build(deps): bump virtualenv from 20.27.0 to 20.27.1 in /.github/work… #349
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
name: Release | |
on: | |
push: | |
branches: | |
- main | |
- master | |
jobs: | |
release: | |
name: Release | |
runs-on: ubuntu-latest | |
permissions: | |
id-token: write | |
attestations: write | |
steps: | |
- name: Check out the repository | |
uses: actions/checkout@v4.2.2 | |
with: | |
fetch-depth: 2 | |
- name: Set up Python | |
uses: actions/setup-python@v5.3.0 | |
with: | |
python-version: "3.12" | |
- name: Upgrade pip | |
run: | | |
pip install --constraint=.github/workflows/constraints.txt pip | |
pip --version | |
- name: Install Poetry | |
run: | | |
pip install --constraint=.github/workflows/constraints.txt poetry | |
poetry --version | |
- name: Check if there is a parent commit | |
id: check-parent-commit | |
run: | | |
echo "::set-output name=sha::$(git rev-parse --verify --quiet HEAD^)" | |
- name: Detect and tag new version | |
id: check-version | |
if: steps.check-parent-commit.outputs.sha | |
uses: salsify/action-detect-and-tag-new-version@v2.0.3 | |
with: | |
version-command: | | |
bash -o pipefail -c "poetry version | awk '{ print \$2 }'" | |
- name: Bump version for developmental release | |
if: "! steps.check-version.outputs.tag" | |
run: | | |
poetry version patch && | |
version=$(poetry version | awk '{ print $2 }') && | |
poetry version $version.dev.$(date +%s) | |
- name: Build package | |
run: | | |
poetry build --ansi | |
- name: Attest build provenance | |
if: steps.check-version.outputs.tag | |
uses: actions/attest-build-provenance@v1 | |
with: | |
subject-path: dist/* | |
- name: Publish package on PyPI | |
if: steps.check-version.outputs.tag | |
uses: pypa/gh-action-pypi-publish@v1.11.0 | |
with: | |
user: __token__ | |
password: ${{ secrets.PYPI_TOKEN }} | |
- name: Publish package on TestPyPI | |
if: "! steps.check-version.outputs.tag" | |
uses: pypa/gh-action-pypi-publish@v1.11.0 | |
with: | |
user: __token__ | |
password: ${{ secrets.TEST_PYPI_TOKEN }} | |
repository-url: https://test.pypi.org/legacy/ | |
- name: Publish release notes | |
uses: release-drafter/release-drafter@v6.0.0 | |
with: | |
publish: ${{ steps.check-version.outputs.tag != '' }} | |
tag: ${{ steps.check-version.outputs.tag }} | |
env: | |
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} |