refactor(build): migrate from setup.py to pyproject.toml

.github/workflows/publish-release.yml

@@ -23,7 +23,6 @@ jobs:
       env:
         NEW_TAG: ${{ steps.get_release.outputs.tag_name }}
       run: |
-        pip install --upgrade bumpversion
         LAST_TWO_TAGS=$(git for-each-ref refs/tags/ --count=2 --sort=-v:refname --format="%(refname:short)")
         LAST_ONE=$(echo $LAST_TWO_TAGS | cut -d' ' -f 2)
         last_version=$(echo ${LAST_ONE//v/""})
@@ -32,7 +31,7 @@ jobs:
         echo New version: ${new_version}
         git config --global user.name "github-actions[bot]"
         git config --global user.email "fosslight-dev@lge.com"
-        bumpversion --current-version $last_version --new-version $new_version setup.py
+        sed -i "s/^version = \".*\"/version = \"$new_version\"/" pyproject.toml
     - name: update changelog with gren
       env:
         GREN_GITHUB_TOKEN: ${{ secrets.TOKEN }}
@@ -42,7 +41,7 @@ jobs:
     - name: Commit files
       run: |
         git config --local user.name "github-actions[bot]"
-        git add CHANGELOG.md
+        git add CHANGELOG.md pyproject.toml
         git commit -m "Update ChangeLog"
     - name: Push changes
       uses: ad-m/github-push-action@master
@@ -64,11 +63,11 @@ jobs:
     - name: Install dependencies
       run: |
         python -m pip install --upgrade pip
-        pip install setuptools wheel twine
+        pip install build twine
     - name: Build and publish
       env:
         TWINE_USERNAME: ${{ secrets.PYPI_USERNAME }}
         TWINE_PASSWORD: ${{ secrets.PYPI_PASSWORD }}
       run: |
-        python setup.py sdist bdist_wheel
+        python -m build
         twine upload dist/*

.reuse/dep5

@@ -22,10 +22,6 @@ Files: requirements*.txt
 Copyright: 2021 LG Electronics
 License: Apache-2.0
 
-Files: .bumpversion.cfg
-Copyright: 2021 LG Electronics
-License: Apache-2.0
-
 Files: .coderabbit.yaml
 Copyright: 2026 LG Electronics
 License: Apache-2.0

MANIFEST.in

@@ -1,3 +1,2 @@
 include LICENSE
 include README.md
-include requirements.txt

pyproject.toml

@@ -0,0 +1,55 @@
+# Copyright (c) 2026 LG Electronics
+# SPDX-License-Identifier: Apache-2.0
+
+[build-system]
+requires = ["setuptools>=61", "wheel"]
+build-backend = "setuptools.build_meta"
+
+[project]
+name = "fosslight_source"
+version = "2.2.12"
+description = "FOSSLight Source Scanner"
+readme = "README.md"
+license = { text = "Apache-2.0" }
+authors = [
+    { name = "LG Electronics" }
+]
+keywords = ["fosslight", "scanner", "license", "source"]
+classifiers = [
+    "License :: OSI Approved :: Apache Software License",
+    "Programming Language :: Python :: 3",
+    "Programming Language :: Python :: 3.10",
+    "Programming Language :: Python :: 3.11",
+    "Programming Language :: Python :: 3.12",
+]
+requires-python = ">=3.10,<3.13"
+dependencies = [
+    "setuptools<=80.10.2",
+    "pyparsing",
+    "scanoss>=1.19.0",
+    "XlsxWriter",
+    "fosslight_util>=2.1.37",
+    "PyYAML",
+    "wheel>=0.38.1",
+    "intbitset",
+    "fosslight_binary>=5.0.0",
+    "scancode-toolkit>=32.0.2",
+    "fingerprints==1.2.3",
+    "normality==2.6.1",
+]
+
+[project.optional-dependencies]
+# none for now
+
+[project.urls]
+Homepage = "https://github.com/fosslight/fosslight_source_scanner"
+Download = "https://github.com/fosslight/fosslight_source_scanner"
+
+[project.scripts]
+fosslight_source = "fosslight_source.cli:main"
+
+[tool.setuptools]
+package-dir = {"" = "src"}
+
+[tool.setuptools.packages.find]
+where = ["src"]