Consolidate wheel smoketest into reusable action

Author: claude

.github/actions/wheel-smoketest/action.yml

@@ -0,0 +1,47 @@
+name: Wheel Smoketest
+description: Tests a built cryptography wheel by installing it and verifying basic functionality
+
+inputs:
+  python-path:
+    description: 'Optional path to a specific Python interpreter to use for creating the venv'
+    required: false
+    default: ''
+  build-requirements-path:
+    description: 'Path to the build requirements file'
+    required: true
+
+runs:
+  using: "composite"
+
+  steps:
+    - name: Create virtual environment
+      run: |
+        if [ -n "${{ inputs.python-path }}" ]; then
+          uv venv --python="${{ inputs.python-path }}"
+        else
+          uv venv
+        fi
+      shell: bash
+
+    - name: Install build requirements
+      run: uv pip install --require-hashes -r "${{ inputs.build-requirements-path }}"
+      shell: bash
+
+    - name: Install cryptography wheel
+      run: uv pip install cryptography --no-index -f wheelhouse/
+      shell: bash
+
+    - name: Show the wheel's minimum macOS SDK and architectures
+      if: runner.os == 'macOS'
+      run: |
+        find .venv/lib/*/site-packages/cryptography/hazmat/bindings -name '*.so' -exec vtool -show {} \;
+      shell: bash
+
+    - name: Verify cryptography installation and OpenSSL version
+      run: |
+        uv run - <<'EOF'
+        from cryptography.hazmat.backends.openssl.backend import backend
+        print(f"Loaded: {backend.openssl_version_text()}")
+        print(f"Linked Against: {backend._ffi.string(backend._lib.OPENSSL_VERSION_TEXT).decode('ascii')}")
+        EOF
+      shell: bash

.github/workflows/wheel-builder.yml

@@ -162,11 +162,11 @@ jobs:
             exit 0
           fi
 
-      - run: uv venv --python=/opt/python/${{ matrix.PYTHON.VERSION }}/bin/python
-      - run: uv pip install --require-hashes -r $BUILD_REQUIREMENTS_PATH
-      - run: uv pip install cryptography --no-index -f wheelhouse/
-      - run: |
-          echo "from cryptography.hazmat.backends.openssl.backend import backend;print('Loaded: ' + backend.openssl_version_text());print('Linked Against: ' + backend._ffi.string(backend._lib.OPENSSL_VERSION_TEXT).decode('ascii'))" | uv run -
+      - name: Smoketest
+        uses: ./.github/actions/wheel-smoketest
+        with:
+          python-path: /opt/python/${{ matrix.PYTHON.VERSION }}/bin/python
+          build-requirements-path: ${{ env.BUILD_REQUIREMENTS_PATH }}
 
       - uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
         with:
@@ -291,14 +291,10 @@ jobs:
           ARCHFLAGS: ${{ matrix.PYTHON.ARCHFLAGS }}
           _PYTHON_HOST_PLATFORM: ${{ matrix.PYTHON._PYTHON_HOST_PLATFORM }}
 
-      - run: uv venv
-      - run: uv pip install --require-hashes -r $BUILD_REQUIREMENTS_PATH
-      - run: uv pip install cryptography --no-index -f wheelhouse/
-      - name: Show the wheel's minimum macOS SDK and architectures
-        run: |
-          find .venv/lib/*/site-packages/cryptography/hazmat/bindings -name '*.so' -exec vtool -show {} \;
-      - run: |
-          echo "from cryptography.hazmat.backends.openssl.backend import backend;print('Loaded: ' + backend.openssl_version_text());print('Linked Against: ' + backend._ffi.string(backend._lib.OPENSSL_VERSION_TEXT).decode('ascii'))" | uv run -
+      - name: Smoketest
+        uses: ./.github/actions/wheel-smoketest
+        with:
+          build-requirements-path: ${{ env.BUILD_REQUIREMENTS_PATH }}
 
       - run: |
           echo "CRYPTOGRAPHY_WHEEL_NAME=$(basename $(ls wheelhouse/cryptography*.whl))" >> $GITHUB_ENV
@@ -383,13 +379,10 @@ jobs:
           uv build --wheel --require-hashes --build-constraint=$BUILD_REQUIREMENTS_PATH cryptography*.tar.gz $PY_LIMITED_API -o wheelhouse/
         shell: bash
 
-      - run: uv venv
-      - run: uv pip install --require-hashes -r "${BUILD_REQUIREMENTS_PATH}"
-        shell: bash
-      - run: uv pip install cryptography --no-index -f wheelhouse/
-      - name: Print the OpenSSL we built and linked against
-        run: |
-            echo "from cryptography.hazmat.backends.openssl.backend import backend;print('Loaded: ' + backend.openssl_version_text());print('Linked Against: ' + backend._ffi.string(backend._lib.OPENSSL_VERSION_TEXT).decode('ascii'))" | uv run -
+      - name: Smoketest
+        uses: ./.github/actions/wheel-smoketest
+        with:
+          build-requirements-path: ${{ env.BUILD_REQUIREMENTS_PATH }}
 
       - uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
         with: