gh-action-pypi-publish

gh-action-pypi-publish copied to clipboard

An error `InvalidDistribution: Unknown distribution format: 'artifact'` is thrown when artifact upload/download is used with the default name. ```yml jobs: build: - name: Store the distribution packages uses: actions/upload-artifact@v3 with:...

danielniccoli

Build Docker image and push to GHCR

15

## Description Closes #58 Up to this point, the project has been set up as a [Docker action](https://docs.github.com/en/actions/creating-actions/creating-a-docker-container-action) referencing the Dockerfile. https://github.com/pypa/gh-action-pypi-publish/blob/3fbcf7ccf443305955ce16db9de8401f7dc1c7dd/action.yml#L86-L88 The downside to using the Dockerfile for the...

br3ndonland

twine-upload: fix tense on password nudge

2

This also makes the password case a hard error on `pypi.org`, since we know it's going to fail. But I'm happy to revert that if you'd prefer to display the...

woodruffw

#190 introduced the initial announcement back in 2023. The promised thing is now implemented and enforced so we have to adapt the text to reflect that.

webknjaz

progressbar it not very useful in ci and make log too noisy, can we add a option to disable progressbar?

trim21

updates: - [github.com/Lucas-C/pre-commit-hooks.git: v1.5.4 → v1.5.5](https://github.com/Lucas-C/pre-commit-hooks.git/compare/v1.5.4...v1.5.5) - [github.com/python-jsonschema/check-jsonschema.git: 0.27.3 → 0.28.1](https://github.com/python-jsonschema/check-jsonschema.git/compare/0.27.3...0.28.1) - [github.com/adrienverge/yamllint.git: v1.33.0 → v1.35.1](https://github.com/adrienverge/yamllint.git/compare/v1.33.0...v1.35.1) - [github.com/PyCQA/flake8.git: 6.1.0 → 7.0.0](https://github.com/PyCQA/flake8.git/compare/6.1.0...7.0.0) - [github.com/PyCQA/flake8.git: 4.0.1 → 7.0.0](https://github.com/PyCQA/flake8.git/compare/4.0.1...7.0.0) - [github.com/PyCQA/pylint.git: v3.0.3 →...

pre-commit-ci[bot]

raise BadZipFile("Bad magic number for central directory")

9

``` **Run pypa/gh-action-pypi-publish@release/v1** /usr/bin/docker run --name bac05ded6ea2e388f648368fab0951ff555dd1_69c6d2 --label bac05d --workdir /github/workspace --rm -e "INPUT_SKIP-EXISTING" -e "INPUT_USER" -e "INPUT_PASSWORD" -e "INPUT_REPOSITORY-URL" -e "INPUT_REPOSITORY_URL" -e "INPUT_PACKAGES-DIR" -e "INPUT_PACKAGES_DIR" -e "INPUT_VERIFY-METADATA" -e "INPUT_VERIFY_METADATA"...

craigstar

Deprecate the `password` setting in favor of `token`?

6

This is a small thing; opening for discussion. Right now, the action has a `password` setting for users to pass (non-TP) credentials. PyPI and TestPyPI no longer have password-based uploads,...

woodruffw

Expose PEP 740 attestations functionality

31

~~WIP, still experimenting here. Not ready for review 🙂~~ This adds PEP 740 attestation generation to the workflow: when the Trusted Publishing flow is used, this will generate a publish...

woodruffw

Document permission requirements for private repositories

2

For private repos, due to [this undocumented behavior](https://github.com/actions/checkout/issues/445#issuecomment-1957886916) of GitHub actions, it seems an additional `contents: read` permission is required for the action: ```yaml permissions: id-token: write # IMPORTANT: this...

trymzet