forked from gruebel/pycep
-
Notifications
You must be signed in to change notification settings - Fork 1
96 lines (87 loc) · 3.32 KB
/
release.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
name: Release
on:
push:
tags:
- "*.*.*"
permissions: read-all
env:
POETRY_VERSION: "1.8.2"
MIN_PYTHON_VERSION: "3.8"
jobs:
release:
runs-on: ubuntu-latest
environment: release
permissions:
contents: write
# IMPORTANT: this permission is mandatory for trusted publishing to pypi
id-token: write
outputs:
version: ${{ steps.version.outputs.version }}
steps:
- uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
with:
ref: master
- uses: actions/setup-python@f677139bbe7f9c59b41e40162b753c062f5d49a3 # v5.2.0
with:
python-version: ${{ env.MIN_PYTHON_VERSION }}
- name: Set up poetry ${{ env.POETRY_VERSION }}
run: pip install poetry==${{ env.POETRY_VERSION }}
- name: Install dependencies
run: poetry install --no-dev
- name: Release version ${{ github.ref_name }}
id: version
run: |
# bump version
poetry version $GITHUB_REF_NAME
new_version=$(poetry version -s)
# commit and push
git config --global user.name 'gruebel'
git config --global user.email '[email protected]'
git add pyproject.toml
git commit -m "publish version ${new_version}"
git push
echo "version=$new_version" >> $GITHUB_OUTPUT
- name: Build Python package
run: poetry build
- name: Publish to PyPI
uses: pypa/gh-action-pypi-publish@0ab0b79471669eb3a4d647e625009c62f9f3b241 # v1.10.1
- name: Extract release notes
id: extract-release-notes
uses: ffurrer2/extract-release-notes@9989ccec43d726ef05aa1cd7b2854fb96b6df6ab # v2.2.0
- name: Create GitHub Release
uses: softprops/action-gh-release@c062e08bd532815e2082a85e87e3ef29c3e6d191 # v2.0.8
with:
body: ${{ steps.extract-release-notes.outputs.release_notes }}
create-pr:
needs: release
runs-on: ubuntu-latest
steps:
- name: Checkout checkov
uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
with:
token: ${{ secrets.PAT_TOKEN }}
repository: bridgecrewio/checkov
- uses: actions/setup-python@f677139bbe7f9c59b41e40162b753c062f5d49a3 # v5.2.0
with:
python-version: ${{ env.MIN_PYTHON_VERSION }}
- name: Prepare PR
run: |
# install needed tools
python -m pip install --no-cache-dir --upgrade pipenv "pipenv-setup[black]" "vistir<0.7.0"
# update Pipfile
pipenv --python ${{ env.MIN_PYTHON_VERSION }}
pipenv install pycep-parser==${{ needs.release.outputs.version }}
pipenv lock
# update setup.py
pipenv-setup sync --pipfile
- name: Create PR
uses: peter-evans/create-pull-request@5e914681df9dc83aa4e4905692ca88beb2f9e91f # v7.0.5
with:
token: ${{ secrets.PAT_TOKEN }}
branch: update-pycep-parser-dep
delete-branch: true
commit-message: update pycep-parser version
title: "chore: update pycep-parser version to ${{ needs.bump-version.outputs.version }}"
body: |
- Automatic update of pycep-parser
powered by [create-pull-request](https://github.com/peter-evans/create-pull-request) GHA