X Tutup
Skip to content

Add a guide about publishing dists via GH Actions#647

Merged
ncoghlan merged 17 commits intopypa:masterfrom
webknjaz:features/publishing-dists-via-gh-actions-guide
Sep 27, 2019
Merged

Add a guide about publishing dists via GH Actions#647
ncoghlan merged 17 commits intopypa:masterfrom
webknjaz:features/publishing-dists-via-gh-actions-guide

Conversation

@webknjaz
Copy link
Member

@webknjaz
Copy link
Member Author

@pradyunsg @cjerdonek ^

Copy link
Contributor

@hugovk hugovk left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good, some minor suggestions.

@webknjaz
Copy link
Member Author

Folks, this is ready for a new round of reviews. I've factored out the workflow sample into a separate file and addressed all the major concerns.

Copy link
Contributor

@hugovk hugovk left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good, just a few more minor bits!

.
# Actualy publish to PyPIs
- name: Publish 📦 to Test PyPI
uses: pypa/gh-action-pypi-publish@master
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Once there's a release, include the version number here.

We strongly recommend that you include the version of the action you are using by specifying a Git ref, SHA, or Docker tag number. If you don't specify a version, it could break your workflows or cause unexpected behavior when the action owner publishes an update.

  • Using the commit SHA of a released action version is the safest for stability and security.
  • Using the specific major action version allows you to receive critical fixes and security patches while still maintaining compatibility. It also assures that your workflow should still work.
  • Using the master branch of an action may be convenient, but if someone releases a new major version with a breaking change, your workflow could break.

https://help.github.com/en/articles/workflow-syntax-for-github-actions#jobsjob_idstepsuses

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Sure, I'd also mention it somewhere in the README of the action itself.

@webknjaz
Copy link
Member Author

@di @ncoghlan I think this is waiting for merge now. Mind taking a look? TIA.

Co-Authored-By: Hugo van Kemenade <hugovk@users.noreply.github.com>
Copy link
Member

@di di left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This looks pretty good.

I'm not 100% sure that we should advise users to publish to TestPyPI on every push, but I think it's probably OK.

webknjaz added a commit to pypa/gh-action-pypi-publish that referenced this pull request Sep 19, 2019
webknjaz and others added 3 commits September 19, 2019 12:38
Co-Authored-By: Dustin Ingram <di@users.noreply.github.com>
Co-Authored-By: Dustin Ingram <di@users.noreply.github.com>
Co-Authored-By: Dustin Ingram <di@users.noreply.github.com>
@webknjaz webknjaz requested a review from di September 19, 2019 13:50
@webknjaz
Copy link
Member Author

@di would you please take a look?

Copy link
Member

@pradyunsg pradyunsg left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think this is good-enough to publish now; we can always iterate and improve this as we go.

Copy link
Member

@ncoghlan ncoghlan left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Concur with @pradyunsg here - I think there are some interesting questions on specifics in the remaining comments, but I also think they can be tackled via a follow-up PR.

@ncoghlan ncoghlan merged commit b852020 into pypa:master Sep 27, 2019
@webknjaz
Copy link
Member Author

Thanks, Nick! I'm also aware of other problems that need to be addressed and I'm going to solve those too, in the follow-up PRs.

@hugovk

This comment was marked as outdated.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Add a usage guide to packaging.python.org

7 participants

X Tutup