From 6636e056c224622826ec55e31b0e002c8ad931b0 Mon Sep 17 00:00:00 2001
From: Zanie Blue <contact@zanie.dev>
Date: Tue, 3 Feb 2026 15:03:50 -0600
Subject: [PATCH] Add publish of versions to `astral-sh/versions`

---
 .github/workflows/publish-versions.yml | 75 ++++++++++++++++++++++++++
 .github/workflows/release.yml          |  9 ++++
 dist-workspace.toml                    |  2 +-
 3 files changed, 85 insertions(+), 1 deletion(-)
 create mode 100644 .github/workflows/publish-versions.yml

diff --git a/.github/workflows/publish-versions.yml b/.github/workflows/publish-versions.yml
new file mode 100644
index 00000000000000..1f1bc7ba39ce4d
--- /dev/null
+++ b/.github/workflows/publish-versions.yml
@@ -0,0 +1,75 @@
+# Publish ruff version information to the versions repository.
+#
+# Assumed to run as a subworkflow of .github/workflows/release.yml; specifically, as a post-announce
+# job within `cargo-dist`.
+name: publish-versions
+
+on:
+  workflow_call:
+    inputs:
+      plan:
+        required: true
+        type: string
+
+permissions: {}
+
+jobs:
+  publish-versions:
+    runs-on: ubuntu-latest
+    env:
+      VERSION: ${{ fromJson(inputs.plan).announcement_tag }}
+    steps:
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        with:
+          persist-credentials: false
+
+      - name: "Set branch name"
+        run: echo "BRANCH_NAME=update-versions-$VERSION-$(date +%s)" >> "$GITHUB_ENV"
+
+      - name: "Clone versions repo"
+        run: git clone https://${{ secrets.ASTRAL_VERSIONS_PAT }}@github.com/astral-sh/versions.git astral-versions
+
+      - name: "Install uv"
+        uses: astral-sh/setup-uv@803947b9bd8e9f986429fa0c5a41c367cd732b41 # v7.2.1
+
+      - name: "Update versions"
+        env:
+          PLAN: ${{ inputs.plan }}
+        run: printf '%s' "$PLAN" | uv run astral-versions/scripts/convert-cargo-dist-plan.py | uv run astral-versions/scripts/insert-versions.py --name ruff
+
+      - name: "Commit versions"
+        working-directory: astral-versions
+        run: |
+          git config user.name "astral-versions-bot"
+          git config user.email "176161322+astral-versions-bot@users.noreply.github.com"
+
+          git checkout -b "$BRANCH_NAME"
+          git add -A
+          git commit -m "Update ruff to version $VERSION"
+
+      - name: "Create Pull Request"
+        working-directory: astral-versions
+        env:
+          GITHUB_TOKEN: ${{ secrets.ASTRAL_VERSIONS_PAT }}
+        run: |
+          pull_request_title="Add ruff $VERSION"
+
+          gh pr list --state open --json title --jq ".[] | select(.title == \"$pull_request_title\") | .number" | \
+            xargs -I {} gh pr close {}
+
+          git push origin "$BRANCH_NAME"
+
+          gh pr create --base main --head "$BRANCH_NAME" \
+            --title "$pull_request_title" \
+            --body "Automated versions update for $VERSION" \
+            --label "automation"
+
+      - name: "Merge Pull Request"
+        if: ${{ !fromJson(inputs.plan).announcement_tag_is_implicit }}
+        working-directory: astral-versions
+        env:
+          GITHUB_TOKEN: ${{ secrets.ASTRAL_VERSIONS_PAT }}
+        run: |
+          # Wait for PR to be created before merging
+          sleep 10
+          gh pr merge --squash "$BRANCH_NAME"
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 9af67c5a180a16..1e4215aec011be 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -314,3 +314,12 @@ jobs:
     with:
       plan: ${{ needs.plan.outputs.val }}
     secrets: inherit
+
+  custom-publish-versions:
+    needs:
+      - plan
+      - announce
+    uses: ./.github/workflows/publish-versions.yml
+    with:
+      plan: ${{ needs.plan.outputs.val }}
+    secrets: inherit
diff --git a/dist-workspace.toml b/dist-workspace.toml
index 4a4792e78cd7f9..66d24b65097b57 100644
--- a/dist-workspace.toml
+++ b/dist-workspace.toml
@@ -54,7 +54,7 @@ local-artifacts-jobs = ["./build-binaries", "./build-docker", "./build-wasm"]
 # Publish jobs to run in CI
 publish-jobs = ["./publish-pypi", "./publish-wasm"]
 # Post-announce jobs to run in CI
-post-announce-jobs = ["./notify-dependents", "./publish-docs", "./publish-playground"]
+post-announce-jobs = ["./notify-dependents", "./publish-docs", "./publish-playground", "./publish-versions"]
 # Custom permissions for GitHub Jobs
 github-custom-job-permissions = { "build-docker" = { packages = "write", contents = "read" }, "publish-wasm" = { contents = "read", id-token = "write", packages = "write" } }
 # Whether to install an updater program