Continuous Delivery of Python package #94
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Continuous Delivery of Python package | |
| on: | |
| push: | |
| branches: | |
| - master | |
| workflow_dispatch: | |
| inputs: | |
| production_release: | |
| description: "Production release?" | |
| type: boolean | |
| required: true | |
| default: true | |
| concurrency: release | |
| permissions: | |
| contents: write | |
| packages: read | |
| jobs: | |
| ci-check-python: | |
| name: Check Python | |
| uses: ./.github/workflows/check-python.yaml | |
| ci-build-python: | |
| name: Build Python | |
| uses: ./.github/workflows/build-python.yaml | |
| needs: ci-check-python | |
| release: | |
| name: Release Library | |
| needs: ci-build-python | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/create-github-app-token@v1 | |
| id: app-token | |
| with: | |
| app-id: ${{ secrets.BOT_ID }} | |
| private-key: ${{ secrets.BOT_SK }} | |
| - uses: actions/checkout@v3 | |
| with: | |
| # Fetch entire repository history so we can determine version number from it | |
| fetch-depth: 0 | |
| # use release token for production_release, standard token otherwise | |
| token: ${{ steps.app-token.outputs.token }} | |
| - name: Install poetry | |
| run: pipx install poetry | |
| - name: Set up Python | |
| uses: actions/setup-python@v4 | |
| with: | |
| python-version: "3.10" | |
| cache: "poetry" | |
| - name: Install dependencies | |
| run: poetry install --no-interaction --no-root | |
| - name: Get branch name | |
| shell: bash | |
| run: echo "branch=${GITHUB_REF#refs/heads/}" >> $GITHUB_OUTPUT | |
| id: get_branch | |
| - name: Set Git user as GitHub actions | |
| run: git config --global user.email "actions@github.com" && git config --global user.name "github-actions" | |
| - name: Create Continuous Deployment - Beta (non-prod) | |
| if: "${{ steps.get_branch.outputs.branch == 'master' && !inputs.production_release && !contains(github.event.head_commit.message, 'skip-checks: true') }}" | |
| run: | | |
| poetry run semantic-release \ | |
| -v DEBUG \ | |
| --prerelease \ | |
| --define=upload_to_repository=true \ | |
| --define=branch=master \ | |
| publish | |
| gh release edit --prerelease "$(poetry run semantic-release print-version --current)" | |
| env: | |
| GH_TOKEN: ${{ steps.app-token.outputs.token }} | |
| REPOSITORY_USERNAME: __token__ | |
| REPOSITORY_PASSWORD: ${{ secrets.PYPI_API_KEY }} | |
| - name: Create Continuous Deployment - Production | |
| if: steps.get_branch.outputs.branch == 'master' && inputs.production_release | |
| run: | | |
| poetry run semantic-release \ | |
| -v DEBUG \ | |
| --define=version_source="commit" \ | |
| --define=branch=master \ | |
| --define=upload_to_repository=true \ | |
| --define=patch_without_tag=true \ | |
| publish | |
| env: | |
| GH_TOKEN: ${{ steps.app-token.outputs.token }} | |
| REPOSITORY_USERNAME: __token__ | |
| REPOSITORY_PASSWORD: ${{ secrets.PYPI_API_KEY }} |