Update actions/checkout action to v4.2.2 (#642) #530
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Release | |
| on: | |
| push: | |
| branches: | |
| - main | |
| jobs: | |
| release: | |
| name: Release | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Harden Runner | |
| uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1 | |
| with: | |
| disable-sudo: true | |
| egress-policy: audit | |
| disable-telemetry: false | |
| - name: Check out the repository | |
| uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 | |
| with: | |
| fetch-depth: 2 | |
| - name: Set up Python | |
| uses: actions/setup-python@f677139bbe7f9c59b41e40162b753c062f5d49a3 # v5.2.0 | |
| with: | |
| python-version: "3.10" | |
| - name: Upgrade pip | |
| run: | | |
| pip install --constraint=.github/workflows/constraints.txt pip | |
| pip --version | |
| - name: Install Poetry | |
| run: | | |
| pip install --constraint=.github/workflows/constraints.txt poetry | |
| poetry --version | |
| - name: Check if there is a parent commit | |
| id: check-parent-commit | |
| run: | | |
| echo "sha=$(git rev-parse --verify --quiet HEAD^)" >> "$GITHUB_OUTPUT" | |
| # echo "::set-output name=sha::$(git rev-parse --verify --quiet HEAD^)" | |
| - name: Detect and tag new version | |
| id: check-version | |
| if: steps.check-parent-commit.outputs.sha | |
| uses: salsify/action-detect-and-tag-new-version@b1778166f13188a9d478e2d1198f993011ba9864 # v2.0.3 | |
| with: | |
| version-command: | | |
| bash -o pipefail -c "poetry version | awk '{ print \$2 }'" | |
| - name: Bump version for developmental release | |
| if: "! steps.check-version.outputs.tag" | |
| run: | | |
| poetry version patch && | |
| version=$(poetry version | awk '{ print "$2" }') && | |
| poetry version "$version".dev."$(date +%s)" | |
| - name: Build package | |
| run: | | |
| poetry build --ansi | |
| # - name: Publish package on PyPI | |
| # if: steps.check-version.outputs.tag | |
| # uses: pypa/gh-action-pypi-publish@717ba43cfbb0387f6ce311b169a825772f54d295 # v1.5.0 | |
| # with: | |
| # user: __token__ | |
| # password: ${{ secrets.PYPI_TOKEN }} | |
| # | |
| # - name: Publish package on TestPyPI | |
| # if: "! steps.check-version.outputs.tag" | |
| # uses: pypa/gh-action-pypi-publish@717ba43cfbb0387f6ce311b169a825772f54d295 # v1.5.0 | |
| # with: | |
| # user: __token__ | |
| # password: ${{ secrets.TEST_PYPI_TOKEN }} | |
| # repository_url: https://test.pypi.org/legacy/ | |
| # | |
| # - name: Publish the release notes | |
| # uses: release-drafter/release-drafter@ac463ffd9cc4c6ad5682af93dc3e3591c4657ee3 # v5.20.0 | |
| # with: | |
| # publish: ${{ steps.check-version.outputs.tag != '' }} | |
| # tag: ${{ steps.check-version.outputs.tag }} | |
| # env: | |
| # GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} |