Skip to content

Update dependencies in lockfile (#91) #141

Update dependencies in lockfile (#91)

Update dependencies in lockfile (#91) #141

Workflow file for this run

name: Test & Build
on:
push:
branches:
- stable
- develop
- main
tags:
pull_request:
branches:
- stable
- develop
- main
jobs:
checks:
name: Checks
runs-on: ubuntu-latest
container: fedorapython/fedora-python-tox:latest
steps:
- uses: actions/checkout@v4
- name: Install dependencies
run: |
dnf install -y pre-commit git rust cargo openssl-devel krb5-devel
pip install poetry>=1.2
- name: Mark the working directory as safe for Git
run: git config --global --add safe.directory $PWD
- name: Install the project
run: poetry install
- name: Run pre-commit checks
run: pre-commit run --all-files
unit-tests:
name: Unit tests
runs-on: ubuntu-latest
container: fedorapython/fedora-python-tox:latest
steps:
- uses: actions/checkout@v4
with:
# Needed for diff-cover
fetch-depth: 0
- name: Install dependencies
run: |
dnf install -y libpq-devel krb5-devel
pip install poetry>=1.2
- name: Mark the working directory as safe for Git
run: git config --global --add safe.directory $PWD
- name: Run the tests
run: tox -e ${{ matrix.pyver }},diff-cover
strategy:
matrix:
pyver:
- py39
- py310
- py311
# https://packaging.python.org/en/latest/guides/publishing-package-distribution-releases-using-github-actions-ci-cd-workflows/
build:
name: Build distribution 📦
runs-on: ubuntu-latest
needs:
- checks
- unit-tests
# outputs:
# release-notes: ${{'{{'}} steps.extract-changelog.outputs.markdown {{'}}'}}
steps:
- uses: actions/checkout@v4
- name: Set up Python
uses: actions/setup-python@v5
with:
python-version: "3.x"
- name: Install pypa/build
run: python3 -m pip install build --user
- name: Build a binary wheel and a source tarball
run: python3 -m build
- name: Store the distribution packages
uses: actions/upload-artifact@v4
with:
name: python-package-distributions
path: dist/
# - name: Extract changelog section
# id: extract-changelog
# uses: sean0x42/markdown-extract@v2
# with:
# file: docs/release_notes.md
# pattern: 'Version\s+\[[[:word:].-]+\]\(.*\)'
# no-print-matched-heading: true
# - name: Show the changelog
# env:
# CHANGELOG: ${{'{{'}} steps.extract-changelog.outputs.markdown {{'}}'}}
# run: echo "$CHANGELOG"
publish-to-pypi:
name: Publish to PyPI 🚀
if: startsWith(github.ref, 'refs/tags/') && !contains(github.ref, 'rc') # only publish to PyPI on final tag pushes
needs:
- build
runs-on: ubuntu-latest
environment:
name: pypi
url: https://pypi.org/p/bugzilla2fedmsg
permissions:
id-token: write # IMPORTANT: mandatory for trusted publishing
steps:
- name: Download all the dists
uses: actions/download-artifact@v4
with:
name: python-package-distributions
path: dist/
- name: Publish distribution to PyPI
uses: pypa/gh-action-pypi-publish@release/v1
github-release:
name: Create a GitHub Release 📢
needs:
- publish-to-pypi
# The "build" dep is redundant but needed to access the changelog
# - build
runs-on: ubuntu-latest
permissions:
contents: write # IMPORTANT: mandatory for making GitHub Releases
id-token: write # IMPORTANT: mandatory for sigstore
steps:
- name: Download all the dists
uses: actions/download-artifact@v4
with:
name: python-package-distributions
path: dist/
- name: Sign the dists with Sigstore
uses: sigstore/[email protected]
with:
inputs: >-
./dist/*.tar.gz
./dist/*.whl
- name: Release
uses: softprops/action-gh-release@v2
with:
files: dist/*
fail_on_unmatched_files: true
generate_release_notes: true
# body: ${{'{{'}} needs.build.outputs.release-notes {{'}}'}}