Try to use trusted publishing #15
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Inspired by: https://github.com/pypa/hatch/blob/6322daba750f8db73361fa1aaa965bc99605303b/.github/workflows/build-hatch.yml | |
| name: build mreg-cli | |
| on: | |
| push: | |
| tags: | |
| - mreg-cli-v* | |
| branches: | |
| - publishing | |
| concurrency: | |
| group: build-mreg-cli-${{ github.head_ref }} | |
| jobs: | |
| build_pypi: | |
| name: Build wheels and source distribution | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| # # Only release from master branch | |
| # # https://stackoverflow.com/a/74690436 | |
| # - name: Exit if not on master branch | |
| # if: endsWith(github.event.base_ref, 'master') == false | |
| # run: exit -1 | |
| - name: Install build dependencies | |
| run: python -m pip install --upgrade build | |
| - name: Build source distribution | |
| run: python -m build | |
| - uses: actions/upload-artifact@v4 | |
| with: | |
| name: pypi_artifacts | |
| path: dist/* | |
| if-no-files-found: error | |
| build_pyinstaller: | |
| name: Build pyinstaller binary | |
| runs-on: ${{ matrix.os }} | |
| strategy: | |
| matrix: | |
| os: [ubuntu-22.04, windows-latest, macos-latest] | |
| python-version: | |
| - '3.12' | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Set up Python ${{ matrix.python-version }} | |
| uses: actions/setup-python@v5 | |
| with: | |
| python-version: ${{ matrix.python-version }} | |
| - name: Run PyInstaller with Tox | |
| run: | | |
| python -m ensurepip --upgrade | |
| python -m pip install tox tox-uv tox-gh-actions | |
| tox | |
| - uses: actions/upload-artifact@v4 | |
| name: Upload created binary | |
| with: | |
| name: mreg-cli-${{ matrix.os }}-${{ matrix.python-version }} | |
| path: dist/mreg-cli${{ contains(matrix.os, 'windows') && '.exe' || '' }} | |
| if-no-files-found: error | |
| publish_pypi: | |
| name: Publish PyPI release | |
| needs: | |
| - build_pypi | |
| runs-on: ubuntu-latest | |
| # environment: | |
| # name: pypi | |
| # url: https://pypi.org/p/mreg-cli | |
| permissions: | |
| id-token: write | |
| steps: | |
| - uses: actions/download-artifact@v4 | |
| with: | |
| name: pypi_artifacts | |
| path: dist | |
| - name: Push build artifacts to PyPI | |
| uses: pypa/[email protected] | |
| with: | |
| # skip-existing: true | |
| # user: __token__ | |
| # password: ${{ secrets.PYPI_API_TOKEN_TEST }} | |
| # verbose: true | |
| repository-url: https://test.pypi.org/legacy/ | |
| # publish_github: | |
| # name: Publish GitHub release | |
| # needs: | |
| # - build_pypi | |
| # - build_pyinstaller | |
| # runs-on: ubuntu-latest | |
| # steps: | |
| # - name: Download staged binaries | |
| # uses: actions/download-artifact@v4 | |
| # with: | |
| # pattern: mreg-cli-* | |
| # path: dist | |
| # merge-multiple: true | |
| # - name: Download wheel and source distributions | |
| # uses: actions/download-artifact@v4 | |
| # with: | |
| # pattern: pypi_artifacts/* | |
| # path: dist | |
| # merge-multiple: true | |
| # - name: Create GitHub release | |
| # id: create_release | |
| # uses: actions/create-release@v1 | |
| # env: | |
| # GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| # with: | |
| # tag_name: ${{ github.ref }} | |
| # release_name: Release ${{ github.ref }} | |
| # body: | | |
| # Release notes for ${{ github.ref }} | |
| # draft: false | |
| # prerelease: true | |
| # - name: Upload release asset | |
| # id: upload-release-asset | |
| # uses: softprops/action-gh-release@v2 | |
| # env: | |
| # GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| # with: | |
| # files: dist/* |