Repository navigation
Add GitLab compare link from production to the pending tag in the sum… #5
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Release | |
| # Tag-driven: pushing a semver tag publishes to PyPI (Trusted Publishing) and | |
| # creates the matching GitHub Release. The tag is the sole entry point; by | |
| # convention a tag is only cut off a green main, so there is no in-workflow CI | |
| # gate. | |
| on: | |
| push: | |
| tags: | |
| - '[0-9]+.[0-9]+.[0-9]+' # stable: 0.1.1 | |
| - '[0-9]+.[0-9]+.[0-9]+[a-z]+[0-9]+' # pre-release: 0.2.0rc1, 1.0.0a2 | |
| # contents: write -> create the GitHub Release; id-token: write -> OIDC for PyPI Trusted Publishing. | |
| permissions: | |
| contents: write | |
| id-token: write | |
| jobs: | |
| release: | |
| runs-on: ubuntu-latest | |
| environment: pypi # scopes the PyPI Trusted Publisher; hook for approval rules | |
| steps: | |
| - uses: actions/checkout@v6 | |
| - uses: extractions/setup-just@v4 | |
| - uses: astral-sh/setup-uv@v8.2.0 | |
| # PyPI is irreversible, so it runs FIRST: if it fails the job stops and no | |
| # GitHub Release is created advertising a version that never reached PyPI. | |
| # `just publish` derives the version from $GITHUB_REF_NAME (the tag name). | |
| - run: just publish | |
| # The Release body is GitHub's generated notes, rendered from the squashed | |
| # PR titles since the previous tag — so a conventional-commit title is what | |
| # a reader gets. A release wanting prose is edited after the fact with | |
| # `gh release edit <tag> --notes-file`. A tag with a letter (0.2.0rc1) is a | |
| # pre-release -> flagged so GitHub won't mark it "Latest". | |
| - name: Resolve release metadata | |
| id: meta | |
| run: | | |
| set -euo pipefail | |
| if [[ "$GITHUB_REF_NAME" =~ [a-z] ]]; then | |
| echo "prerelease=true" >> "$GITHUB_OUTPUT" | |
| else | |
| echo "prerelease=false" >> "$GITHUB_OUTPUT" | |
| fi | |
| - name: Publish GitHub Release | |
| uses: softprops/action-gh-release@v3 | |
| with: | |
| generate_release_notes: true | |
| prerelease: ${{ steps.meta.outputs.prerelease }} | |
| draft: false |