Skip to content

Conversation

@kanterov
Copy link
Collaborator

@kanterov kanterov commented Apr 9, 2025

Changes

Add release workflow to publish databricks-bundles PyPi package

Should be merged after #2676

Why

It publishes PyPi package that is co-versioned with CLI

@kanterov kanterov temporarily deployed to test-trigger-is April 9, 2025 13:53 — with GitHub Actions Inactive
@kanterov kanterov marked this pull request as ready for review April 9, 2025 15:32
Copy link
Contributor

@shreyas-goenka shreyas-goenka left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm, just one question


needs: goreleaser

environment: release
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Why does this need access to the release environment token?

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It's specified in trusted publishing settings in PyPi package deployment settings to avoid cases when package gets accidentially published

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please add a comment to document this assertion.

Since the workflow doesn't use secrets, someone may remove this if they don't know about the assertion made by PyPI for OIDC purposes.

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Clarified in comments

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can you include that this is part of the OIDC assertion in PyPI?

Docs: https://docs.pypi.org/trusted-publishers/creating-a-project-through-oidc/

Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@pietern fixed, please take a look

@kanterov kanterov temporarily deployed to test-trigger-is April 15, 2025 14:55 — with GitHub Actions Inactive
@kanterov kanterov temporarily deployed to test-trigger-is April 15, 2025 15:15 — with GitHub Actions Inactive
@kanterov kanterov enabled auto-merge April 15, 2025 15:17
@kanterov kanterov added this pull request to the merge queue Apr 15, 2025
Merged via the queue into main with commit 7cfc682 Apr 15, 2025
9 checks passed
@kanterov kanterov deleted the add-pypi-release-workflow branch April 15, 2025 15:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants