@@ -8,106 +8,106 @@ jobs:
88 runs-on : ubuntu-latest
99
1010 steps :
11- - uses : actions/checkout@v4
12- - name : Set up Python
13- uses : actions/setup-python@v5
14- with :
15- python-version : " 3.x"
16- - name : Install pypa/build
17- run : python3 -m pip install build --user
18- - name : Build a binary wheel and a source tarball
19- run : python3 -m build
20- - name : Store the distribution packages
21- uses : actions/upload-artifact@v4
22- with :
23- name : python-package-distributions
24- path : dist/
11+ - uses : actions/checkout@v4
12+ - name : Set up Python
13+ uses : actions/setup-python@v5
14+ with :
15+ python-version : " 3.x"
16+ - name : Install pypa/build
17+ run : python3 -m pip install build --user
18+ - name : Build a binary wheel and a source tarball
19+ run : python3 -m build
20+ - name : Store the distribution packages
21+ uses : actions/upload-artifact@v4
22+ with :
23+ name : python-package-distributions
24+ path : dist/
2525
2626 publish-to-pypi :
2727 name : >-
2828 Publish Python 🐍 distribution 📦 to PyPI
29- if : startsWith(github.ref, 'refs/tags/') # only publish to PyPI on tag pushes
29+ if : startsWith(github.ref, 'refs/tags/') # only publish to PyPI on tag pushes
3030 needs :
31- - build
31+ - build
3232 runs-on : ubuntu-latest
3333 environment :
3434 name : pypi
3535 url : https://pypi.org/p/pyglider
3636 permissions :
37- id-token : write # IMPORTANT: mandatory for trusted publishing
37+ id-token : write # IMPORTANT: mandatory for trusted publishing
3838
3939 steps :
40- - name : Download all the dists
41- uses : actions/download-artifact@v4
42- with :
43- name : python-package-distributions
44- path : dist/
45- - name : Publish distribution 📦 to PyPI
46- uses : pypa/gh-action-pypi-publish@release/v1
40+ - name : Download all the dists
41+ uses : actions/download-artifact@v4
42+ with :
43+ name : python-package-distributions
44+ path : dist/
45+ - name : Publish distribution 📦 to PyPI
46+ uses : pypa/gh-action-pypi-publish@release/v1
4747
4848 github-release :
4949 name : >-
5050 Sign the Python 🐍 distribution 📦 with Sigstore
5151 and upload them to GitHub Release
5252 needs :
53- - publish-to-pypi
53+ - publish-to-pypi
5454 runs-on : ubuntu-latest
5555
5656 permissions :
57- contents : write # IMPORTANT: mandatory for making GitHub Releases
58- id-token : write # IMPORTANT: mandatory for sigstore
57+ contents : write # IMPORTANT: mandatory for making GitHub Releases
58+ id-token : write # IMPORTANT: mandatory for sigstore
5959
6060 steps :
61- - name : Download all the dists
62- uses : actions/download-artifact@v4
63- with :
64- name : python-package-distributions
65- path : dist/
66- - name : Sign the dists with Sigstore
67- uses : sigstore/gh-action-sigstore-python@v2.1.1
68- with :
69- inputs : >-
70- ./dist/*.tar.gz
71- ./dist/*.whl
72- - name : Create GitHub Release
73- env :
74- GITHUB_TOKEN : ${{ github.token }}
75- run : >-
76- gh release create
77- '${{ github.ref_name }}'
78- --repo '${{ github.repository }}'
79- --notes ""
80- - name : Upload artifact signatures to GitHub Release
81- env :
82- GITHUB_TOKEN : ${{ github.token }}
83- # Upload to GitHub Release using the `gh` CLI.
84- # `dist/` contains the built packages, and the
85- # sigstore-produced signatures and certificates.
86- run : >-
87- gh release upload
88- '${{ github.ref_name }}' dist/**
89- --repo '${{ github.repository }}'
61+ - name : Download all the dists
62+ uses : actions/download-artifact@v4
63+ with :
64+ name : python-package-distributions
65+ path : dist/
66+ - name : Sign the dists with Sigstore
67+ uses : sigstore/gh-action-sigstore-python@v2.1.1
68+ with :
69+ inputs : >-
70+ ./dist/*.tar.gz
71+ ./dist/*.whl
72+ - name : Create GitHub Release
73+ env :
74+ GITHUB_TOKEN : ${{ github.token }}
75+ run : >-
76+ gh release create
77+ '${{ github.ref_name }}'
78+ --repo '${{ github.repository }}'
79+ --notes ""
80+ - name : Upload artifact signatures to GitHub Release
81+ env :
82+ GITHUB_TOKEN : ${{ github.token }}
83+ # Upload to GitHub Release using the `gh` CLI.
84+ # `dist/` contains the built packages, and the
85+ # sigstore-produced signatures and certificates.
86+ run : >-
87+ gh release upload
88+ '${{ github.ref_name }}' dist/**
89+ --repo '${{ github.repository }}'
9090
9191 publish-to-testpypi :
9292 name : Publish Python 🐍 distribution 📦 to TestPyPI
9393 needs :
94- - build
94+ - build
9595 runs-on : ubuntu-latest
9696
9797 environment :
9898 name : testpypi
9999 url : https://test.pypi.org/p/pyglider
100100
101101 permissions :
102- id-token : write # IMPORTANT: mandatory for trusted publishing
102+ id-token : write # IMPORTANT: mandatory for trusted publishing
103103
104104 steps :
105- - name : Download all the dists
106- uses : actions/download-artifact@v4
107- with :
108- name : python-package-distributions
109- path : dist/
110- - name : Publish distribution 📦 to TestPyPI
111- uses : pypa/gh-action-pypi-publish@release/v1
112- with :
113- repository-url : https://test.pypi.org/legacy/
105+ - name : Download all the dists
106+ uses : actions/download-artifact@v4
107+ with :
108+ name : python-package-distributions
109+ path : dist/
110+ - name : Publish distribution 📦 to TestPyPI
111+ uses : pypa/gh-action-pypi-publish@release/v1
112+ with :
113+ repository-url : https://test.pypi.org/legacy/
0 commit comments