feat!: Bump openjd-* Rust crates to the openjd-model 0.11.0 release (#375)

* feat!: Bump openjd-* Rust crates to the openjd-model 0.11.0 release

openjd-rs released openjd-expr 0.10.1, openjd-model 0.10.1 and
openjd-sessions 0.7.2 on 2026-09-30 (OpenJobDescription/openjd-rs#416),
then openjd-model 0.11.0 and openjd-sessions 0.7.3 on 2026-10-03
(#420). This package pinned 0.10.0 / 0.10.0 / 0.7.1. Cargo.lock moves
only the three crates; no transitive dependency changed. openjd-sessions
has no source change in either release.

One public Rust API change breaks compilation: #419 makes
template::SimpleAction::script a FormatString. The constructor and the
getter of PySimpleAction were the two errors. Following #373's
capability-name precedent, the Python-facing SimpleAction.script is now
an openjd.expr.FormatString in both directions, like its args/timeout
siblings and the EmbeddedFile.data it desugars to. The new Rust-side
SimpleActionKind / simple_actions / simple_action helpers are not
exposed: nothing here consumes them, and step.bash..node already cover
introspection. resolve_syntax_sugar changed signature but the bindings
never call it.

Behaviour changes, each measured through this package's Python API
against both pins, with expectations copied from upstream assertions:

- #419: bash/python/cmd/powershell/node steps are validated at decode
  with errors at the authored path (steps[0] -> bash -> args[1]). On
  0.10.0, 17 of 21 upstream rejection cases decoded; 9 failed later at
  create_job at the desugared path, 8 were never rejected. A malformed
  script now fails at parse (DecodeValidationError). Non-ASCII step
  names no longer raise PanicException (ASCII-only sanitizer, named in
  the squash body but not the changelog).
- #419, also named only in the squash body: the comprehension-variable
  check now covers a step script's authored embeddedFiles[].data. A
  comprehension over a let-bound name in data decoded on 0.10.0 and is
  now rejected at steps[0] -> script -> embeddedFiles[0] -> data. The
  same check on command and args is unchanged. v0 agrees on outcome and
  path in 4/4 cases.
- #421: LIST[PATH] defaults must be relative and stay inside the
  template directory, are joined to it and normalized, element by
  element; relative submitted PATH / LIST[PATH] values are joined and
  normalized; defaults are constraint-checked after the join, including
  environment-template parameters. Absolute submitted values are
  returned as written. create_job without a preceding preprocess is
  unchanged (measured, 7 cases identical on both pins).
- #410: a job environment's let failure now reads like a step script's
  ("script let binding 'q': ..."); the missing-extension message lists
  extensions sorted.
- #410/#417/#418: openjd.expr memory accounting; every upstream byte
  figure reproduces. Some expressions that fit now exceed the limit
  (coercion to the target type, string slices, attribute base lookups)
  and some that failed now fit. No existing Python test pinned a moved
  figure.

Unreachable from Python: URI-allowed LIST[PATH] rows (the binding
hard-codes allow_uri_path_values=false, create_job_fns.rs:158; upstream
test_create_job.rs covers them). The Windows rows of #421 are added as
win32-only tests and were not run locally.

v0 divergence: v0 preprocess_job_parameters returns LIST[PATH] defaults
unjoined and does not normalize submitted '..'. openjd-specifications#191
(Template Schemas 2.2, 2.12) makes v1's behaviour normative. Recorded as
two strict xfails in test_known_gaps.py and in the model report; fixing
v0 is a separate change. On the #419 decode cases v0 agrees with v1 on
outcome in 22/24 and on field path in 16/24; the two outcome
differences are v0 rejecting Task.File.<step>_script, which predates
this bump.

Verified: 6323 passed / 26 skipped / 5 xfailed, coverage 94.22%. The +2
skipped are the Windows-only tests, the +2 xfailed the v0 gaps; no
strict xfail flipped. ruff, black, mypy, cargo fmt, build, clippy
-D warnings, test and test --doc clean. THIRD-PARTY-LICENSES.txt
regenerated (three version lines) and verify mode passes.

Mutants, each rebuilt, bytecode cleared, restored by checksum: reverting
the pins and the adaptation kills 62 of 79 new or edited cases (the 17
survivors are controls whose behaviour 0.10.0 shares); the getter
returning str kills 4; the constructor accepting str kills 4.

