Repository navigation
Merge pull request #140 from hotdata-dev/release/v0.7.0 #16
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Publish to PyPI | |
| on: | |
| push: | |
| tags: | |
| - 'v[0-9]*' | |
| concurrency: | |
| group: pypi-publish-${{ github.ref_name }} | |
| cancel-in-progress: false | |
| permissions: | |
| contents: read | |
| jobs: | |
| build: | |
| name: Build distribution | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 | |
| - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6 | |
| with: | |
| python-version: '3.12' | |
| - name: Install build tooling | |
| run: python -m pip install --upgrade build twine | |
| - name: Verify tag matches pyproject version | |
| run: | | |
| if [[ ! "$GITHUB_REF_NAME" =~ ^v[0-9] ]]; then | |
| echo "Release tag '$GITHUB_REF_NAME' must start with 'v' followed by a digit (e.g. v1.0.0)" >&2 | |
| exit 1 | |
| fi | |
| tag="${GITHUB_REF_NAME#v}" | |
| pkg_version=$(python -c "import tomllib,pathlib; print(tomllib.loads(pathlib.Path('pyproject.toml').read_text())['project']['version'])") | |
| if [ "$tag" != "$pkg_version" ]; then | |
| echo "Release tag ($tag) does not match pyproject.toml version ($pkg_version)" >&2 | |
| exit 1 | |
| fi | |
| - name: Build sdist and wheel | |
| run: python -m build | |
| - name: Check distribution metadata | |
| run: python -m twine check --strict dist/* | |
| - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 | |
| with: | |
| name: dist | |
| path: dist/ | |
| publish: | |
| name: Publish to PyPI | |
| needs: build | |
| runs-on: ubuntu-latest | |
| environment: | |
| name: pypi | |
| url: https://pypi.org/p/hotdata | |
| permissions: | |
| id-token: write | |
| steps: | |
| - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 | |
| with: | |
| name: dist | |
| path: dist/ | |
| - name: Publish via Trusted Publishing | |
| uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e # v1.13.0 | |
| # Announce the release in #deploy. Runs only when the publish above | |
| # succeeded. Posts via the shared Hotdata CI Slack app (bot token), so the | |
| # same SLACK_CI_BOT_TOKEN org secret drives notifications across SDK repos. | |
| - name: "Notify #deploy on Slack" | |
| # The publish above is irreversible, so a Slack/token hiccup must not | |
| # mark a successful release as failed and trigger false-alarm retries. | |
| continue-on-error: true | |
| env: | |
| SLACK_CI_BOT_TOKEN: ${{ secrets.SLACK_CI_BOT_TOKEN }} | |
| run: | | |
| set -euo pipefail | |
| if [ -z "${SLACK_CI_BOT_TOKEN:-}" ]; then | |
| echo "SLACK_CI_BOT_TOKEN not set; skipping Slack notification" >&2 | |
| exit 0 | |
| fi | |
| version="${GITHUB_REF_NAME#v}" | |
| text=":package: *hotdata* \`v${version}\` published to PyPI — <https://pypi.org/project/hotdata/${version}/|PyPI> · <https://github.com/${GITHUB_REPOSITORY}/releases/tag/${GITHUB_REF_NAME}|release notes>" | |
| # #deploy channel ID (rename-proof). chat.postMessage returns HTTP 200 | |
| # even on logical errors, so capture the body and assert on .ok — | |
| # echoing Slack's error makes a swallowed (continue-on-error) miss | |
| # debuggable in the job log instead of disappearing silently. | |
| response="$(curl -sS -X POST https://slack.com/api/chat.postMessage \ | |
| -H "Authorization: Bearer ${SLACK_CI_BOT_TOKEN}" \ | |
| -H 'Content-Type: application/json; charset=utf-8' \ | |
| --data "$(jq -n --arg ch 'C0ARK84E1D4' --arg text "$text" '{channel:$ch, text:$text}')")" | |
| if ! jq -e '.ok' >/dev/null <<<"$response"; then | |
| echo "Slack notification failed: $(jq -r '.error // "unknown"' <<<"$response")" >&2 | |
| exit 1 | |
| fi |