Update, general cleanup and overall improvements

.gitattributes

@@ -0,0 +1 @@
+stringdatadeque/_version.py export-subst

.github/dependabot.yml

@@ -0,0 +1,12 @@
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    open-pull-requests-limit: 10
+  - package-ecosystem: "pip"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    open-pull-requests-limit: 10

.github/workflows/create-release-from-tag.yml

@@ -0,0 +1,93 @@
+name: Create Release From Tag
+on:
+  push:
+    tags:
+      - "v*.*.*"
+  workflow_dispatch:
+    inputs:
+      tag:
+        description: "Tag to release (for example: v3.0.0)"
+        required: true
+        type: string
+permissions:
+  contents: write
+jobs:
+  build-sdist:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v6
+      - name: Set up Python
+        uses: actions/setup-python@v6
+        with:
+          python-version: "3.12"
+      - name: Set up uv
+        uses: astral-sh/setup-uv@v7
+      - name: Build sdist
+        run: uv build --no-sources --sdist
+      - name: Upload sdist artifact
+        uses: actions/upload-artifact@v7
+        with:
+          name: release-sdist
+          path: dist/*.tar.gz
+  build-wheels:
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        python-version: ["3.12", "3.13", "3.14"]
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v6
+      - name: Set up Python
+        uses: actions/setup-python@v6
+        with:
+          python-version: ${{ matrix.python-version }}
+      - name: Set up uv
+        uses: astral-sh/setup-uv@v7
+      - name: Build wheel
+        run: uv build --no-sources --wheel
+      - name: Upload wheel artifact
+        uses: actions/upload-artifact@v7
+        with:
+          name: release-wheel-${{ matrix.python-version }}
+          path: dist/*.whl
+  create-release:
+    needs: [build-sdist, build-wheels]
+    runs-on: ubuntu-latest
+    steps:
+      - name: Download sdist artifact
+        uses: actions/download-artifact@v8
+        with:
+          name: release-sdist
+          path: dist/
+      - name: Download wheel artifacts
+        uses: actions/download-artifact@v8
+        with:
+          pattern: release-wheel-*
+          path: dist/wheels
+      - name: Prepare release assets
+        run: |
+          mkdir -p dist/release
+          cp dist/*.tar.gz dist/release/
+          python - <<'PY'
+          import hashlib
+          import shutil
+          from pathlib import Path
+
+          seen = set()
+          out = Path("dist/release")
+          for wheel in sorted(Path("dist/wheels").rglob("*.whl")):
+              digest = hashlib.sha256(wheel.read_bytes()).hexdigest()
+              if digest in seen:
+                  continue
+              seen.add(digest)
+              shutil.copy2(wheel, out / wheel.name)
+          PY
+      - name: Create GitHub release
+        uses: softprops/action-gh-release@v2
+        with:
+          tag_name: ${{ github.event.inputs.tag || github.ref_name }}
+          generate_release_notes: true
+          make_latest: true
+          files: dist/release/*

.github/workflows/gh_pages.yaml

@@ -0,0 +1,16 @@
+name: Deploy Sphinx documentation to Pages
+"on":
+  push:
+    branches: [master] # branch to trigger deployment
+jobs:
+  pages:
+    runs-on: ubuntu-20.04
+    environment:
+      name: github-pages
+      url: ${{ steps.deployment.outputs.page_url }}
+    permissions:
+      pages: write
+      id-token: write
+    steps:
+      - id: deployment
+        uses: sphinx-notes/pages@v3

.github/workflows/lint-format.yml

@@ -0,0 +1,43 @@
+name: Lint and Format
+"on":
+  pull_request:
+  push:
+    branches: [main]
+  workflow_dispatch:
+permissions:
+  contents: read
+jobs:
+  lint-format:
+    name: Lint and format checks (py${{ matrix.python-version }})
+    runs-on: ubuntu-latest
+    timeout-minutes: 30
+    strategy:
+      fail-fast: false
+      matrix:
+        python-version: ["3.12", "3.13", "3.14"]
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v6
+      - name: Set up Python
+        uses: actions/setup-python@v6
+        with:
+          python-version: ${{ matrix.python-version }}
+      - name: Set up uv
+        uses: astral-sh/setup-uv@v7
+      - name: Install project with dev dependencies
+        run: uv sync --extra dev
+      - name: Run lint and format hooks
+        run: |
+          uv run prek run ssort --all-files
+          uv run prek run fix-byte-order-marker check-merge-conflict \
+            end-of-file-fixer trailing-whitespace mixed-line-ending --all-files
+          uv run prek run check-yaml check-toml check-added-large-files \
+            check-executables-have-shebangs \
+            check-shebang-scripts-are-executable \
+            --all-files
+          uv run prek run yamlfmt yamllint --all-files
+          uv run prek run typos mdformat markdownlint-cli2 --all-files
+          uv run prek run taplo-format taplo-lint --all-files
+          uv run prek run pyupgrade pycln autopep695-format --all-files
+          uv run prek run ruff-check ruff-format ruff-check-post-format \
+            refurb --all-files

.github/workflows/pip-audit.yaml

@@ -0,0 +1,24 @@
+name: Pip-Audit
+"on":
+  pull_request:
+  push:
+    branches: [main]
+  workflow_dispatch:
+jobs:
+  selftest:
+    name: Pip-Audit (py${{ matrix.python-version }})
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        python-version: ["3.12", "3.13", "3.14"]
+    steps:
+      - uses: actions/checkout@v6
+      - uses: actions/setup-python@v6
+        with:
+          python-version: ${{ matrix.python-version }}
+          cache: "pip"
+      - uses: taiki-e/install-action@just
+      - name: Install Dependencies
+        run: just install
+      - uses: pypa/gh-action-pip-audit@v1.0.8

