merge v1.4.4 into release/1.4 — JAR bundling + release-guard fixes precede 1.5.0

# Conflicts:
#	CHANGELOG.md
#	pyproject.toml

Author: rahlk

.github/workflows/release.yml

@@ -65,6 +65,36 @@ jobs:
       - name: Build Package
         run: uv build
 
+      - name: Verify the codeanalyzer JAR is bundled
+        # Guard against the hatchling/.gitignore regression (issue #284): a jarless wheel
+        # installs fine but fails at runtime with "codeanalyzer jar not found". Fail the
+        # release here rather than publish a broken artifact to PyPI.
+        #
+        # The listing is captured before grepping: piping `tar tzf` (which decompresses the
+        # whole 32MB sdist) straight into `grep -q` lets grep close the pipe on first match,
+        # SIGPIPE-killing tar and — under `pipefail` — reporting a false "missing JAR".
+        run: |
+          set -euo pipefail
+          jar_re='codeanalyzer/jar/codeanalyzer-[0-9][^/]*\.jar$'
+          fail=0
+          for f in dist/*.whl dist/*.tar.gz; do
+            case "$f" in
+              *.whl)    listing=$(unzip -l "$f") ;;
+              *.tar.gz) listing=$(tar tzf "$f") ;;
+            esac
+            if grep -qE "$jar_re" <<<"$listing"; then
+              echo "  ✓ $f"
+            else
+              echo "::error::$f is missing the codeanalyzer JAR"
+              grep -i '\.jar' <<<"$listing" || echo "  (no .jar entries at all)"
+              fail=1
+            fi
+          done
+          if [ "$fail" -ne 0 ]; then
+            echo "Refusing to publish a jarless release."; exit 1
+          fi
+          echo "codeanalyzer JAR present in wheel and sdist ✓"
+
       - name: Read Changelog Entry
         id: changelog_reader
         uses: mindsers/changelog-reader-action@v2

CHANGELOG.md

@@ -33,6 +33,17 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Getter/setter pairs share one signature in the analyzer's output; the two backends currently
   collapse such pairs differently (#300 — documented on `get_callables_overview`).
 
+## [v1.4.4] - 2026-07-22
+
+### Fixed
+- **Published wheels bundle the `codeanalyzer-java` JAR again.** Every hatchling-built wheel/sdist
+  since v1.2.0 shipped without the JAR, so `pip install cldk` + `CLDK.java(...)` raised
+  `CodeanalyzerExecutionException: codeanalyzer jar not found`. The root `.gitignore` `*.jar` rule
+  was applied at build time while the nested `!codeanalyzer-*.jar` negation (which keeps the JAR in
+  git) was not honored, silently dropping the JAR from any build run inside a git repo — i.e. CI. A
+  `[tool.hatch.build] artifacts` rule force-includes it, and the release workflow now fails if a
+  built artifact is missing the JAR. (#284)
+
 ## [v1.4.3] - 2026-07-14
 
 ### Fixed

pyproject.toml

@@ -74,6 +74,13 @@ test = [
 requires = ["hatchling"]
 build-backend = "hatchling.build"
 
+# The codeanalyzer-java JAR is force-included here: it lives under a `*.jar` .gitignore
+# (re-included for git via a nested `!codeanalyzer-*.jar`), but hatchling honors the root
+# ignore and not the nested negation, so without this it is silently dropped from every
+# wheel/sdist built inside a git repo (i.e. in CI). See issue #284.
+[tool.hatch.build]
+artifacts = ["cldk/analysis/java/codeanalyzer/jar/*.jar"]
+
 [tool.hatch.build.targets.wheel]
 packages = ["cldk"]