From 0629836d7e45d07d468ca5381d2351e7daaa9b50 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Bern=C3=A1t=20G=C3=A1bor?= Date: Tue, 3 Nov 2026 17:42:09 -0800 Subject: [PATCH 1/7] =?UTF-8?q?=F0=9F=91=B7=20ci(release):=20pin=20github-?= =?UTF-8?q?workflows=206.4.0?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Move every tox-dev/github-workflows reference, including the untagged scorecard pin, to 6.4.0. The 6.2.2 to 6.4.0 range adds Scorecard publishing and no input changes apply to our callers. --- .github/workflows/news.yaml | 4 ++-- .github/workflows/prepare-release.yaml | 2 +- .github/workflows/release.yaml | 10 +++++----- .github/workflows/scorecard.yaml | 2 +- .github/workflows/upgrade-release-tools.yaml | 2 +- 5 files changed, 10 insertions(+), 10 deletions(-) diff --git a/.github/workflows/news.yaml b/.github/workflows/news.yaml index 4c85a28..c0ec1cf 100644 --- a/.github/workflows/news.yaml +++ b/.github/workflows/news.yaml @@ -21,9 +21,9 @@ jobs: python-version: "3.15" enable-cache: false - name: ๐Ÿ“ฆ Install locked release tools - uses: tox-dev/github-workflows/install-locked-tools@99024bcb5749b178c5514f86acfcf1e80c865e75 # 6.3.0 + uses: tox-dev/github-workflows/install-locked-tools@534a196a132a52365c464e1227d4c46f30968f29 # 6.4.0 with: groups: release-news venv: ${{ runner.temp }}/release-tools - name: ๐Ÿ” Validate news fragments - uses: tox-dev/github-workflows/validate-news@99024bcb5749b178c5514f86acfcf1e80c865e75 # 6.3.0 + uses: tox-dev/github-workflows/validate-news@534a196a132a52365c464e1227d4c46f30968f29 # 6.4.0 diff --git a/.github/workflows/prepare-release.yaml b/.github/workflows/prepare-release.yaml index 85b5ae0..4a6d097 100644 --- a/.github/workflows/prepare-release.yaml +++ b/.github/workflows/prepare-release.yaml @@ -17,7 +17,7 @@ jobs: prepare: name: ๐Ÿท๏ธ Prepare Towncrier release if: github.repository == 'pytest-dev/pytest-print' - uses: tox-dev/github-workflows/.github/workflows/prepare-towncrier-release.yaml@57a765127aae73adf7d0e24a7fe0f067f2d3ea3e # 6.2.1 + uses: tox-dev/github-workflows/.github/workflows/prepare-towncrier-release.yaml@534a196a132a52365c464e1227d4c46f30968f29 # 6.4.0 permissions: contents: read pull-requests: read diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index 1ab4def..1c710c6 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -10,7 +10,7 @@ concurrency: jobs: build: name: ๐Ÿ—๏ธ Build - uses: tox-dev/github-workflows/.github/workflows/validate-python-release.yaml@57a765127aae73adf7d0e24a7fe0f067f2d3ea3e # 6.2.1 + uses: tox-dev/github-workflows/.github/workflows/validate-python-release.yaml@534a196a132a52365c464e1227d4c46f30968f29 # 6.4.0 permissions: contents: read github-notes: @@ -32,12 +32,12 @@ jobs: python-version: "3.15" enable-cache: false - name: ๐Ÿ“ฆ Install locked release tools - uses: tox-dev/github-workflows/install-locked-tools@57a765127aae73adf7d0e24a7fe0f067f2d3ea3e # 6.2.1 + uses: tox-dev/github-workflows/install-locked-tools@534a196a132a52365c464e1227d4c46f30968f29 # 6.4.0 with: groups: release-notes venv: ${{ runner.temp }}/release-tools - name: ๐Ÿ“ Render release notes - uses: tox-dev/github-workflows/render-release-notes@57a765127aae73adf7d0e24a7fe0f067f2d3ea3e # 6.2.1 + uses: tox-dev/github-workflows/render-release-notes@534a196a132a52365c464e1227d4c46f30968f29 # 6.4.0 with: tag: ${{ github.ref_name }} changelog: CHANGELOG.md @@ -94,13 +94,13 @@ jobs: artifact-ids: ${{ needs.github-notes.outputs.artifact-id }} path: ${{ runner.temp }} - name: ๐Ÿ” Verify PyPI artifacts - uses: tox-dev/github-workflows/reconcile-pypi-artifacts@57a765127aae73adf7d0e24a7fe0f067f2d3ea3e # 6.2.1 + uses: tox-dev/github-workflows/reconcile-pypi-artifacts@534a196a132a52365c464e1227d4c46f30968f29 # 6.4.0 with: project: pytest-print version: ${{ github.ref_name }} dist: dist/ - name: ๐Ÿš€ Publish GitHub release - uses: tox-dev/github-workflows/publish-github-release@57a765127aae73adf7d0e24a7fe0f067f2d3ea3e # 6.2.1 + uses: tox-dev/github-workflows/publish-github-release@534a196a132a52365c464e1227d4c46f30968f29 # 6.4.0 env: GH_TOKEN: ${{ github.token }} with: diff --git a/.github/workflows/scorecard.yaml b/.github/workflows/scorecard.yaml index 089b59b..2861603 100644 --- a/.github/workflows/scorecard.yaml +++ b/.github/workflows/scorecard.yaml @@ -23,4 +23,4 @@ jobs: pull-requests: read # read reviews for the Code-Review check security-events: write # upload the SARIF results to code scanning statuses: read # read commit statuses for the CI-Tests check - uses: tox-dev/github-workflows/.github/workflows/scorecard.yaml@cfb6d637a10b70da576575790eb3c806f57cd0b5 + uses: tox-dev/github-workflows/.github/workflows/scorecard.yaml@534a196a132a52365c464e1227d4c46f30968f29 # 6.4.0 diff --git a/.github/workflows/upgrade-release-tools.yaml b/.github/workflows/upgrade-release-tools.yaml index 6163fb8..c6c497b 100644 --- a/.github/workflows/upgrade-release-tools.yaml +++ b/.github/workflows/upgrade-release-tools.yaml @@ -10,7 +10,7 @@ concurrency: jobs: upgrade: name: ๐Ÿ”€ Upgrade release tools - uses: tox-dev/github-workflows/.github/workflows/upgrade-release-tools.yaml@57a765127aae73adf7d0e24a7fe0f067f2d3ea3e # 6.2.1 + uses: tox-dev/github-workflows/.github/workflows/upgrade-release-tools.yaml@534a196a132a52365c464e1227d4c46f30968f29 # 6.4.0 permissions: contents: read secrets: From ffbd4490af86b6715911a4f27ba03dd902764a45 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Bern=C3=A1t=20G=C3=A1bor?= Date: Tue, 3 Nov 2026 17:42:09 -0800 Subject: [PATCH 2/7] =?UTF-8?q?=F0=9F=91=B7=20ci:=20align=20setup-uv=20to?= =?UTF-8?q?=20v10.3.3?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .github/workflows/check.yaml | 2 +- .github/workflows/news.yaml | 2 +- .github/workflows/release.yaml | 4 ++-- 3 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/check.yaml b/.github/workflows/check.yaml index 08120d8..feb51d9 100644 --- a/.github/workflows/check.yaml +++ b/.github/workflows/check.yaml @@ -37,7 +37,7 @@ jobs: fetch-depth: 0 persist-credentials: false - name: ๐Ÿ Install uv - uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e # v10.3.2 + uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3 with: python-version: "3.15" enable-cache: false diff --git a/.github/workflows/news.yaml b/.github/workflows/news.yaml index c0ec1cf..c953292 100644 --- a/.github/workflows/news.yaml +++ b/.github/workflows/news.yaml @@ -16,7 +16,7 @@ jobs: fetch-depth: 0 persist-credentials: false - name: ๐Ÿ Install uv - uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e # v10.3.2 + uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3 with: python-version: "3.15" enable-cache: false diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index 1c710c6..4c2b910 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -27,7 +27,7 @@ jobs: fetch-depth: 0 persist-credentials: false - name: ๐Ÿ Install uv - uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e # v10.3.2 + uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3 with: python-version: "3.15" enable-cache: false @@ -77,7 +77,7 @@ jobs: contents: write steps: - name: ๐Ÿ Install uv - uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e # v10.3.2 + uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3 with: version: latest-known python-version: "3.15" From ea93b7c9f6fd422ebcaddb2e1b526d8ca5953a26 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Bern=C3=A1t=20G=C3=A1bor?= Date: Tue, 3 Nov 2026 17:42:09 -0800 Subject: [PATCH 3/7] =?UTF-8?q?=F0=9F=94=A7=20build:=20drop=20expired=20re?= =?UTF-8?q?lease-creator=20exception?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The exception let release-creator 4.1.0 through the seven-day cutoff and was marked for deletion after 2026-11-02. Without it the lock resolves release-creator 4.2.0, which drops its pyyaml dependency; regenerated with nab 0.0.23. --- pylock.toml | 26 ++++++++++++-------------- pyproject.toml | 2 -- 2 files changed, 12 insertions(+), 16 deletions(-) diff --git a/pylock.toml b/pylock.toml index e3cc4e6..d8f94d0 100644 --- a/pylock.toml +++ b/pylock.toml @@ -1501,7 +1501,7 @@ sha256 = "b531f0f90c4d6ec22f1f8e78996980048bd7d494b7d366b0cf98e39b293565e0" [[packages]] name = "pyyaml" version = "6.0.3" -marker = "\"dev\" in dependency_groups or \"lint\" in dependency_groups or \"release-news\" in dependency_groups or \"release-notes\" in dependency_groups or \"release-prepare\" in dependency_groups" +marker = "\"dev\" in dependency_groups or \"lint\" in dependency_groups" requires-python = ">=3.8" index = "https://pypi.org/simple/" @@ -1546,7 +1546,7 @@ sha256 = "d0dae1f74bb273b534770cb4cccb6bb78735540afdb03c2146f4e19dcd412560" [[packages]] name = "release-creator" -version = "4.1.0" +version = "4.2.0" marker = "\"release-news\" in dependency_groups or \"release-notes\" in dependency_groups or \"release-prepare\" in dependency_groups" requires-python = ">=3.15" dependencies = [ @@ -1555,28 +1555,27 @@ dependencies = [ { name = "mdformat" }, { name = "mdformat-gfm" }, { name = "packaging" }, - { name = "pyyaml" }, { name = "towncrier" }, ] index = "https://pypi.org/simple/" [packages.sdist] -name = "release_creator-4.1.0.tar.gz" -upload-time = 2026-10-26 18:24:45.805437+00:00 -url = "https://files.pythonhosted.org/packages/7f/fd/05d7f3c604476a238d67d5aaa2a4085312e7078c193dbd7ad99ad48d560d/release_creator-4.1.0.tar.gz" -size = 186016 +name = "release_creator-4.2.0.tar.gz" +upload-time = 2026-10-26 22:39:33.566239+00:00 +url = "https://files.pythonhosted.org/packages/0c/c2/6ff369a01a8fff3e4845e2a6989164b71b1662cba8e104ae9f0a2925ca43/release_creator-4.2.0.tar.gz" +size = 163102 [packages.sdist.hashes] -sha256 = "c783037f5ca2efc16fa7cccfb1c2abf0a442f116a63ca82bd7bfb7e2a8343a15" +sha256 = "5affc1e7a935aa816dfa16c03200b17f93f7d17d201e6a913c50e1e9e32bad2f" [[packages.wheels]] -name = "release_creator-4.1.0-py3-none-any.whl" -upload-time = 2026-10-26 18:24:44.353933+00:00 -url = "https://files.pythonhosted.org/packages/30/d0/38480e99025c021d07e0710af02547562dfadbd798bef26dc01869a3f81e/release_creator-4.1.0-py3-none-any.whl" -size = 52922 +name = "release_creator-4.2.0-py3-none-any.whl" +upload-time = 2026-10-26 22:39:32.212020+00:00 +url = "https://files.pythonhosted.org/packages/a5/c2/b1be3e0bff91e390890f3bc8e2d9307a1c2841bb3452798d013f2a2b741d/release_creator-4.2.0-py3-none-any.whl" +size = 53089 [packages.wheels.hashes] -sha256 = "67deae16d11ac261a1512f18a22c0cf13418f43afc3e56cb74e58ad4422062e3" +sha256 = "fe3048e7bc31ee0d757985bbc256290fc40b1ca4c76be574b6730752cbb5831f" [[packages]] name = "requests" @@ -2145,7 +2144,6 @@ command-line = [ "--all-groups", "--all-extras", "--no-cache", - "--upgrade", ] input-path = "pyproject.toml" mode = "universal" diff --git a/pyproject.toml b/pyproject.toml index 7a809c6..2466e47 100644 --- a/pyproject.toml +++ b/pyproject.toml @@ -214,5 +214,3 @@ uploaded-prior-to = "P7D" decision-order = "stable" matrix.python = ">=3.15,<3.16" matrix.platforms = [ "linux_x86_64" ] -# temporary, delete after 2026-11-02 -packages.release-creator.uploaded-prior-to = 2026-10-26T18:24:46Z From 9cb04ae233cdcb621f87a6d69d63f5114f72fea2 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Bern=C3=A1t=20G=C3=A1bor?= Date: Tue, 3 Nov 2026 20:00:09 -0800 Subject: [PATCH 4/7] =?UTF-8?q?=F0=9F=91=B7=20ci:=20pin=20github-workflows?= =?UTF-8?q?=206.5.0?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .github/workflows/news.yaml | 4 ++-- .github/workflows/prepare-release.yaml | 2 +- .github/workflows/scorecard.yaml | 2 +- .github/workflows/upgrade-release-tools.yaml | 2 +- 4 files changed, 5 insertions(+), 5 deletions(-) diff --git a/.github/workflows/news.yaml b/.github/workflows/news.yaml index c953292..88c5e21 100644 --- a/.github/workflows/news.yaml +++ b/.github/workflows/news.yaml @@ -21,9 +21,9 @@ jobs: python-version: "3.15" enable-cache: false - name: ๐Ÿ“ฆ Install locked release tools - uses: tox-dev/github-workflows/install-locked-tools@534a196a132a52365c464e1227d4c46f30968f29 # 6.4.0 + uses: tox-dev/github-workflows/install-locked-tools@bceb5c005e19823dc8835f536f53f172ae223927 # 6.5.0 with: groups: release-news venv: ${{ runner.temp }}/release-tools - name: ๐Ÿ” Validate news fragments - uses: tox-dev/github-workflows/validate-news@534a196a132a52365c464e1227d4c46f30968f29 # 6.4.0 + uses: tox-dev/github-workflows/validate-news@bceb5c005e19823dc8835f536f53f172ae223927 # 6.5.0 diff --git a/.github/workflows/prepare-release.yaml b/.github/workflows/prepare-release.yaml index 4a6d097..7aa67af 100644 --- a/.github/workflows/prepare-release.yaml +++ b/.github/workflows/prepare-release.yaml @@ -17,7 +17,7 @@ jobs: prepare: name: ๐Ÿท๏ธ Prepare Towncrier release if: github.repository == 'pytest-dev/pytest-print' - uses: tox-dev/github-workflows/.github/workflows/prepare-towncrier-release.yaml@534a196a132a52365c464e1227d4c46f30968f29 # 6.4.0 + uses: tox-dev/github-workflows/.github/workflows/prepare-towncrier-release.yaml@bceb5c005e19823dc8835f536f53f172ae223927 # 6.5.0 permissions: contents: read pull-requests: read diff --git a/.github/workflows/scorecard.yaml b/.github/workflows/scorecard.yaml index 2861603..d109341 100644 --- a/.github/workflows/scorecard.yaml +++ b/.github/workflows/scorecard.yaml @@ -23,4 +23,4 @@ jobs: pull-requests: read # read reviews for the Code-Review check security-events: write # upload the SARIF results to code scanning statuses: read # read commit statuses for the CI-Tests check - uses: tox-dev/github-workflows/.github/workflows/scorecard.yaml@534a196a132a52365c464e1227d4c46f30968f29 # 6.4.0 + uses: tox-dev/github-workflows/.github/workflows/scorecard.yaml@bceb5c005e19823dc8835f536f53f172ae223927 # 6.5.0 diff --git a/.github/workflows/upgrade-release-tools.yaml b/.github/workflows/upgrade-release-tools.yaml index c6c497b..27fd572 100644 --- a/.github/workflows/upgrade-release-tools.yaml +++ b/.github/workflows/upgrade-release-tools.yaml @@ -10,7 +10,7 @@ concurrency: jobs: upgrade: name: ๐Ÿ”€ Upgrade release tools - uses: tox-dev/github-workflows/.github/workflows/upgrade-release-tools.yaml@534a196a132a52365c464e1227d4c46f30968f29 # 6.4.0 + uses: tox-dev/github-workflows/.github/workflows/upgrade-release-tools.yaml@bceb5c005e19823dc8835f536f53f172ae223927 # 6.5.0 permissions: contents: read secrets: From 11410829eef3ed7645596cb0e51bdd0b1b53e1c0 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Bern=C3=A1t=20G=C3=A1bor?= Date: Tue, 3 Nov 2026 20:00:09 -0800 Subject: [PATCH 5/7] =?UTF-8?q?=F0=9F=91=B7=20ci:=20run=20check=20matrix?= =?UTF-8?q?=20through=20shared=20workflow?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .github/workflows/check.yaml | 61 +++++++++++------------------------- 1 file changed, 19 insertions(+), 42 deletions(-) diff --git a/.github/workflows/check.yaml b/.github/workflows/check.yaml index feb51d9..d7b0bb5 100644 --- a/.github/workflows/check.yaml +++ b/.github/workflows/check.yaml @@ -16,45 +16,22 @@ permissions: jobs: test: name: ๐Ÿงช Test - runs-on: ubuntu-26.04 - strategy: - fail-fast: false - matrix: - env: - - "3.15" - - "3.15t" - - "3.14" - - "3.13" - - "3.12" - - "3.11" - - type - - dev - - pkg_meta - steps: - - name: ๐Ÿ“ฅ Check out code - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - with: - fetch-depth: 0 - persist-credentials: false - - name: ๐Ÿ Install uv - uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3 - with: - python-version: "3.15" - enable-cache: false - cache-dependency-glob: "pyproject.toml" - github-token: ${{ secrets.GITHUB_TOKEN }} - - name: ๐Ÿ“ฆ Install tox - run: uv tool install --python-preference only-managed --python 3.15 tox --with tox-uv - - name: ๐Ÿ Install Python - if: startsWith(matrix.env, '3.') && matrix.env != '3.15' - run: uv python install --python-preference only-managed ${{ matrix.env }} - - name: ๐Ÿ“ฆ Set up test suite - run: tox run -vv --notest --skip-missing-interpreters false -e ${{ matrix.env }} - - name: ๐Ÿงช Run test suite - run: tox run --skip-pkg-install -e ${{ matrix.env }} - env: - PYTEST_ADDOPTS: "-vv --durations=20" - DIFF_AGAINST: HEAD + uses: tox-dev/github-workflows/.github/workflows/check.yaml@bceb5c005e19823dc8835f536f53f172ae223927 # 6.5.0 + permissions: + contents: read + with: + include: | + [ + {"env": "3.15"}, + {"env": "3.15t", "python": "3.15t"}, + {"env": "3.14", "python": "3.14"}, + {"env": "3.13", "python": "3.13"}, + {"env": "3.12", "python": "3.12"}, + {"env": "3.11", "python": "3.11"}, + {"env": "type"}, + {"env": "dev"}, + {"env": "pkg_meta"} + ] gate: name: ๐Ÿšฆ Required checks pass if: ${{ !cancelled() }} # codespell:ignore cancelled @@ -62,6 +39,6 @@ jobs: runs-on: ubuntu-26.04 steps: - name: ๐Ÿšฆ Require all needed jobs to pass - env: - NEEDS_JSON: ${{ toJSON(needs) }} - run: jq -e 'all(to_entries[]; .value.result == "success")' <<<"$NEEDS_JSON" + uses: tox-dev/github-workflows/required-checks@bceb5c005e19823dc8835f536f53f172ae223927 # 6.5.0 + with: + needs: ${{ toJSON(needs) }} From 9f1023aeacf828de003239b77998e56b7da433c5 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Bern=C3=A1t=20G=C3=A1bor?= Date: Tue, 3 Nov 2026 20:00:09 -0800 Subject: [PATCH 6/7] =?UTF-8?q?=F0=9F=91=B7=20ci:=20run=20CodeQL=20through?= =?UTF-8?q?=20shared=20workflow?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .github/workflows/codeql.yaml | 29 +++++------------------------ 1 file changed, 5 insertions(+), 24 deletions(-) diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml index 710a8e8..c118fee 100644 --- a/.github/workflows/codeql.yaml +++ b/.github/workflows/codeql.yaml @@ -12,30 +12,11 @@ concurrency: permissions: {} jobs: analyze: - name: ๐Ÿ›ก๏ธ Analyze ${{ matrix.language }} - runs-on: ubuntu-26.04 + name: ๐Ÿ›ก๏ธ Analyze + uses: tox-dev/github-workflows/.github/workflows/codeql.yaml@bceb5c005e19823dc8835f536f53f172ae223927 # 6.5.0 permissions: contents: read security-events: write - strategy: - fail-fast: false - matrix: - language: [actions, python] - steps: - - name: ๐Ÿ“ฅ Check out code - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - with: - persist-credentials: false - - name: ๐Ÿ›ก๏ธ Initialize CodeQL - uses: github/codeql-action/init@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1 - with: - languages: ${{ matrix.language }} - build-mode: none - queries: security-extended - config: | - paths-ignore: - - tests - - name: ๐Ÿ›ก๏ธ Analyze - uses: github/codeql-action/analyze@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1 - with: - category: "/language:${{ matrix.language }}" + with: + languages: '["actions","python"]' + paths-ignore: '["tests"]' From c9c1da99a59554d9be2732e053f2df5bdd24eee3 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Bern=C3=A1t=20G=C3=A1bor?= Date: Tue, 3 Nov 2026 20:00:09 -0800 Subject: [PATCH 7/7] =?UTF-8?q?=F0=9F=91=B7=20ci(release):=20publish=20Git?= =?UTF-8?q?Hub=20Release=20via=20gw=206.5.0?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .github/workflows/release.yaml | 85 ++++++---------------------------- 1 file changed, 15 insertions(+), 70 deletions(-) diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index 4c2b910..a5d5627 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -10,48 +10,20 @@ concurrency: jobs: build: name: ๐Ÿ—๏ธ Build - uses: tox-dev/github-workflows/.github/workflows/validate-python-release.yaml@534a196a132a52365c464e1227d4c46f30968f29 # 6.4.0 + uses: tox-dev/github-workflows/.github/workflows/validate-python-release.yaml@bceb5c005e19823dc8835f536f53f172ae223927 # 6.5.0 permissions: