Skip to content

Release

Release #2

Workflow file for this run

name: Release
on:
push:
tags:
- "v*"
workflow_dispatch:
inputs:
tag:
description: "Tag to release (e.g. v0.5.6). Reruns publish jobs for an existing release."
required: true
permissions:
contents: read
env:
TAG: ${{ github.event.inputs.tag || github.ref_name }}
jobs:
release:
runs-on: ubuntu-latest
permissions:
contents: write
packages: write
# Run for both tag push and workflow_dispatch
steps:
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
with:
fetch-depth: 0
ref: ${{ env.TAG }}
- uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6
with:
go-version-file: go.mod
- name: Set up Docker Buildx
uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4
- name: Login to GitHub Container Registry
uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4
with:
registry: ghcr.io
username: ${{ github.actor }}
password: ${{ secrets.GITHUB_TOKEN }}
- name: Run GoReleaser
uses: goreleaser/goreleaser-action@9a127d869fb706213d29cdf8eef3a4ea2b869415 # v7
with:
version: "~> v2"
args: release --clean
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
HOMEBREW_TAP_TOKEN: ${{ secrets.HOMEBREW_TAP_TOKEN }}
npm-publish:
runs-on: ubuntu-latest
permissions:
contents: read
id-token: write
needs: release
if: always() && (needs.release.result == 'success' || needs.release.result == 'skipped')
continue-on-error: true
environment: npm-publish
steps:
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
- uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6
with:
node-version: 24
registry-url: https://registry.npmjs.org
- name: Set version from tag
run: |
VERSION="${TAG#v}"
cd npm
npm version "$VERSION" --no-git-tag-version
- name: Publish to npm
run: npm publish --provenance --access public
working-directory: npm
pypi-publish:
runs-on: ubuntu-latest
permissions:
contents: read
id-token: write
needs: release
if: always() && (needs.release.result == 'success' || needs.release.result == 'skipped')
continue-on-error: true
environment: pypi-publish
steps:
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
- uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
with:
python-version: "3.12"
- name: Set version from tag
run: |
VERSION="${TAG#v}"
sed -i "s/^version = .*/version = \"$VERSION\"/" python/pyproject.toml
- name: Build package
run: |
pip install build==1.4.0
cd python && python -m build
- name: Publish to PyPI
uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e # v1.13.0
with:
packages-dir: python/dist/