diff options
Diffstat (limited to '.github/workflows/release.yml')
| -rw-r--r-- | .github/workflows/release.yml | 32 |
1 files changed, 13 insertions, 19 deletions
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 4d79dd3..6a7ba00 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -13,28 +13,22 @@ jobs: runs-on: ubuntu-latest permissions: - # Used to authenticate to PyPI via OIDC. - # Used to sign the release's artifacts with sigstore-python. - id-token: write - - # Used to attach signing artifacts to the published release. - contents: write + id-token: write # For Trusted Publishing + attestations. + contents: write # For uploading release assets. steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - with: - persist-credentials: false - - - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0 - with: - python-version-file: pyproject.toml + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 + with: + persist-credentials: false - - name: deps - run: python -m pip install -U build + - name: Install the latest version of uv + uses: astral-sh/setup-uv@85856786d1ce8acfbcc2f13a5f3fbd6b938f9f41 # v7.1.2 + with: + enable-cache: false - - name: build - run: python -m build + - name: build + run: make dist - - name: publish - uses: pypa/gh-action-pypi-publish@76f52bc884231f62b9a034ebfe128415bbaabdfc # v1.12.4 + - name: publish + uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e # v1.13.0 |