@@ -25,13 +25,13 @@ jobs:
2525 attestations : write
2626
2727 steps :
28- - uses : actions/checkout@v4
28+ - uses : actions/checkout@v5
2929 with :
3030 fetch-depth : 0
3131 persist-credentials : false
3232
3333 - name : Build and Check Package
34- uses : hynek/build-and-inspect-python-package@v2.9.0
34+ uses : hynek/build-and-inspect-python-package@c52c3a4710070b50470d903818a7b25115dcd076
3535 with :
3636 attest-build-provenance-github : ' true'
3737
@@ -45,25 +45,29 @@ jobs:
4545 id-token : write
4646 contents : write
4747 steps :
48- - uses : actions/checkout@v4
48+ - uses : actions/checkout@v5
49+ with :
50+ persist-credentials : true
4951
5052 - name : Download Package
51- uses : actions/download-artifact@v4
53+ uses : actions/download-artifact@v5
5254 with :
5355 name : Packages
5456 path : dist
5557
5658 - name : Publish package to PyPI
57- uses : pypa/gh-action-pypi-publish@v1.10.2
59+ uses : pypa/gh-action-pypi-publish@76f52bc884231f62b9a034ebfe128415bbaabdfc
5860 with :
5961 attestations : true
6062
6163 - name : Push tag
64+ env :
65+ VERSION : ${{ github.event.inputs.version }}
6266 run : |
6367 git config user.name "pytest bot"
6468 git config user.email "pytestbot@gmail.com"
65- git tag --annotate --message=v${{ github.event.inputs.version }} ${{ github.event.inputs.version }} ${{ github.sha }}
66- git push origin ${{ github.event.inputs.version }}
69+ git tag --annotate --message=v"$VERSION" "$VERSION" ${{ github.sha }}
70+ git push origin "$VERSION"
6771
6872 release-notes :
6973
@@ -76,13 +80,13 @@ jobs:
7680 permissions :
7781 contents : write
7882 steps :
79- - uses : actions/checkout@v4
83+ - uses : actions/checkout@v5
8084 with :
8185 fetch-depth : 0
8286 persist-credentials : false
8387
8488 - name : Download Package
85- uses : actions/download-artifact@v4
89+ uses : actions/download-artifact@v5
8690 with :
8791 name : Packages
8892 path : dist
@@ -98,13 +102,15 @@ jobs:
98102 pip install --upgrade tox
99103
100104 - name : Generate release notes
105+ env :
106+ VERSION : ${{ github.event.inputs.version }}
101107 run : |
102108 sudo apt-get install pandoc
103- tox -e generate-gh-release-notes -- ${{ github.event.inputs.version }} scripts/latest-release-notes.md
109+ tox -e generate-gh-release-notes -- "$VERSION" scripts/latest-release-notes.md
104110
105111 - name : Publish GitHub Release
106- uses : softprops/action-gh-release@v2
107- with :
108- body_path : scripts/latest-release-notes.md
109- files : dist/*
110- tag_name : ${{ github.event.inputs.version }}
112+ env :
113+ VERSION : ${{ github.event.inputs.version }}
114+ GH_TOKEN : ${{ secrets.GITHUB_TOKEN }}
115+ run : |
116+ gh release create --notes-file scripts/latest-release-notes.md --verify-tag "$VERSION" dist/*
0 commit comments