From 0eef79ff8a862a30a818a8e7d064ca89da33df6b Mon Sep 17 00:00:00 2001
From: "scanoss-automation[bot]"
 <scanoss-automation[bot]@users.noreply.github.com>
Date: Sat, 26 Sep 2026 12:24:18 +0200
Subject: [PATCH 1/2] chore(cli): update earnie-pre-commit to 0.2.1

---
 pyproject.toml                          |  2 +-
 src/earnie_pre_commit/__init__.py       |  2 +-
 src/earnie_pre_commit/release-lock.json | 24 ++++++++++++------------
 3 files changed, 14 insertions(+), 14 deletions(-)

diff --git a/pyproject.toml b/pyproject.toml
index 3694ca3..6d38985 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "earnie-pre-commit"
-version = "0.1.1"
+version = "0.2.1"
 description = "pre-commit hook that runs a pinned signed Earnie CLI against the Git index"
 readme = "README.md"
 requires-python = ">=3.9"
diff --git a/src/earnie_pre_commit/__init__.py b/src/earnie_pre_commit/__init__.py
index c8e14d9..ca4b0fe 100644
--- a/src/earnie_pre_commit/__init__.py
+++ b/src/earnie_pre_commit/__init__.py
@@ -2,4 +2,4 @@
 
 __all__ = ["__version__"]
 
-__version__ = "0.1.1"
+__version__ = "0.2.1"
diff --git a/src/earnie_pre_commit/release-lock.json b/src/earnie_pre_commit/release-lock.json
index 3d41feb..aeab599 100644
--- a/src/earnie_pre_commit/release-lock.json
+++ b/src/earnie_pre_commit/release-lock.json
@@ -1,26 +1,26 @@
 {
-  "version": "0.1.1",
-  "release_base_url": "https://github.com/scanoss/earnie-cli/releases/download/v0.1.1",
+  "version": "0.2.1",
+  "release_base_url": "https://github.com/scanoss/earnie-cli/releases/download/v0.2.1",
   "archives": {
     "darwin_amd64": {
-      "name": "earnie_0.1.1_darwin_amd64.tar.gz",
-      "sha256": "3b856f2317801162bda53239904f3a0e5ccfab63fe350408bf76b69b193e0650"
+      "name": "earnie_0.2.1_darwin_amd64.tar.gz",
+      "sha256": "8427cdfcdd4321ffbd7ab33623554a122bc02c583136d2a28b47a929a181e590"
     },
     "darwin_arm64": {
-      "name": "earnie_0.1.1_darwin_arm64.tar.gz",
-      "sha256": "a8d0d33d0d484de5b1d08825d57c9b77d7a52466f5f6b173da1dbaf7491e7912"
+      "name": "earnie_0.2.1_darwin_arm64.tar.gz",
+      "sha256": "00ef823c53b97ee48dbb95e8aa95ff8b9de7f126f37198107d2e3319b5f7afc9"
     },
     "linux_amd64": {
-      "name": "earnie_0.1.1_linux_amd64.tar.gz",
-      "sha256": "85edcecec5054daaf0ab382511398e23bfa51d162ba945549adb67ec45e100f7"
+      "name": "earnie_0.2.1_linux_amd64.tar.gz",
+      "sha256": "1b016113b64126462f176c986d0e856635c284a4b96776bf94bab1261f3961a9"
     },
     "linux_arm64": {
-      "name": "earnie_0.1.1_linux_arm64.tar.gz",
-      "sha256": "3d4df9fdcb643e3836d7a44ac3157f9288d6eb16fba6857e0dc3e2e4fadfd478"
+      "name": "earnie_0.2.1_linux_arm64.tar.gz",
+      "sha256": "dc6bdd640f1b44c43d5b73ae0114e763237fcc11210fa732277a5e048dfa823e"
     },
     "windows_amd64": {
-      "name": "earnie_0.1.1_windows_amd64.zip",
-      "sha256": "d28a2e37052274d542a4625c318b5ab45011259bc5dacfbf9459f946b948a499"
+      "name": "earnie_0.2.1_windows_amd64.zip",
+      "sha256": "46d4d02beb7d3eb424b7e326a67e0bd7d133ed4d346642b76f9e510ad60b037f"
     }
   }
 }

From 7170cdca68bdb01c54abe56ccfc5cb07180ae7a7 Mon Sep 17 00:00:00 2001
From: matiasdaloia <66310421+matiasdaloia@users.noreply.github.com>
Date: Sat, 26 Sep 2026 13:55:08 +0200
Subject: [PATCH 2/2] test: read the pinned CLI version instead of naming 0.1.1

The CLI release workflow bumps the lock, pyproject and __version__ on
every release, so a test that names one version fails every bump PR.
It now checks the three agree and that the lock's URL and archive
names follow them.
---
 tests/test_wrapper.py | 18 ++++++++++++++----
 1 file changed, 14 insertions(+), 4 deletions(-)

diff --git a/tests/test_wrapper.py b/tests/test_wrapper.py
index 15fcf92..3795f25 100644
--- a/tests/test_wrapper.py
+++ b/tests/test_wrapper.py
@@ -5,24 +5,34 @@
 import pathlib
 import tarfile
 import tempfile
+import tomllib
 import unittest
 from unittest import mock
 
+import earnie_pre_commit
 from earnie_pre_commit.lock import SUPPORTED, archive_for, current_platform, load_lock
 
 
+PYPROJECT = pathlib.Path(__file__).resolve().parents[1] / "pyproject.toml"
+
+
 class LockTests(unittest.TestCase):
-    def test_lock_pins_cli_0_1_1_with_five_archives(self):
+    def test_lock_pins_the_package_version_with_five_archives(self):
+        # The CLI release workflow bumps the lock, pyproject and __version__
+        # together, so the test reads the version rather than naming one.
         lock = load_lock()
-        self.assertEqual("0.1.1", lock["version"])
+        version = earnie_pre_commit.__version__
+        pyproject = tomllib.loads(PYPROJECT.read_text())
+        self.assertEqual(version, pyproject["project"]["version"])
+        self.assertEqual(version, lock["version"])
         self.assertEqual(
-            "https://github.com/scanoss/earnie-cli/releases/download/v0.1.1",
+            f"https://github.com/scanoss/earnie-cli/releases/download/v{version}",
             lock["release_base_url"],
         )
         self.assertEqual(set(SUPPORTED), set(lock["archives"]))
         for name in SUPPORTED:
             archive = archive_for(lock, name)
-            self.assertIn(f"earnie_0.1.1_{name}.", archive["name"])
+            self.assertIn(f"earnie_{version}_{name}.", archive["name"])
             self.assertEqual(64, len(archive["sha256"]))
 
     def test_current_platform_maps_common_names(self):