From 0adce9dc3ce2aa160b8d24afe72e4504584985f8 Mon Sep 17 00:00:00 2001 From: Joao S O Bueno Date: Sat, 16 Nov 2024 16:11:56 -0300 Subject: [PATCH] Fix yaml, take 10 --- .github/workflows/pypi.yml | 132 ++++++++++++++++++++++--------------- 1 file changed, 78 insertions(+), 54 deletions(-) diff --git a/.github/workflows/pypi.yml b/.github/workflows/pypi.yml index 1d09711..74bea6e 100644 --- a/.github/workflows/pypi.yml +++ b/.github/workflows/pypi.yml @@ -10,7 +10,7 @@ jobs: strategy: matrix: # macos-13 is an intel runner, macos-14 is apple silicon - os: [ubuntu-latest, ] #windows-latest, macos-13, macos-14] + os: [ubuntu-latest, macos-13, macos-14, windows-latest] #windows-latest, macos-13, macos-14] steps: - uses: actions/checkout@v4 @@ -44,18 +44,43 @@ jobs: name: cibw-sdist path: dist/*.tar.gz - upload_pypi: + #upload_pypi: + #needs: [build_wheels, build_sdist] + #runs-on: ubuntu-latest + #environment: + #name: pypi + #url: https://pypi.org/p/extrainterpreters/ + #permissions: + #id-token: write + #if: startsWith(github.ref, 'refs/tags/') # only publish to PyPI on tag pushes + ## if: github.event_name == 'release' && github.event.action == 'published' + ## or, alternatively, upload to PyPI on every tag starting with 'v' (remove on: release above to use this) + ## if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags/v') + #steps: + #- uses: actions/download-artifact@v4 + #with: + ## unpacks all CIBW artifacts into dist/ + #pattern: cibw-* + #path: dist + #merge-multiple: true + + #- uses: pypa/gh-action-pypi-publish@release/v1 + #with: + #repository-url: https://pypi.org/p/extrainterpreters/ + ## https://upload.pypi.org/legacy/ + + publish-to-pypi: + name: >- + Publish Python 🐍 distribution 📦 to PyPI + if: startsWith(github.ref, 'refs/tags/') # only publish to PyPI on tag pushes needs: [build_wheels, build_sdist] runs-on: ubuntu-latest environment: name: pypi url: https://pypi.org/p/extrainterpreters permissions: - id-token: write - if: startsWith(github.ref, 'refs/tags/') # only publish to PyPI on tag pushes - # if: github.event_name == 'release' && github.event.action == 'published' - # or, alternatively, upload to PyPI on every tag starting with 'v' (remove on: release above to use this) - # if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags/v') + id-token: write # IMPORTANT: mandatory for trusted publishing + steps: - uses: actions/download-artifact@v4 with: @@ -63,53 +88,52 @@ jobs: pattern: cibw-* path: dist merge-multiple: true + - name: Publish distribution 📦 to PyPI + uses: pypa/gh-action-pypi-publish@release/v1 - - uses: pypa/gh-action-pypi-publish@release/v1 - #with: - ## To test: repository-url: https://test.pypi.org/legacy/ - - github-release: - name: >- - Sign the Python 🐍 distribution 📦 with Sigstore - and upload them to GitHub Release - environment: - name: release - needs: - - publish-to-pypi - runs-on: ubuntu-latest + #github-release: + #name: >- + #Sign the Python 🐍 distribution 📦 with Sigstore + #and upload them to GitHub Release + #environment: + #name: pypi + #needs: + #- publish-to-pypi + #runs-on: ubuntu-latest - permissions: - contents: write # IMPORTANT: mandatory for making GitHub Releases - id-token: write # IMPORTANT: mandatory for sigstore + #permissions: + #contents: write # IMPORTANT: mandatory for making GitHub Releases + #id-token: write # IMPORTANT: mandatory for sigstore - steps: - - uses: actions/download-artifact@v4 - with: - # unpacks all CIBW artifacts into dist/ - pattern: cibw-* - path: dist - merge-multiple: true - - name: Sign the dists with Sigstore - uses: sigstore/gh-action-sigstore-python@v2.1.1 - with: - inputs: >- - ./dist/*.tar.gz - ./dist/*.whl - - name: Create GitHub Release - env: - GITHUB_TOKEN: ${{ github.token }} - run: >- - gh release create - '${{ github.ref_name }}' - --repo '${{ github.repository }}' - --notes "" - - name: Upload artifact signatures to GitHub Release - env: - GITHUB_TOKEN: ${{ github.token }} - # Upload to GitHub Release using the `gh` CLI. - # `dist/` contains the built packages, and the - # sigstore-produced signatures and certificates. - run: >- - gh release upload - '${{ github.ref_name }}' dist/** - --repo '${{ github.repository }}' + #steps: + #- name: download APT + #uses: actions/download-artifact@v4 + #with: + ## unpacks all CIBW artifacts into dist/ + #pattern: cibw-* + #path: dist + #merge-multiple: true + #- name: Sign the dists with Sigstore + #uses: sigstore/gh-action-sigstore-python@v2.1.1 + #with: + #inputs: >- + #./dist/*.tar.gz + #./dist/*.whl + #- name: Create GitHub Release + #env: + #GITHUB_TOKEN: ${{ github.token }} + #run: >- + #gh release create + #'${{ github.ref_name }}' + #--repo '${{ github.repository }}' + #--notes "" + #- name: Upload artifact signatures to GitHub Release + #env: + #GITHUB_TOKEN: ${{ github.token }} + ## Upload to GitHub Release using the `gh` CLI. + ## `dist/` contains the built packages, and the + ## sigstore-produced signatures and certificates. + #run: >- + #gh release upload + #'${{ github.ref_name }}' dist/** + #--repo '${{ github.repository }}'