Back-merge v2.4 release branch to main

.coveragerc

@@ -5,6 +5,8 @@ source =
 omit =
     # Don't worry about covering vendored libraries
     src/sphobjinv/_vendored/*
+    # Not part of the test suite
+    setup.py
 
 [report]
 exclude_lines =

.github/workflows/all_core_tests.yml

@@ -19,10 +19,12 @@ jobs:
 
     steps:
     - name: Check out repo
-      uses: actions/checkout@v4
+      uses: actions/checkout@0c366fd6a839edf440554fa01a7085ccba70ac98
+      with:
+        persist-credentials: false
 
     - name: Install Python
-      uses: actions/setup-python@v5
+      uses: actions/setup-python@28f2168f4d98ee0445e3c6321f6e6616c83dd5ec
       with:
         python-version: '3.13'
         cache: 'pip'

.github/workflows/ready_doctest.yml

@@ -22,10 +22,12 @@ jobs:
 
     steps:
     - name: Check out repo
-      uses: actions/checkout@v4
+      uses: actions/checkout@0c366fd6a839edf440554fa01a7085ccba70ac98
+      with:
+        persist-credentials: false
 
     - name: Install Python
-      uses: actions/setup-python@v5
+      uses: actions/setup-python@28f2168f4d98ee0445e3c6321f6e6616c83dd5ec
       with:
         python-version: '3.13'
         cache: 'pip'

.github/workflows/ready_linting.yml

@@ -22,10 +22,12 @@ jobs:
 
     steps:
     - name: Check out repo
-      uses: actions/checkout@v4
+      uses: actions/checkout@0c366fd6a839edf440554fa01a7085ccba70ac98
+      with:
+        persist-credentials: false
 
     - name: Install Python
-      uses: actions/setup-python@v5
+      uses: actions/setup-python@28f2168f4d98ee0445e3c6321f6e6616c83dd5ec
       with:
         python-version: '3.13'
         cache: 'pip'
@@ -50,10 +52,12 @@ jobs:
 
     steps:
     - name: Check out repo
-      uses: actions/checkout@v4
+      uses: actions/checkout@0c366fd6a839edf440554fa01a7085ccba70ac98
+      with:
+        persist-credentials: false
 
     - name: Install Python
-      uses: actions/setup-python@v5
+      uses: actions/setup-python@28f2168f4d98ee0445e3c6321f6e6616c83dd5ec
       with:
         python-version: '3.13'
         cache: 'pip'

.github/workflows/ready_test_matrix.yml

@@ -29,10 +29,12 @@ jobs:
 
     steps:
     - name: Check out repo
-      uses: actions/checkout@v4
+      uses: actions/checkout@0c366fd6a839edf440554fa01a7085ccba70ac98
+      with:
+        persist-credentials: false
 
     - name: Install Python
-      uses: actions/setup-python@v5
+      uses: actions/setup-python@28f2168f4d98ee0445e3c6321f6e6616c83dd5ec
       with:
         python-version: ${{ matrix.py }}
         cache: 'pip'

.github/workflows/ready_test_nonloc.yml

@@ -25,10 +25,12 @@ jobs:
 
     steps:
     - name: Check out repo
-      uses: actions/checkout@v4
+      uses: actions/checkout@0c366fd6a839edf440554fa01a7085ccba70ac98
+      with:
+        persist-credentials: false
 
     - name: Install Python
-      uses: actions/setup-python@v5
+      uses: actions/setup-python@28f2168f4d98ee0445e3c6321f6e6616c83dd5ec
       with:
         python-version: '3.13'
         cache: 'pip'

.github/workflows/release_check_sdist.yml

@@ -21,10 +21,12 @@ jobs:
 
     steps:
     - name: Check out repo
-      uses: actions/checkout@v4
+      uses: actions/checkout@0c366fd6a839edf440554fa01a7085ccba70ac98
+      with:
+        persist-credentials: false
 
     - name: Install Python
-      uses: actions/setup-python@v5
+      uses: actions/setup-python@28f2168f4d98ee0445e3c6321f6e6616c83dd5ec
       with:
         python-version: '3.13'
         cache: 'pip'

.github/workflows/release_doc_warnings.yml

@@ -21,10 +21,12 @@ jobs:
 
     steps:
     - name: Check out repo
-      uses: actions/checkout@v4
+      uses: actions/checkout@0c366fd6a839edf440554fa01a7085ccba70ac98
+      with:
+        persist-credentials: false
 
     - name: Install Python
-      uses: actions/setup-python@v5
+      uses: actions/setup-python@28f2168f4d98ee0445e3c6321f6e6616c83dd5ec
       with:
         python-version: '3.13'
         cache: 'pip'

.github/workflows/release_enusre_no_ver_markers.yml

@@ -21,7 +21,9 @@ jobs:
 
     steps:
     - name: Check out repo
-      uses: actions/checkout@v6
+      uses: actions/checkout@0c366fd6a839edf440554fa01a7085ccba70ac98
+      with:
+        persist-credentials: false
 
     - name: Error if any markers found
       run: |

.github/workflows/release_flake8_noqa_nofail.yml

@@ -21,10 +21,12 @@ jobs:
 
     steps:
     - name: Check out repo
-      uses: actions/checkout@v4
+      uses: actions/checkout@0c366fd6a839edf440554fa01a7085ccba70ac98
+      with:
+        persist-credentials: false
 
     - name: Install Python
-      uses: actions/setup-python@v5
+      uses: actions/setup-python@28f2168f4d98ee0445e3c6321f6e6616c83dd5ec
       with:
         python-version: '3.13'
         cache: 'pip'

.github/workflows/release_readme_doctest.yml

@@ -21,10 +21,12 @@ jobs:
 
     steps:
     - name: Check out repo
-      uses: actions/checkout@v4
+      uses: actions/checkout@0c366fd6a839edf440554fa01a7085ccba70ac98
+      with:
+        persist-credentials: false
 
     - name: Install Python
-      uses: actions/setup-python@v5
+      uses: actions/setup-python@28f2168f4d98ee0445e3c6321f6e6616c83dd5ec
       with:
         python-version: '3.13'
         cache: 'pip'

.github/workflows/release_test_file_coverage.yml

@@ -21,10 +21,12 @@ jobs:
 
     steps:
     - name: Check out repo
-      uses: actions/checkout@v4
+      uses: actions/checkout@0c366fd6a839edf440554fa01a7085ccba70ac98
+      with:
+        persist-credentials: false
 
     - name: Install Python
-      uses: actions/setup-python@v5
+      uses: actions/setup-python@28f2168f4d98ee0445e3c6321f6e6616c83dd5ec
       with:
         python-version: '3.13'
         cache: 'pip'
@@ -33,7 +35,7 @@ jobs:
           requirements-flake8.txt
 
     - name: Install CI requirements
-      run: pip install -r requirements-ci.txt -r requirements-flake8.txt
+      run: pip install -r requirements-ci.txt
 
     - name: Build docs & ensure scratch
       run: |
@@ -42,7 +44,7 @@ jobs:
         mkdir scratch
 
     - name: Run pytest covering entire project tree
-      run: pytest --cov=. --nonloc --flake8_ext
+      run: pytest --cov=. --nonloc
 
     - name: Check 100% test code execution
       run: coverage report --include="tests/*" --fail-under=100

.readthedocs.yaml

@@ -7,7 +7,7 @@ version: 2
 
 # Build and VM configuration
 build:
-  os: 'ubuntu-22.04'
+  os: 'ubuntu-24.04'
   tools:
     python: '3.13'
 

CHANGELOG.md

@@ -8,7 +8,7 @@ and this project follows an extension of
 fourth number represents an administrative maintenance release with no code
 changes.
 
-### *Unreleased*
+### [2.4] - 2026-03-23
 
 #### Added
 
@@ -21,6 +21,18 @@ changes.
 
 #### Tests
 
+  * Remove flake8_ext test file and machinery ([#336]).
+    * pytest environment now can easily de-sync from the flake8 environment
+      since flake8 is running in tox now.
+    * It was really always over-cautious, too.
+
+  * Exclude `setup.py` from coverage ([#336]).
+    * Necessary due to a change in coverage.py behavior, maybe?
+    * Definitely is not expected to run during execution of the test suite.
+
+  * Remove unused `ensure_doc_scratch` fixture from `conftest.py` ([#336]).
+    * Obsolete now that the README shell examples aren't doctested.
+
   * Add 3.13t and 3.14t to `tox` test matrix ([#333]).
     * Also add report of the current GIL status to the `tox` env output.
 
@@ -55,6 +67,21 @@ changes.
 
 #### Internal
 
+  * Convert `build` call into a `tox` env and remove `build` from
+    `requirements-dev.txt` ([#336]).
+
+  * Remove redundant packages from `requirements-dev.txt` and
+    `requirements-ci.txt` that are pulled in by the `-e .` line ([#336]).
+
+  * Add `tests/resource/objects_pdfminer*` to `MANIFEST.in`, to make that
+    inventory available to the docs build in the sdist unpack-and-test workflow
+    job ([#336]).
+    * Otherwise the docs job emits a warning. Not fatal, but better to have a
+      clean build.
+
+  * Pin Actions versions to SHAs and de-persist credentials ([#336]).
+    * Closes [#322].
+
   * Add Actions workflow to error on a non-draft release branch if any `#VER#`
     markers remain in docs source ([#331]).
 