Not done: the three-auditor review of the new tests
(regression-workflow section 3) was not dispatched; the mutation
results above are the author's own. TestExtremeSliceSteps pins the #418
overflow fix only in a build with overflow checks; a hatch env install
of 0.10.0 already returned the right answer.

BREAKING CHANGE: SimpleAction.script is an openjd.expr.FormatString
instead of str, and SimpleAction(script=...) requires one. LIST[PATH]
defaults must be relative and are joined with the job template
directory; relative submitted PATH values are normalized.

Signed-off-by: David Leong <116610336+leongdl@users.noreply.github.com>

* chore(deps): Bump pyo3 to 0.29.3 for clippy 1.99

Rust 1.99.0 (stable since 2026-10-01) makes clippy flag
clone_on_copy inside pyo3 0.29.2's #[pyclass(from_py_object)]
expansion on Copy enums: 13 errors, which fail Rust Quality's
clippy -D warnings step on every PR. pyo3 0.29.3 fixes the
generated code (PyO3/pyo3#6309).

Raise the floor in rust-bindings/Cargo.toml to 0.29.3 so a fresh
resolve cannot pick the affected release. THIRD-PARTY-LICENSES.txt
regenerated; only the four pyo3 version lines changed.

Signed-off-by: David Leong <116610336+leongdl@users.noreply.github.com>

---------

Signed-off-by: David Leong <116610336+leongdl@users.noreply.github.com>

Author: leongdl

Cargo.lock

@@ -2741,16 +2741,16 @@ limitations under the License.
 ** itoa; version 1.0.18 -- https://crates.io/crates/itoa
 ** libc; version 0.2.189 -- https://crates.io/crates/libc
 ** manyhow-macros; version 0.11.4 -- https://crates.io/crates/manyhow-macros
-** openjd-expr; version 0.10.0 -- https://crates.io/crates/openjd-expr
-** openjd-model; version 0.10.0 -- https://crates.io/crates/openjd-model
-** openjd-sessions; version 0.7.1 -- https://crates.io/crates/openjd-sessions
+** openjd-expr; version 0.10.1 -- https://crates.io/crates/openjd-expr
+** openjd-model; version 0.11.0 -- https://crates.io/crates/openjd-model
+** openjd-sessions; version 0.7.3 -- https://crates.io/crates/openjd-sessions
 ** pin-project-lite; version 0.2.17 -- https://crates.io/crates/pin-project-lite
 ** portable-atomic; version 1.15.0 -- https://crates.io/crates/portable-atomic
 ** proc-macro2; version 1.0.107 -- https://crates.io/crates/proc-macro2
-** pyo3-ffi; version 0.29.2 -- https://crates.io/crates/pyo3-ffi
-** pyo3-macros-backend; version 0.29.2 -- https://crates.io/crates/pyo3-macros-backend
-** pyo3-macros; version 0.29.2 -- https://crates.io/crates/pyo3-macros
-** pyo3; version 0.29.2 -- https://crates.io/crates/pyo3
+** pyo3-ffi; version 0.29.3 -- https://crates.io/crates/pyo3-ffi
+** pyo3-macros-backend; version 0.29.3 -- https://crates.io/crates/pyo3-macros-backend
+** pyo3-macros; version 0.29.3 -- https://crates.io/crates/pyo3-macros
+** pyo3; version 0.29.3 -- https://crates.io/crates/pyo3
 ** quote; version 1.0.47 -- https://crates.io/crates/quote
 ** r-efi; version 6.0.0 -- https://crates.io/crates/r-efi
 ** rustc-hash; version 2.1.3 -- https://crates.io/crates/rustc-hash

THIRD-PARTY-LICENSES.txt

@@ -345,6 +345,14 @@ divergence flagged in §8.
 * **`TokenError`, `parse_model`** — exposed on v0, absent on v1. The
   former is a downstream-visible surface change; the latter was
   internal.
+* **PATH / `LIST[PATH]` preprocessing** — since openjd-model 0.11.0
+  (openjd-rs#421) v1 joins `LIST[PATH]` defaults to the template
+  directory, applies the PATH default rules per element, and normalizes
+  relative submitted values (`sub/../other` → `<cwd>/other`). v0 returns
+  `LIST[PATH]` defaults unjoined and joins submitted values without
+  normalizing. openjd-specifications#191 (§2.2, §2.12) makes the v1
+  behaviour normative, so v0 is the side to fix. Pinned as strict xfails in
+  `test/openjd/model_v1/test_known_gaps.py`.
 
