From bfa887a1669d64e02907e5f72488a6bbf4ccf661 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 4 Oct 2024 13:08:09 +0000 Subject: [PATCH 1/2] Bump pypa/cibuildwheel in the github-actions group across 1 directory Bumps the github-actions group with 1 update in the / directory: [pypa/cibuildwheel](https://github.com/pypa/cibuildwheel). Updates `pypa/cibuildwheel` from 2.19.2 to 2.21.2 - [Release notes](https://github.com/pypa/cibuildwheel/releases) - [Changelog](https://github.com/pypa/cibuildwheel/blob/main/docs/changelog.md) - [Commits](https://github.com/pypa/cibuildwheel/compare/v2.19.2...v2.21.2) --- updated-dependencies: - dependency-name: pypa/cibuildwheel dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/release.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 7695c58..cbbc910 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -33,7 +33,7 @@ jobs: platforms: aarch64 - name: Build wheels with cibuildwheels - uses: pypa/cibuildwheel@v2.19.2 + uses: pypa/cibuildwheel@v2.21.2 env: CIBW_ARCHS_LINUX: aarch64 native CIBW_SKIP: cp36* pp* *musllinux* From 621550ce9ef5c9f3ee029f72420f5783c9ffc788 Mon Sep 17 00:00:00 2001 From: Brendan <2bndy5@gmail.com> Date: Sat, 5 Oct 2024 00:26:20 -0700 Subject: [PATCH 2/2] enable armv7l builds and upgrade to trusted publisher --- .github/workflows/release.yml | 16 +++++++--------- 1 file changed, 7 insertions(+), 9 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index cbbc910..a8c00a5 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -7,6 +7,8 @@ on: jobs: upload-pypi: + permissions: + id-token: write runs-on: ubuntu-latest steps: - name: Set up Python @@ -35,7 +37,7 @@ jobs: - name: Build wheels with cibuildwheels uses: pypa/cibuildwheel@v2.21.2 env: - CIBW_ARCHS_LINUX: aarch64 native + CIBW_ARCHS_LINUX: aarch64 native armv7l CIBW_SKIP: cp36* pp* *musllinux* - name: Move cross-compiled wheels to dist folder @@ -57,15 +59,11 @@ jobs: - name: Publish package (to TestPyPI) if: github.event_name == 'workflow_dispatch' - env: - TWINE_USERNAME: __token__ - TWINE_PASSWORD: ${{ secrets.TEST_PYPI_TOKEN }} - run: twine upload --repository testpypi dist/* + uses: pypa/gh-action-pypi-publish@v1.10.3 + with: + repository-url: https://test.pypi.org/legacy/ - name: Publish to PyPi # only upload distributions to PyPi when triggered by a published release if: github.event_name == 'release' - env: - TWINE_USERNAME: __token__ - TWINE_PASSWORD: ${{ secrets.pypi_token }} - run: twine upload dist/* + uses: pypa/gh-action-pypi-publish@v1.10.3