Skip to content

Prepare 6.8.2 release #316

Prepare 6.8.2 release

Prepare 6.8.2 release #316

Workflow file for this run

name: Release
on:
push:
branches:
- main
pull_request:
workflow_dispatch:
# allow manual runs on branches without a PR
release:
types:
- published
concurrency:
group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.sha }}
cancel-in-progress: true
permissions: {}
jobs:
dist:
name: Build dist
runs-on: ubuntu-latest
permissions:
contents: read
steps:
- name: Checkout
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
fetch-depth: 0 # required for setuptools_scm to find tags
persist-credentials: false
- name: Build dist
# This action builds the distributions and uploads them as an artifact named "Packages",
# which is later downloaded in the `publish` job via actions/download-artifact.
uses: hynek/build-and-inspect-python-package@d44ca7d91762de7a7d5436ddae667c6da6d1c3df # v2.18.0
publish:
name: Publish to PyPI
needs: [dist]
runs-on: ubuntu-latest
if: github.event_name == 'release' && github.event.action == 'published'
environment:
name: pypi
url: https://pypi.org/p/auditwheel
permissions:
attestations: write # for attestation generation
id-token: write # for trusted publishing
steps:
- name: Download dist artefacts
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
with:
name: Packages
path: dist
- name: Generate artifact attestation for sdist and wheel
uses: actions/attest-build-provenance@0f67c3f4856b2e3261c31976d6725780e5e4c373 # v4.1.1
with:
subject-path: "dist/auditwheel-*"
- name: Publish to PyPI
uses: pypa/gh-action-pypi-publish@ba38be9e461d3875417946c167d0b5f3d385a247 # v1.14.1
with:
attestations: true