Adjust uv cache-keys (#16) #2
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
# .github/workflows/publish-pypi.yml | |
# uses trusted publishing to publish the package to PyPI and create a GitHub | |
# release as described here: | |
# https://packaging.python.org/en/latest/guides/publishing-package-distribution-releases-using-github-actions-ci-cd-workflows/ | |
name: Publish to PyPI and create GitHub release | |
on: | |
push: | |
tags: | |
# only run workflow for tags in release format | |
- "v[0-9].[0-9].[0-9]" | |
jobs: | |
build: | |
name: Build distribution π¦ | |
runs-on: ubuntu-latest | |
steps: | |
- name: Checkout ποΈ | |
uses: actions/checkout@v4 | |
with: | |
fetch-depth: 0 | |
persist-credentials: false | |
- name: Set up Python π | |
uses: actions/setup-python@v5 | |
- name: Install uv π | |
uses: astral-sh/setup-uv@v5 | |
with: | |
version: ">=0.0.1" | |
- name: Build package for distribution π οΈ | |
run: | | |
uv build | |
- name: Upload distribution packages π€ | |
uses: actions/upload-artifact@v4 | |
with: | |
name: package-distribution | |
path: dist/ | |
publish-to-pypi: | |
name: Publish Python distribution to PyPI | |
needs: | |
- build | |
runs-on: ubuntu-latest | |
environment: | |
name: pypi | |
url: https://pypi.org/p/pyprefab | |
permissions: | |
id-token: write # needed for trusted publishing (i.e., OIDC) | |
steps: | |
- name: Download distribution artifacts π₯ | |
uses: actions/download-artifact@v4 | |
with: | |
name: package-distribution | |
path: dist/ | |
- name: Publish distribution to PyPI π | |
uses: pypa/gh-action-pypi-publish@release/v1 | |
github-release: | |
name: >- | |
Sign the Python distribution with Sigstore | |
and upload them to GitHub Release | |
needs: | |
- publish-to-pypi | |
runs-on: ubuntu-latest | |
permissions: | |
contents: write # required for creating GitHub Releases | |
id-token: write # required for sigstore | |
steps: | |
- name: Download distribution artifacts π₯ | |
uses: actions/download-artifact@v4 | |
with: | |
name: package-distribution | |
path: dist/ | |
- name: Sign the dists with Sigstore π | |
uses: sigstore/[email protected] | |
with: | |
inputs: >- | |
./dist/*.tar.gz | |
./dist/*.whl | |
- name: Create GitHub Release π οΈ | |
env: | |
GITHUB_TOKEN: ${{ github.token }} | |
run: >- | |
gh release create | |
"$GITHUB_REF_NAME" | |
--repo "$GITHUB_REPOSITORY" | |
- name: Upload artifact signatures to GitHub Release π€ | |
env: | |
GITHUB_TOKEN: ${{ github.token }} | |
# Upload to GitHub Release. | |
# `dist/` contains the built packages, and the | |
# sigstore-produced signatures and certificates. | |
run: >- | |
gh release upload | |
"$GITHUB_REF_NAME" dist/** | |
--repo "$GITHUB_REPOSITORY" |