Skip to content

Modernize python package setup#331

Open
Alicipy wants to merge 5 commits into
OWASP:masterfrom
Alicipy:modernize-python-package-setup
Open

Modernize python package setup#331
Alicipy wants to merge 5 commits into
OWASP:masterfrom
Alicipy:modernize-python-package-setup

Conversation

@Alicipy
Copy link
Copy Markdown

@Alicipy Alicipy commented May 17, 2026

While starting with pytm, I saw a few things regarding package management that could use improvement, especially as the Python folks use pure pip or uv currently, and maybe wondering why the commands don't work.

This PR includes migration to the default pyproject.toml keys which poetry in version 2 also understands, so nothing breaks. As pip can handle these as well, we can remove a few other files which existed for compatibility reasons (?) as well.

@Alicipy Alicipy requested a review from izar as a code owner May 17, 2026 15:17
@izar
Copy link
Copy Markdown
Collaborator

izar commented May 21, 2026

Hi and thanks for the PR! Can you work with @fkromer on #305 ? Otherwise I believe we'll have some conflicts here.

@Alicipy Alicipy force-pushed the modernize-python-package-setup branch from 3a02cec to 549244d Compare May 24, 2026 15:06
@Alicipy
Copy link
Copy Markdown
Author

Alicipy commented May 24, 2026

Yes of course, I would love to! How do you suggest to proceed? Shall we merge this and redo the other one, or vice versa? This change does work in both, poetry and uv; as it depends only on PEP-specified behaviour right now.
I am also happy to close this one, and support on the other one fully.

@Alicipy Alicipy force-pushed the modernize-python-package-setup branch from 549244d to 973251f Compare May 24, 2026 15:08
Alicipy added 5 commits May 24, 2026 17:11
Lets any packaging tool read the metadata, not just Poetry,
and puts the fields as described in
https://packaging.python.org/en/latest/specifications/pyproject-toml/#pyproject-toml-spec

Signed-off-by: Stefan Kraus <dev@stefankraus.org>
[dependency-groups] is the standard table for these now

Signed-off-by: Stefan Kraus <dev@stefankraus.org>
hatchling is the PyPA-maintained build backend; building a wheel
no longer needs Poetry installed. Poetry can stay for the workflow.

Signed-off-by: Stefan Kraus <dev@stefankraus.org>
This is done automatically as it's part of pytm package

Signed-off-by: Stefan Kraus <dev@stefankraus.org>
Probably missed from a previous migration, most used
repo lives at OWASP/pytm now.

Signed-off-by: Stefan Kraus <dev@stefankraus.org>
@Alicipy Alicipy force-pushed the modernize-python-package-setup branch from 973251f to fccb68b Compare May 24, 2026 15:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants