Derive package version from git tags via setuptools-scm

[hownowstephen]

Summary

• Replace manually maintained customerio/__version__.py with setuptools-scm, which derives the version from git tags at build time
• Update client_base.py and tests/test_api.py to use importlib.metadata.version() instead of importing the now-deleted __version__ module
• Add fetch-depth: 0 to the publish workflow so setuptools-scm can read git tags during CI builds

Release flow after this change

1. Create a GitHub release with tag vX.Y.Z
2. Publish workflow triggers automatically
3. setuptools-scm reads the tag → builds with the correct version → publishes to PyPI

No code changes needed per release.

Test plan

• pytest — 59 tests pass
• ruff check — clean
• Verified importlib.metadata.version("customerio") resolves correctly from editable install

---

Note

Low Risk
Release/versioning workflow change with no auth or API behavior changes; main risk is mis-versioned builds if tags or shallow checkout are wrong, mitigated by fetch-depth: 0 on publish/CI.

Overview
Replaces the hand-maintained customerio/__version__.py with setuptools-scm, so the package version comes from git tags at build/install time instead of a committed constant.

Build and packaging: pyproject.toml adds setuptools-scm to the build backend, configures [tool.setuptools_scm], and removes the old tool.setuptools.dynamic attr-based version. Runtime and tests read the installed distribution version via importlib.metadata.version("customerio") in client_base.py and tests/test_api.py.

CI: actions/checkout in main (lint, test, package) and publish workflows now uses fetch-depth: 0 so full git history/tags are available for setuptools-scm during editable installs and PyPI builds.

^{Reviewed by Cursor Bugbot for commit 37abcff. Bugbot is set up for automated code reviews on this repo. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, have a team admin enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit dba5e59. Configure here.}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	setuptools-scm@​10.0.5

View full report