Release v1.9.0 (pre-release - false) by @sebastian-quintero from develop #51
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
name: release | |
run-name: Release ${{ inputs.VERSION }} (pre-release - ${{ inputs.IS_PRE_RELEASE }}) by @${{ github.actor }} from ${{ github.ref_name }} | |
on: | |
workflow_dispatch: | |
inputs: | |
VERSION: | |
description: "The version to release" | |
required: true | |
IS_PRE_RELEASE: | |
description: "It IS a pre-release" | |
required: true | |
default: true | |
type: boolean | |
env: | |
GO_VERSION: 1.23 | |
PYTHON_VERSION: 3.12 | |
jobs: | |
bump-version: | |
runs-on: ubuntu-latest | |
env: | |
VERSION: ${{ inputs.VERSION }} | |
GH_TOKEN: ${{ github.token }} | |
SSH_AUTH_SOCK: /tmp/ssh_agent.sock | |
permissions: | |
contents: write | |
steps: | |
- name: ensure proper tagging | |
run: | | |
echo "If it's a pre-release, the version should contain a hyphen" | |
if [ ${{ inputs.IS_PRE_RELEASE }} = true ]; then | |
if [[ $VERSION != *-* ]]; then | |
echo "Pre-release versions should contain a hyphen" | |
exit 1 | |
fi | |
else | |
if [[ $VERSION == *-* ]]; then | |
echo "Release versions should not contain a hyphen" | |
exit 1 | |
fi | |
fi | |
- name: ensure version is not already released | |
run: | | |
if git ls-remote --tags origin | grep -q "refs/tags/$VERSION"; then | |
echo "Version $VERSION already exists" | |
exit 1 | |
fi | |
- name: set up Python | |
uses: actions/setup-python@v5 | |
with: | |
python-version: ${{ env.PYTHON_VERSION }} | |
- name: set up go | |
uses: actions/setup-go@v5 | |
with: | |
go-version: ${{ env.GO_VERSION }} | |
- name: configure git with the bot credentials | |
run: | | |
mkdir -p ~/.ssh | |
ssh-keyscan github.com >> ~/.ssh/known_hosts | |
ssh-agent -a $SSH_AUTH_SOCK > /dev/null | |
ssh-add - <<< "${{ secrets.NEXTMVBOT_SSH_KEY }}" | |
echo "${{ secrets.NEXTMVBOT_SIGNING_KEY }}" > ~/.ssh/signing.key | |
chmod 600 ~/.ssh/signing.key | |
git config --global user.name "nextmv-bot" | |
git config --global user.email "[email protected]" | |
git config --global gpg.format ssh | |
git config --global user.signingkey ~/.ssh/signing.key | |
git clone [email protected]:nextmv-io/nextroute.git | |
cd nextroute | |
git checkout ${{ github.ref_name }} | |
git rev-parse --short HEAD | |
- name: install dependencies | |
run: | | |
pip install --upgrade pip | |
pip install -r requirements.txt | |
working-directory: ./nextroute | |
- name: bump version in version file for Go | |
run: | | |
echo $VERSION > VERSION | |
working-directory: ./nextroute | |
- name: upgrade version with hatch for Python | |
run: hatch version ${{ env.VERSION }} | |
working-directory: ./nextroute | |
- name: commit version bump | |
run: | | |
git add VERSION | |
git add src/nextroute/__about__.py | |
git commit -S -m "Bump version to $VERSION" | |
git push | |
git tag $VERSION | |
git push origin $VERSION | |
working-directory: ./nextroute | |
- name: create release | |
run: | | |
PRERELEASE_FLAG="" | |
if [ ${{ inputs.IS_PRE_RELEASE }} = true ]; then | |
PRERELEASE_FLAG="--prerelease" | |
fi | |
gh release create $VERSION \ | |
--verify-tag \ | |
--generate-notes \ | |
--title $VERSION $PRERELEASE_FLAG | |
working-directory: ./nextroute | |
build-sdist: | |
name: wheels-sdist | |
needs: bump-version | |
runs-on: ubuntu-latest | |
steps: | |
- uses: actions/checkout@v4 | |
with: | |
ref: ${{ github.ref_name }} | |
- name: Build sdist | |
run: pipx run build --sdist | |