.github/workflows/pypi.yaml

@@ -0,0 +1,118 @@
+name: Publish to PyPI
+"on":
+  release:
+    types: [published]
+  workflow_dispatch:
+permissions:
+  contents: read
+jobs:
+  build-sdist:
+    name: Build sdist
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v6
+      - name: Set up Python
+        uses: actions/setup-python@v6
+        with:
+          python-version: "3.12"
+      - name: Set up uv
+        uses: astral-sh/setup-uv@v7
+      - name: Install check tooling
+        run: |
+          python -m pip install --upgrade pip
+          python -m pip install twine
+      - name: Clean dist directory
+        run: rm -rf dist
+      - name: Build sdist
+        run: uv build --no-sources --sdist
+      - name: Check distributions
+        run: python -m twine check dist/*.tar.gz
+      - name: Upload distributions artifact
+        uses: actions/upload-artifact@v7
+        with:
+          name: python-sdist
+          path: dist/*.tar.gz
+  build-wheels:
+    name: Build wheel (py${{ matrix.python-version }})
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        python-version: ["3.12", "3.13", "3.14"]
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v6
+      - name: Set up Python
+        uses: actions/setup-python@v6
+        with:
+          python-version: ${{ matrix.python-version }}
+      - name: Set up uv
+        uses: astral-sh/setup-uv@v7
+      - name: Install check tooling
+        run: |
+          python -m pip install --upgrade pip
+          python -m pip install twine
+      - name: Clean dist directory
+        run: rm -rf dist
+      - name: Build wheel
+        run: uv build --no-sources --wheel
+      - name: Check distributions
+        run: python -m twine check dist/*.whl
+      - name: Upload wheel artifact
+        uses: actions/upload-artifact@v7
+        with:
+          name: python-wheel-${{ matrix.python-version }}
+          path: dist/*.whl
+  publish:
+    name: Publish to PyPI
+    needs: [build-sdist, build-wheels]
+    runs-on: ubuntu-latest
+    environment:
+      name: pypi
+    permissions:
+      contents: read
+      id-token: write
+    steps:
+      - name: Set up Python
+        uses: actions/setup-python@v6
+        with:
+          python-version: "3.12"
+      - name: Download sdist artifact
+        uses: actions/download-artifact@v8
+        with:
+          name: python-sdist
+          path: dist/
+      - name: Download wheel artifacts
+        uses: actions/download-artifact@v8
+        with:
+          pattern: python-wheel-*
+          path: dist/wheels
+      - name: Prepare publish directory
+        run: |
+          mkdir -p dist/publish
+          cp dist/*.tar.gz dist/publish/
+          python - <<'PY'
+          import hashlib
+          import shutil
+          from pathlib import Path
+
+          seen = set()
+          out = Path("dist/publish")
+          for wheel in sorted(Path("dist/wheels").rglob("*.whl")):
+              digest = hashlib.sha256(wheel.read_bytes()).hexdigest()
+              if digest in seen:
+                  continue
+              seen.add(digest)
+              shutil.copy2(wheel, out / wheel.name)
+          PY
+      - name: Install check tooling
+        run: |
+          python -m pip install --upgrade pip
+          python -m pip install twine
+      - name: Check distributions
+        run: python -m twine check dist/publish/*
+      - name: Set up uv
+        uses: astral-sh/setup-uv@v7
+      - name: Publish package to PyPI
+        run: uv publish --trusted-publishing always --check-url https://pypi.org/simple dist/publish/*

.github/workflows/quality-security.yml

@@ -0,0 +1,30 @@
+name: Quality and Security
+"on":
+  pull_request:
+  push:
+    branches: [main]
+  workflow_dispatch:
+permissions:
+  contents: read
+jobs:
+  quality-security:
+    name: Quality and security checks (py${{ matrix.python-version }})
+    runs-on: ubuntu-latest
+    timeout-minutes: 20
+    strategy:
+      fail-fast: false
+      matrix:
+        python-version: ["3.12", "3.13", "3.14"]
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v6
+      - name: Set up Python
+        uses: actions/setup-python@v6
+        with:
+          python-version: ${{ matrix.python-version }}
+      - name: Set up uv
+        uses: astral-sh/setup-uv@v7
+      - name: Install project with dev dependencies
+        run: uv sync --extra dev
+      - name: Run quality and security hooks
+        run: uv run prek run vulture deptry detect-secrets --all-files

.github/workflows/tests.yml

@@ -0,0 +1,30 @@
+name: Tests
+"on":
+  pull_request:
+  push:
+    branches: [main]
+  workflow_dispatch:
+permissions:
+  contents: read
+jobs:
+  tests:
+    name: Test suite with coverage (py${{ matrix.python-version }})
+    runs-on: ubuntu-latest
+    timeout-minutes: 20
+    strategy:
+      fail-fast: false
+      matrix:
+        python-version: ["3.12", "3.13", "3.14"]
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v6
+      - name: Set up Python
+        uses: actions/setup-python@v6
+        with:
+          python-version: ${{ matrix.python-version }}
+      - name: Set up uv
+        uses: astral-sh/setup-uv@v7
+      - name: Install project with dev dependencies
+        run: uv sync --extra dev
+      - name: Run coverage gate hook
+        run: uv run prek run coverage-100 --all-files