From 1abf60dcdeb277912b332e490eab7eec67f7b18d Mon Sep 17 00:00:00 2001 From: Alec Rosenbaum Date: Mon, 24 Jun 2024 15:34:27 -0400 Subject: [PATCH 1/7] set as trusted publisher --- .github/workflows/release.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 81f39d7..4147aa9 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -11,6 +11,9 @@ jobs: build_and_upload: runs-on: arc-amd64-runners environment: production + permissions: + # id-token for the trusted publisher setup + id-token: write steps: - uses: actions/checkout@v2 @@ -76,6 +79,3 @@ jobs: python setup.py sdist - name: Upload to PyPI uses: closeio/gh-action-pypi-publish@a260c7e54e4251db69485e1e7ca271aec8c0ddf9 - with: - user: __token__ - password: ${{ secrets.PYPI_TOKEN }} From fba86ea7f5631ea27f8462de2594eccf9aa02ec8 Mon Sep 17 00:00:00 2001 From: Alec Rosenbaum Date: Mon, 24 Jun 2024 15:37:07 -0400 Subject: [PATCH 2/7] upload to testpypi --- .github/workflows/release.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 4147aa9..a05e4ec 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -79,3 +79,5 @@ jobs: python setup.py sdist - name: Upload to PyPI uses: closeio/gh-action-pypi-publish@a260c7e54e4251db69485e1e7ca271aec8c0ddf9 + with: + repository-url: https://test.pypi.org/legacy/ From e4d73351d13ba32da8c0d895de9a10104dee5839 Mon Sep 17 00:00:00 2001 From: Alec Rosenbaum Date: Mon, 24 Jun 2024 15:40:21 -0400 Subject: [PATCH 3/7] run on the right hardware --- .github/workflows/release.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index a05e4ec..c3a759e 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -9,7 +9,7 @@ on: jobs: build_and_upload: - runs-on: arc-amd64-runners + runs-on: 'ubuntu-20.04' environment: production permissions: # id-token for the trusted publisher setup From d3fd4dcddc1298417a3e2ec93ef9cf50661cd826 Mon Sep 17 00:00:00 2001 From: Alec Rosenbaum Date: Mon, 24 Jun 2024 15:46:37 -0400 Subject: [PATCH 4/7] update permissions --- .github/workflows/release.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index c3a759e..6f9e7c8 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -14,6 +14,8 @@ jobs: permissions: # id-token for the trusted publisher setup id-token: write + # for tagging the commit + contents: write steps: - uses: actions/checkout@v2 From dcd6cefddd5cee833ae80645802a7522d12b28b3 Mon Sep 17 00:00:00 2001 From: Alec Rosenbaum Date: Mon, 24 Jun 2024 15:48:01 -0400 Subject: [PATCH 5/7] fix repo_url --- .github/workflows/release.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 6f9e7c8..7472062 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -82,4 +82,4 @@ jobs: - name: Upload to PyPI uses: closeio/gh-action-pypi-publish@a260c7e54e4251db69485e1e7ca271aec8c0ddf9 with: - repository-url: https://test.pypi.org/legacy/ + repository_url: https://test.pypi.org/legacy/ From a65093a67b5fd767621a51f836b1aaf601ab4ab4 Mon Sep 17 00:00:00 2001 From: Alec Rosenbaum Date: Mon, 24 Jun 2024 15:54:24 -0400 Subject: [PATCH 6/7] bump publish version --- .github/workflows/release.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 7472062..e13f55d 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -80,6 +80,6 @@ jobs: run: | python setup.py sdist - name: Upload to PyPI - uses: closeio/gh-action-pypi-publish@a260c7e54e4251db69485e1e7ca271aec8c0ddf9 + uses: closeio/gh-action-pypi-publish@ec4db0b4ddc65acdf4bff5fa45ac92d78b56bdf0 # v1.9 with: repository_url: https://test.pypi.org/legacy/ From bf350c830303f979b98654777f31991eef7b95ea Mon Sep 17 00:00:00 2001 From: Alec Rosenbaum Date: Mon, 24 Jun 2024 15:55:59 -0400 Subject: [PATCH 7/7] drop test repo config --- .github/workflows/release.yml | 2 -- 1 file changed, 2 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index e13f55d..536383e 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -81,5 +81,3 @@ jobs: python setup.py sdist - name: Upload to PyPI uses: closeio/gh-action-pypi-publish@ec4db0b4ddc65acdf4bff5fa45ac92d78b56bdf0 # v1.9 - with: - repository_url: https://test.pypi.org/legacy/