- name: Check metadata | |
run: pipx run twine check dist/* | |
- uses: actions/upload-artifact@v4 | |
with: | |
name: wheels-artifacts-sdist | |
path: dist/*.tar.gz | |
build-wheels: | |
name: wheels-${{ matrix.platform }} | |
needs: bump-version | |
runs-on: ${{ matrix.image }} | |
strategy: | |
fail-fast: false | |
matrix: | |
include: | |
- image: ubuntu-latest | |
platform: linux | |
- image: macos-13 | |
platform: macos-amd64 | |
- image: macos-14 | |
platform: macos-arm64 | |
- image: windows-latest | |
platform: windows | |
steps: | |
- name: git clone ${{ github.ref_name }} | |
uses: actions/checkout@v4 | |
with: | |
ref: ${{ github.ref_name }} | |
- name: set up Python | |
uses: actions/setup-python@v5 | |
with: | |
python-version: ${{ env.PYTHON_VERSION }} | |
- name: set up go | |
uses: actions/setup-go@v5 | |
with: | |
go-version: ${{ env.GO_VERSION }} | |
- name: Set up QEMU | |
if: matrix.platform == 'linux' | |
uses: docker/setup-qemu-action@v3 | |
with: | |
platforms: all | |
- name: Build wheels | |
if: matrix.platform != 'macos-arm64' | |
uses: pypa/[email protected] | |
env: | |
MACOSX_DEPLOYMENT_TARGET: 13.0 | |
- name: Build wheels | |
if: matrix.platform == 'macos-arm64' | |
uses: pypa/[email protected] | |
env: | |
# TODO: default wheel repair does not recognize the arm64 wheel. | |
# This seems like a bug in delocate-wheel, which is the tool used by cibuildwheel, | |
# since the binary works fine when installed. However, we skip a more thorough | |
# investigation for now and just disable the repair step. | |
CIBW_REPAIR_WHEEL_COMMAND: "" | |
MACOSX_DEPLOYMENT_TARGET: 14.0 | |
- name: Verify clean directory | |
run: git diff --exit-code | |
shell: bash | |
- name: Upload wheels | |
uses: actions/upload-artifact@v4 | |
with: | |
name: wheels-artifacts-${{ matrix.platform }} | |
path: wheelhouse/*.whl | |
release: | |
runs-on: ubuntu-latest | |
needs: [build-wheels, build-sdist] | |
strategy: | |
matrix: | |
include: | |
- target-env: pypi | |
target-url: https://pypi.org/p/nextroute | |
- target-env: testpypi | |
target-url: https://test.pypi.org/p/nextroute | |
environment: | |
name: ${{ matrix.target-env }} | |
url: ${{ matrix.target-url }} | |
permissions: | |
contents: read | |
id-token: write # This is required for trusted publishing to PyPI | |
steps: | |
- uses: actions/download-artifact@v4 | |
with: | |
merge-multiple: true | |
path: dist | |
- name: Print directory tree for reference | |
uses: jaywcjlove/github-action-folder-tree@main | |
with: | |
path: ./ | |
- name: Publish package distributions to PyPI | |
if: ${{ matrix.target-env == 'pypi' }} | |
uses: pypa/gh-action-pypi-publish@release/v1 | |
with: | |
packages-dir: ./dist | |
- name: Publish package distributions to TestPyPI | |
if: ${{ matrix.target-env == 'testpypi' }} | |
uses: pypa/gh-action-pypi-publish@release/v1 | |
with: | |
repository-url: https://test.pypi.org/legacy/ | |
packages-dir: ./dist | |
notify: | |
runs-on: ubuntu-latest | |
needs: release | |
if: ${{ needs.release.result == 'success' && inputs.IS_PRE_RELEASE == false }} | |
steps: | |
- name: notify slack | |
run: | | |
export DATA="{\"text\":\"Release notification - nextroute ${{ inputs.VERSION }} (see <https://github.com/nextmv-io/nextroute/releases/${{ inputs.VERSION }}|release notes> / <https://pypi.org/project/nextroute|PyPI>)\"}" | |
curl -X POST -H 'Content-type: application/json' --data "$DATA" ${{ secrets.SLACK_URL_MISSION_CONTROL }} |