 ## 6. Build and Test Results
 

reports/model-bindings-quality-evaluation-report.md

@@ -12,13 +12,13 @@ name = "_openjd_rs"
 crate-type = ["cdylib", "rlib"]
 
 [dependencies]
-openjd-expr = "0.10.0"
-openjd-model = "0.10.0"
-openjd-sessions = "0.7.1"
+openjd-expr = "0.10.1"
+openjd-model = "0.11.0"
+openjd-sessions = "0.7.3"
 tokio = { version = "1", features = ["rt-multi-thread"] }
 uuid = { version = "1", features = ["v4"] }
 serde_json = "1"
-pyo3 = { version = "0.29", features = ["abi3-py39"] }
+pyo3 = { version = "0.29.3", features = ["abi3-py39"] }
 pyo3-log = "0.13"
 log = "0.4"
 pyo3-stub-gen = { version = "0.23", optional = true }

rust-bindings/Cargo.toml

@@ -1288,7 +1288,7 @@ impl PySimpleAction {
     #[new]
     #[pyo3(signature = (*, script, let_bindings=None, args=None, timeout=None, cancelation=None))]
     fn new(
-        script: String,
+        script: PyFormatString,
         let_bindings: Option<Vec<String>>,
         args: Option<Vec<PyFormatString>>,
         timeout: Option<PyFormatString>,
@@ -1297,7 +1297,7 @@ impl PySimpleAction {
         PySimpleAction {
             inner: SimpleAction {
                 let_bindings,
-                script,
+                script: script.inner,
                 args: args.map(|a| a.into_iter().map(|fs| fs.inner).collect()),
                 timeout: timeout.map(|t| t.inner),
                 cancelation: cancelation.map(|c| c.inner),
@@ -1306,8 +1306,10 @@ impl PySimpleAction {
     }
 
     #[getter]
-    fn script(&self) -> &str {
-        &self.inner.script
+    fn script(&self) -> PyFormatString {
+        PyFormatString {
+            inner: self.inner.script.clone(),
+        }
     }
 
     #[getter]

rust-bindings/src/model/template_types.rs

@@ -278,6 +278,15 @@ str(job.steps[0].script.actions.onRun.command)  # "render"
 Validate and coerce job parameter values. Accepts `str` or `pathlib.Path`
 for directory arguments.
 
+PATH and `LIST[PATH]` follow Template Schemas §2.2 and §2.12, element-wise for
+lists: a default must be relative and stay inside `job_template_dir`, and is
+joined to it. `allow_job_template_dir_walk_up=True` lifts both conditions: an
+absolute default is returned as written, and a relative one may escape
+`job_template_dir` with `..`. A relative submitted
+value is joined to `current_working_dir`. Joined values are lexically
+normalized; an absolute submitted value is returned as written. A default's
+constraints are checked against the joined value. URI values are refused. Violations raise `DecodeValidationError` (openjd-rs#421).
+
 ```python
 from openjd.model._v1 import decode_job_template, preprocess_job_parameters
 from pathlib import Path
@@ -999,13 +1008,17 @@ dep.depends_on                  # str (alias: dependsOn)
 
 ```python
 sa = step.bash  # or .python, .cmd, .powershell, .node
-sa.script                       # str
+sa.script                       # FormatString
 sa.let_bindings                 # Optional[list[str]] (alias: let)
 sa.args                         # Optional[list[FormatString]]
 sa.timeout                      # Optional[FormatString]
 sa.cancelation                  # Optional[CancelationMode]
 ```
 
+A `SimpleAction` is validated at decode with the checks of the `StepScript` it
+desugars to, and errors name the authored path (`steps[0] -> bash -> args[1]`).
+A malformed `script` format string raises `DecodeValidationError` (openjd-rs#419).
+
 ### `StepParameterSpaceDefinition` (5 typed task-parameter variants)
 
 `StepTemplate.parameter_space` returns

specs/python-model-interface.md

@@ -2253,7 +2253,7 @@ class Session:
 @typing.final
 class SimpleAction:
     @property
-    def script(self) -> builtins.str: ...
+    def script(self) -> FormatString: ...
     @property
     def let_bindings(self) -> typing.Optional[builtins.list[builtins.str]]: ...
     @property
@@ -2267,7 +2267,7 @@ class SimpleAction:
     def __new__(
         cls,
         *,
-        script: builtins.str,
+        script: FormatString,
         let_bindings: typing.Optional[typing.Sequence[builtins.str]] = None,
         args: typing.Optional[typing.Sequence[FormatString]] = None,
         timeout: typing.Optional[FormatString] = None,