From 1fb0edec110916daf1ad753d563fd74b97ad8956 Mon Sep 17 00:00:00 2001 From: "Storm B. Heg" Date: Tue, 29 Oct 2024 18:43:12 +0100 Subject: [PATCH 1/2] Set up Django Commons release workflow --- .github/workflows/publish.yml | 32 --------- .github/workflows/release.yml | 121 ++++++++++++++++++++++++++++++++++ 2 files changed, 121 insertions(+), 32 deletions(-) delete mode 100644 .github/workflows/publish.yml create mode 100644 .github/workflows/release.yml diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml deleted file mode 100644 index 2ca686f..0000000 --- a/.github/workflows/publish.yml +++ /dev/null @@ -1,32 +0,0 @@ -name: Publish - -on: - push: - tags: - - "[0-9]+.[0-9]+.[0-9]+" - -jobs: - publish: - runs-on: ubuntu-latest - steps: - - uses: actions/checkout@v4 - - - name: Set up Python 3.12 - uses: actions/setup-python@v5 - with: - python-version: "3.12" - - - name: Install uv - uses: astral-sh/setup-uv@v3 - - - name: Build - run: uv build - - - name: Publish - run: | - uv publish - env: - UV_PUBLISH_TOKEN: ${{ secrets.PYPI_TOKEN }} - - - name: Release - uses: softprops/action-gh-release@v2 diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml new file mode 100644 index 0000000..3ba3b08 --- /dev/null +++ b/.github/workflows/release.yml @@ -0,0 +1,121 @@ +name: Publish Python 🐍 distribution 📦 to PyPI and TestPyPI + +on: push + +env: + # Change these for your project's URLs + PYPI_URL: https://pypi.org/p/django-tailwind-cli + PYPI_TEST_URL: https://test.pypi.org/p/django-tailwind-cli + +jobs: + + build: + name: Build distribution 📦 + runs-on: ubuntu-latest + + steps: + - uses: actions/checkout@v4 + - name: Set up Python + uses: actions/setup-python@v5 + with: + python-version: "3.x" + - name: Install pypa/build + run: + python3 -m pip install build --user + - name: Build a binary wheel and a source tarball + run: python3 -m build + - name: Store the distribution packages + uses: actions/upload-artifact@v4 + with: + name: python-package-distributions + path: dist/ + + publish-to-pypi: + name: >- + Publish Python 🐍 distribution 📦 to PyPI + if: startsWith(github.ref, 'refs/tags/') # only publish to PyPI on tag pushes + needs: + - build + runs-on: ubuntu-latest + environment: + name: pypi + url: ${{ env.PYPI_URL }} + permissions: + id-token: write # IMPORTANT: mandatory for trusted publishing + steps: + - name: Download all the dists + uses: actions/download-artifact@v4 + with: + name: python-package-distributions + path: dist/ + - name: Publish distribution 📦 to PyPI + uses: pypa/gh-action-pypi-publish@release/v1.10 + + github-release: + name: >- + Sign the Python 🐍 distribution 📦 with Sigstore + and upload them to GitHub Release + needs: + - publish-to-pypi + runs-on: ubuntu-latest + + permissions: + contents: write # IMPORTANT: mandatory for making GitHub Releases + id-token: write # IMPORTANT: mandatory for sigstore + + steps: + - name: Download all the dists + uses: actions/download-artifact@v4 + with: + name: python-package-distributions + path: dist/ + - name: Sign the dists with Sigstore + uses: sigstore/gh-action-sigstore-python@v3.0.0 + with: + inputs: >- + ./dist/*.tar.gz + ./dist/*.whl + - name: Create GitHub Release + env: + GITHUB_TOKEN: ${{ github.token }} + run: >- + gh release create + '${{ github.ref_name }}' + --repo '${{ github.repository }}' + --notes "" + - name: Upload artifact signatures to GitHub Release + env: + GITHUB_TOKEN: ${{ github.token }} + # Upload to GitHub Release using the `gh` CLI. + # `dist/` contains the built packages, and the + # sigstore-produced signatures and certificates. + run: >- + gh release upload + '${{ github.ref_name }}' dist/** + --repo '${{ github.repository }}' + + publish-to-testpypi: + name: Publish Python 🐍 distribution 📦 to TestPyPI + if: startsWith(github.ref, 'refs/tags/') # only publish to TestPyPI on tag pushes + needs: + - build + runs-on: ubuntu-latest + + environment: + name: testpypi + url: ${{ env.PYPI_TEST_URL }} + + permissions: + id-token: write # IMPORTANT: mandatory for trusted publishing + + steps: + - name: Download all the dists + uses: actions/download-artifact@v4 + with: + name: python-package-distributions + path: dist/ + - name: Publish distribution 📦 to TestPyPI + uses: pypa/gh-action-pypi-publish@release/v1.10 + with: + repository-url: https://test.pypi.org/legacy/ + skip-existing: true \ No newline at end of file From 33a0f0643922c63fe9c776bc46fb7dd4f54b8772 Mon Sep 17 00:00:00 2001 From: "Storm B. Heg" Date: Tue, 29 Oct 2024 19:04:07 +0100 Subject: [PATCH 2/2] Disable test-pypi publish --- .github/workflows/release.yml | 44 +++++++++++++++++------------------ 1 file changed, 22 insertions(+), 22 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 3ba3b08..dafce44 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -94,28 +94,28 @@ jobs: '${{ github.ref_name }}' dist/** --repo '${{ github.repository }}' - publish-to-testpypi: - name: Publish Python 🐍 distribution 📦 to TestPyPI - if: startsWith(github.ref, 'refs/tags/') # only publish to TestPyPI on tag pushes - needs: - - build - runs-on: ubuntu-latest + # publish-to-testpypi: + # name: Publish Python 🐍 distribution 📦 to TestPyPI + # if: startsWith(github.ref, 'refs/tags/') # only publish to TestPyPI on tag pushes + # needs: + # - build + # runs-on: ubuntu-latest - environment: - name: testpypi - url: ${{ env.PYPI_TEST_URL }} + # environment: + # name: testpypi + # url: ${{ env.PYPI_TEST_URL }} - permissions: - id-token: write # IMPORTANT: mandatory for trusted publishing + # permissions: + # id-token: write # IMPORTANT: mandatory for trusted publishing - steps: - - name: Download all the dists - uses: actions/download-artifact@v4 - with: - name: python-package-distributions - path: dist/ - - name: Publish distribution 📦 to TestPyPI - uses: pypa/gh-action-pypi-publish@release/v1.10 - with: - repository-url: https://test.pypi.org/legacy/ - skip-existing: true \ No newline at end of file + # steps: + # - name: Download all the dists + # uses: actions/download-artifact@v4 + # with: + # name: python-package-distributions + # path: dist/ + # - name: Publish distribution 📦 to TestPyPI + # uses: pypa/gh-action-pypi-publish@release/v1.10 + # with: + # repository-url: https://test.pypi.org/legacy/ + # skip-existing: true \ No newline at end of file