> target=integration: invoking stop with COMPOSE_FILE=tests/files/integration.yml"
 	@$(MAKE) COMPOSE_FILE=tests/files/integration.yml stop
 
+test:
+	@nox -e tests
+
+test-integration:
+	@nox -e integration
+
+lint:
+	@pre-commit run --all-files
+
+format:
+	@ruff format src tests
+
 reload:
 	@docker exec -it salt-master salt-key -D -y
 	@docker rm -f salt-minion
@@ -53,6 +77,15 @@ docs:
 docs-check:
 	@python3 ./bin/generate_docs_from_docstrings.py --check
 
+docs-sphinx:
+	@nox -e docs
+
+changelog-draft:
+	@nox -e changelog
+
+sync-src:
+	@python3 ./bin/sync_legacy_to_src.py
+
 set-version:
 	@if [ -n "$(VERSION)" ]; then \
 		python3 ./bin/update_file_versions.py "$(VERSION)"; \