contents: read - github-notes: + notes: name: ๐Ÿ“ Render GitHub Release notes - runs-on: ubuntu-26.04 + uses: tox-dev/github-workflows/.github/workflows/release-notes.yaml@bceb5c005e19823dc8835f536f53f172ae223927 # 6.5.0 permissions: contents: read - outputs: - artifact-id: ${{ steps.upload.outputs.artifact-id }} - steps: - - name: ๐Ÿ“ฅ Check out code - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - with: - fetch-depth: 0 - persist-credentials: false - - name: ๐Ÿ Install uv - uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3 - with: - python-version: "3.15" - enable-cache: false - - name: ๐Ÿ“ฆ Install locked release tools - uses: tox-dev/github-workflows/install-locked-tools@534a196a132a52365c464e1227d4c46f30968f29 # 6.4.0 - with: - groups: release-notes - venv: ${{ runner.temp }}/release-tools - - name: ๐Ÿ“ Render release notes - uses: tox-dev/github-workflows/render-release-notes@534a196a132a52365c464e1227d4c46f30968f29 # 6.4.0 - with: - tag: ${{ github.ref_name }} - changelog: CHANGELOG.md - artifact-url: https://pypi.org/project/pytest-print/${{ github.ref_name }}/ - - name: ๐Ÿ“ค Upload release notes - id: upload - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 - with: - name: github-release-notes - path: ${{ runner.temp }}/release-notes.md - if-no-files-found: error + with: + tag: ${{ github.ref_name }} + artifact-url: https://pypi.org/project/pytest-print/${{ github.ref_name }}/ release: name: ๐Ÿš€ Publish to PyPI - needs: [build, github-notes] + needs: [build, notes] runs-on: ubuntu-26.04 environment: name: release @@ -71,40 +43,13 @@ jobs: attestations: true github-release: name: ๐Ÿš€ Publish GitHub Release - needs: [build, release, github-notes] - runs-on: ubuntu-26.04 + needs: [build, release, notes] + uses: tox-dev/github-workflows/.github/workflows/github-release.yaml@bceb5c005e19823dc8835f536f53f172ae223927 # 6.5.0 permissions: contents: write - steps: - - name: ๐Ÿ Install uv - uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3 - with: - version: latest-known - python-version: "3.15" - enable-cache: false - ignore-empty-workdir: true - - name: ๐Ÿ“ฉ Download distributions - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 - with: - artifact-ids: ${{ needs.build.outputs.distributions-artifact-id }} - path: dist/ - - name: ๐Ÿ“ฉ Download release notes - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 - with: - artifact-ids: ${{ needs.github-notes.outputs.artifact-id }} - path: ${{ runner.temp }} - - name: ๐Ÿ” Verify PyPI artifacts - uses: tox-dev/github-workflows/reconcile-pypi-artifacts@534a196a132a52365c464e1227d4c46f30968f29 # 6.4.0 - with: - project: pytest-print - version: ${{ github.ref_name }} - dist: dist/ - - name: ๐Ÿš€ Publish GitHub release - uses: tox-dev/github-workflows/publish-github-release@534a196a132a52365c464e1227d4c46f30968f29 # 6.4.0 - env: - GH_TOKEN: ${{ github.token }} - with: - tag: ${{ github.ref_name }} - commit: ${{ github.sha }} - title: ${{ github.ref_name }} - notes-file: ${{ runner.temp }}/release-notes.md + with: + project: pytest-print + version: ${{ github.ref_name }} + tag: ${{ github.ref_name }} + artifact-pattern: python-package-distributions + notes-artifact-id: ${{ needs.notes.outputs.artifact-id }}