Release #395
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Release | |
| on: | |
| workflow_run: | |
| types: [completed] | |
| workflows: [CI] | |
| branches: | |
| - main | |
| - v* | |
| permissions: | |
| contents: read | |
| jobs: | |
| validate: | |
| name: Validate ref | |
| if: github.event.workflow_run.event == 'push' && github.event.workflow_run.conclusion == 'success' && !github.event.repository.fork | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v4 | |
| with: | |
| fetch-depth: 0 | |
| # The given ref should belong to the main branch. | |
| # If it's main, it shouldn't be more than 2 commits away (in case another push happened in the meantime). | |
| # If it starts with 'v', it should be a tag and belong to the main branch. | |
| # Anything else is invalid. | |
| - name: Validate ref | |
| run: | | |
| ref='${{ github.event.workflow_run.head_branch }}' | |
| sha='${{ github.event.workflow_run.head_sha }}' | |
| case $ref in | |
| main) | |
| [ $(git branch --contains=$sha main | wc -l) -eq 1 ] && | |
| [ $(git rev-list --count $sha..main) -le 2 ] | |
| ;; | |
| v?*) | |
| [[ $ref =~ ^v[0-9]+\.[0-9]+\.[0-9]+$ ]] && | |
| [ $(git tag --points-at $sha | grep -E "^$ref\$" | wc -l) -eq 1 ] && | |
| [ $(git branch --contains=$sha main | wc -l) -eq 1 ] | |
| ;; | |
| *) | |
| false | |
| ;; | |
| esac | |
| if [ $? -ne 0 ]; then | |
| echo "::error ::Invalid ref $ref $sha" | |
| exit 1 | |
| fi | |
| pypi-publish: | |
| name: upload release to PyPI | |
| needs: validate | |
| if: github.event.workflow_run.head_branch != 'main' | |
| runs-on: ubuntu-latest | |
| environment: release | |
| permissions: | |
| id-token: write | |
| steps: | |
| - name: Download artifact | |
| run: gh run download ${{ github.event.workflow_run.id }} --repo ${{ github.event.workflow_run.repository.full_name }} --name fasttrackml-wheels --dir wheelhouse | |
| env: | |
| GH_TOKEN: ${{ github.token }} | |
| - name: Publish package distributions to PyPI | |
| uses: pypa/gh-action-pypi-publish@release/v1 | |
| with: | |
| packages-dir: wheelhouse/ | |
| github-release: | |
| name: Publish GitHub release | |
| needs: validate | |
| if: github.event.workflow_run.head_branch != 'main' | |
| runs-on: ubuntu-latest | |
| permissions: | |
| contents: write | |
| steps: | |
| - name: Download artifact | |
| run: gh run download ${{ github.event.workflow_run.id }} --repo ${{ github.event.workflow_run.repository.full_name }} --name fasttrackml-archives --dir dist | |
| env: | |
| GH_TOKEN: ${{ github.token }} | |
| - name: Create release | |
| uses: softprops/action-gh-release@v1 | |
| with: | |
| generate_release_notes: true | |
| files: dist/* | |
| tag_name: ${{ github.event.workflow_run.head_branch }} | |
| update-website: | |
| name: Update website | |
| needs: github-release | |
| permissions: | |
| contents: read | |
| pages: write | |
| id-token: write | |
| uses: ./.github/workflows/website.yml | |
| docker-release: | |
| name: Publish container image to DockerHub | |
| needs: validate | |
| runs-on: ubuntu-latest | |
| environment: release | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v4 | |
| with: | |
| fetch-depth: 0 | |
| - name: Compute tags | |
| id: tags | |
| run: | | |
| ref='${{ github.event.workflow_run.head_branch }}' | |
| case $ref in | |
| main) | |
| tags=("main" "edge") | |
| ;; | |
| v*) | |
| tags=("${ref#v}") | |
| if [ $(git describe --tags --abbrev=0) == $ref ]; then | |
| tags+=("latest") | |
| fi | |
| esac | |
| echo "tags=${tags[@]}" >> $GITHUB_OUTPUT | |
| - name: Download artifact | |
| run: gh run download ${{ github.event.workflow_run.id }} --name fasttrackml-oci-image | |
| env: | |
| GH_TOKEN: ${{ github.token }} | |
| - name: Login to Docker Hub | |
| uses: docker/login-action@v3 | |
| with: | |
| username: ${{ secrets.DOCKER_USERNAME }} | |
| password: ${{ secrets.DOCKER_PASSWORD }} | |
| - name: Push to Docker Hub | |
| run: | | |
| for tag in ${{ steps.tags.outputs.tags }} | |
| do | |
| echo "::group::Pushing image to ${{ vars.DOCKER_REPO }}:$tag" | |
| skopeo copy --all oci-archive:fasttrackml-oci.tar:${{ github.event.workflow_run.head_branch }} docker://${{ vars.DOCKER_REPO }}:$tag | |
| echo "::endgroup::" | |
| done |