v2.1.2

gh-action-pypi-publish doesn't work with composite actions anymore, so pin it to v1.11.0 for now.

What's Changed

• DM-47489: Pin gh-action-pypi-publish to v1.11.0 by @fajpunk in #8

New Contributors

• @fajpunk made their first contribution in #8

Full Changelog: v2.1.1...v2.1.2

v2.1.1

What's Changed

• Bump actions/setup-python from 4 to 5 by @dependabot in #7

Full Changelog: v2.1.0...v2.1.1

v2.1.0

What's Changed

• Bump actions/checkout from 3 to 4 by @dependabot in #6

New Contributors

• @dependabot made their first contribution in #6

Full Changelog: v2...v2.1.0

v2.0.0

This release adopts PyPI's trusted publisher program. The pypi-token input for the action is removed entirely.

Upgrade process

Setting up a package's trusted publishing process requires three steps: registering the trusted publisher on PyPI, creating the deployment environment in your GitHub repository's settings, and finally updating to this new lsst-sqre/build-and-publish-to-pypi@v2 action (dropping the pypi-token input).

See this action's README for details.

What's Changed

• DM-39837: Adopt PyPI's trusted publisher program (for v2) by @jonathansick in #5

Full Changelog: v1...v2.0.0

v1.2.0

This release adds a working-directory input to set the root directory of the Python package that's being built and published. This setting is useful for monorepos. The default is the root directory, which is the existing behaviour.

What's Changed

• DM-39050: Add working-directory input by @jonathansick in #4

Full Changelog: v1...v1.2.0

v1.1.0

The new upload input for the action defaults to true, but can be toggled to false to disable uploads to PyPI. When upload is false, the action runs an additional step with twine check to validate the distributions. Hence this action can be used pull request workflows to ensure that the package builds and has valid metadata.

An example of uploading to PyPI only for tag pushes:

name: Python CI

"on":
  push:
    tags:
      - "*"
  pull_request: {}

jobs:

  pypi:

    runs-on: ubuntu-latest

    steps:
      - uses: actions/checkout@v3
        with:
          fetch-depth: 0 # full history for setuptools_scm

      - name: Build and publish
        uses: lsst-sqre/build-and-publish-to-pypi@v1
        with:
          pypi-token: ${{ secrets.PYPI_SQRE_ADMIN }}
          python-version: "3.10"
          upload: ${{ github.event_name == 'push' && startsWith(github.ref, 'refs/tags/') }}

What's Changed

• DM-35590: Add a dry-run mode with twine check by @jonathansick in #3

Full Changelog: v1.0.1...v1.1.0

v1.0.1

That patches an error in the initial release where the run action for updating pip dependencies was missing a required shell parameter field.

What's Changed

• DM-35548: Shell parameter is needed for a run action by @jonathansick in #2

Full Changelog: v1...v1.0.1

v1.0.0

This is the first release of lsst-sqre/build-and-publish-to-pypi and our team's first composite action. 🎉

What's Changed

• DM-35455: Create a composite action for building and publishing to PyPI by @jonathansick in #1

New Contributors

• @jonathansick made their first contribution in #1

Full Changelog: https://github.com/lsst-sqre/build-and-publish-to-pypi/commits/v1.0.0