mirror of
https://github.com/Horizontal42/netsleuth.git
synced 2026-11-10 23:52:04 +03:00
63 lines
1.8 KiB
YAML
63 lines
1.8 KiB
YAML
name: release
|
|
|
|
on:
|
|
push:
|
|
tags:
|
|
- "v*.*.*"
|
|
|
|
jobs:
|
|
build-and-test:
|
|
runs-on: windows-latest
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
|
|
- name: Install uv
|
|
uses: astral-sh/setup-uv@v3
|
|
|
|
- name: Sync base + optional extras
|
|
run: uv sync --extra tcptrace --extra ndt7
|
|
|
|
- name: Run test suite
|
|
run: uv run pytest -q
|
|
|
|
- name: Build wheel and sdist
|
|
run: uv build
|
|
|
|
- name: Verify extras install cleanly from the built wheel
|
|
shell: bash
|
|
run: |
|
|
python -m venv /tmp/wheel-check
|
|
/tmp/wheel-check/Scripts/pip install "$(ls dist/*.whl)[tcptrace,ndt7]"
|
|
/tmp/wheel-check/Scripts/netsleuth --help
|
|
|
|
- uses: actions/upload-artifact@v4
|
|
with:
|
|
name: dist
|
|
path: dist/
|
|
|
|
# Publishing is intentionally a separate, manually-approved job.
|
|
#
|
|
# RENAMED as of 2026-08-09: the distribution name "netcheck" was already
|
|
# taken on PyPI by an unrelated project (Netchecks / hardbyte, a cloud-native
|
|
# network-assertion tool, https://pypi.org/project/netcheck/). `pyproject.toml`'s
|
|
# [project] name has been changed to "netsleuth" — see TASKS.md.
|
|
#
|
|
# Publish job enabled with OIDC Trusted Publishing.
|
|
# Before enabling:
|
|
# 1. Confirm "netsleuth" is free on PyPI.
|
|
# 2. Set up PyPI Trusted Publishing for the project
|
|
# (https://docs.pypi.org/trusted-publishers/) — no token needed, this
|
|
# workflow's OIDC identity gets authorized directly on pypi.org.
|
|
# 3. This job uses `environment: pypi` protection rule requiring manual approval.
|
|
publish:
|
|
needs: build-and-test
|
|
runs-on: ubuntu-latest
|
|
environment: pypi
|
|
permissions:
|
|
id-token: write
|
|
steps:
|
|
- uses: actions/download-artifact@v4
|
|
with:
|
|
name: dist
|
|
path: dist/
|
|
- uses: pypa/gh-action-pypi-publish@release/v1
|