@@ -81,6 +108,9 @@ changes.
 
 #### Documentation
 
+  * Update Sphinx, attrs, Python, etc. content to freshen and to match the new
+    inventories in the test resources ([#336]).
+
   * Dynamically retrieve the current values of `PrsConst.SUGGEST_CONFIRM_LENGTH`
     and `PrsConst.DEF_THRESH` to define their replaces in `conf.py` ([#331]).
 
@@ -785,7 +815,9 @@ changes.
 [#315]: https://github.com/bskinn/sphobjinv/pull/315
 [#316]: https://github.com/bskinn/sphobjinv/pull/316
 [#320]: https://github.com/bskinn/sphobjinv/pull/320
+[#322]: https://github.com/bskinn/sphobjinv/issues/322
 [#325]: https://github.com/bskinn/sphobjinv/pull/325
 [#327]: https://github.com/bskinn/sphobjinv/pull/327
 [#331]: https://github.com/bskinn/sphobjinv/pull/331
 [#333]: https://github.com/bskinn/sphobjinv/pull/333
+[#336]: https://github.com/bskinn/sphobjinv/pull/336

CONTRIBUTING.md

@@ -122,6 +122,10 @@ flag:
 $ pytest --nonloc
 ```
 
+Most of these nonlocal tests now use an ephemeral local web server instead of
+reaching out to the web, and so should run even without network access and
+should just run faster in general.
+
 When putting together a PR, at minimum, please add/augment the test suite as
 necessary to maintain 100% test coverage. To the extent possible, please go
 beyond this and add tests that check potential edge cases, bad/malformed/invalid
@@ -141,15 +145,15 @@ project, it is **not** set up to be an everyday test runner. Instead, its
 purpose for testing is to execute an extensive matrix of test environments
 checking for the compatibility of different Python and dependency versions. You
 can run it if you want, but you'll need working versions of all of Python 3.10
-through 3.14 installed and on `PATH` as `python3.10`, `python3.11`, etc. The
-nonlocal test suite is run for each `tox` environment, so it's best to use at
-most two parallel sub-processes to avoid oversaturating your network bandwidth;
-e.g.:
+through 3.14 installed and on `PATH` as `python3.10`, `python3.11`, etc., as
+well as free-threaded versions for Python 3.13 onward as `python3.13t`, etc. The
+test matrix can be accelerated by using `tox`'s parallel execution mode; e.g.:
 
 ```bash
 $ tox -rp2
 ```
 
+
 ## Code Autoformatting
 
 The project is set up with a `tox` environment to blacken the codebase; run with:
@@ -244,20 +248,17 @@ with `make linkcheck`.
 
 ## Continuous Integration
 
-Both Github Actions and Azure Pipelines are set up for the project, and should
-run on any forks of the repository.
+Github Actions workflows are set up for the project, and should run on any forks
+of the repository. Note that the CI runs differently on draft versus non-draft
+PRs: on draft PRs, the only workflow that runs runs tests on Windows and Linux
+with one Python version; whereas on non-draft PRs, a complete test matrix of
+platforms and Python versions is run, as well as doctests and linting checks.
 
 Github Actions runs the test suite on Linux for Python 3.10 through 3.14, as well
 as the `flake8` lints and the Sphinx doctests. By default, the Github Actions
 will run on all commits, but the workflows can be skipped per-commit by
 including `[skip ci]` in the commit message.
 
-The Azure Pipelines CI runs an extensive matrix of cross-platform and
-cross-Python-version tests, as well as numerous other checks. Due to its length,
-it is configured to run only on release branches and PRs to `main` or `stable`.
-The Azure Pipelines workflows now [also obey `[skip ci]`
-directives](https://learn.microsoft.com/en-us/azure/devops/pipelines/repos/azure-repos-git?view=azure-devops&tabs=yaml#skipping-ci-for-individual-pushes).
-
 
 ## CHANGELOG
 

LICENSE.txt

@@ -1,6 +1,6 @@
 The MIT License (MIT)
 
-Copyright (c) 2016-2025 Brian Skinn and community contributors
+Copyright (c) 2016-2026 Brian Skinn and community contributors
 
 Permission is hereby granted, free of charge, to any person obtaining a copy of
 this software and associated documentation files (the "Software"), to deal in

MANIFEST.in

@@ -8,7 +8,7 @@ include doc/make.bat doc/Makefile
 
 graft tests
 prune tests/resource
-include tests/resource/objects_attrs* tests/resource/objects_sarge*
+include tests/resource/objects_attrs* tests/resource/objects_sarge* tests/resource/objects_pdfminer*
 
 global-exclude __pycache__/*
 prune **/*.egg-info