Merge pull request #4 from aserto-dev/fix_bump_version #14
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: ci | |
| on: | |
| # Allows you to run this workflow manually from the Actions tab | |
| workflow_dispatch: | |
| push: | |
| branches: | |
| - main | |
| - v* | |
| # Publish `v1.2.3` tags as releases. | |
| tags: | |
| - v* | |
| # Run tests for PRs | |
| pull_request: | |
| env: | |
| VAULT_ADDR: https://vault.eng.aserto.com/ | |
| jobs: | |
| test: | |
| name: Run test | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Read Configuration | |
| uses: hashicorp/[email protected] | |
| id: vault | |
| with: | |
| url: ${{ env.VAULT_ADDR }} | |
| token: ${{ secrets.VAULT_TOKEN }} | |
| secrets: | | |
| kv/data/github "SSH_PRIVATE_KEY" | SSH_PRIVATE_KEY; | |
| - name: Setup git | |
| run: | | |
| mkdir -p $HOME/.ssh | |
| umask 0077 && echo -e "${SSH_PRIVATE_KEY}" > $HOME/.ssh/id_rsa | |
| ssh-keyscan github.com >> $HOME/.ssh/known_hosts | |
| git config --global url."[email protected]:".insteadOf https://github.com/ | |
| - name: Checkout Repo | |
| uses: actions/checkout@v2 | |
| - name: Set up Homebrew | |
| uses: Homebrew/actions/setup-homebrew@master | |
| - name: Install topaz | |
| run: brew tap aserto-dev/tap && brew install aserto-dev/tap/topaz && topaz install | |
| - name: Use python 3.9 | |
| uses: actions/setup-python@v4 | |
| with: | |
| python-version: '3.9' | |
| - name: Install and configure Poetry | |
| uses: snok/install-poetry@v1 | |
| with: | |
| version: 1.2.1 | |
| - name: Run lint | |
| run: | | |
| poetry install | |
| poetry run pyright . | |
| - name: Run tests | |
| run: | | |
| poetry run pytest -vv | |
| release: | |
| runs-on: ubuntu-latest | |
| needs: test | |
| if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags/v') | |
| name: Release to pypi | |
| steps: | |
| - name: Read Configuration | |
| uses: hashicorp/[email protected] | |
| id: vault | |
| with: | |
| url: ${{ env.VAULT_ADDR }} | |
| token: ${{ secrets.VAULT_TOKEN }} | |
| secrets: | | |
| kv/data/github "SSH_PRIVATE_KEY" | SSH_PRIVATE_KEY; | |
| kv/data/pypi "API_TOKEN" | POETRY_HTTP_BASIC_PYPI_PASSWORD; | |
| - name: Checkout | |
| uses: actions/checkout@v3 | |
| with: | |
| fetch-depth: 0 | |
| - name: Setup Go | |
| uses: actions/setup-go@v2 | |
| with: | |
| go-version: ${{ env.GO_VERSION }} | |
| - name: Setup caching | |
| uses: actions/cache@v2 | |
| with: | |
| path: | | |
| ~/.cache/go-build | |
| ~/go/pkg/mod | |
| .ext | |
| key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum', 'Depfile') }} | |
| restore-keys: | | |
| ${{ runner.os }}-go- | |
| - name: Install dependencies | |
| run: | | |
| mkdir -p $HOME/.ssh | |
| umask 0077 && echo -e "${SSH_PRIVATE_KEY}" > $HOME/.ssh/id_rsa | |
| ssh-keyscan github.com >> $HOME/.ssh/known_hosts | |
| git config --global url."[email protected]:".insteadOf https://github.com/ | |
| git config --global user.email "[email protected]" | |
| git config --global user.name "Aserto Bot" | |
| eval `ssh-agent` | |
| ssh-add $HOME/.ssh/id_rsa | |
| go run mage.go deps | |
| - name: Set up Python | |
| uses: actions/setup-python@v4 | |
| with: | |
| python-version: '3.10' | |
| - name: Install Poetry | |
| uses: snok/install-poetry@v1 | |
| - name: Build and push the python package | |
| env: | |
| # When using a PYPI API token, the user name must be set to "__token__" | |
| POETRY_HTTP_BASIC_PYPI_USERNAME: __token__ | |
| run: go run mage.go release | |
| - name: Bump to the next version | |
| run: go run mage.go bump patch | |
| - name: Commit changes | |
| uses: EndBug/add-and-commit@v9 | |
| with: | |
| default_author: github_actions | |
| message: 'Bump to next version' | |
| add: 'pyproject.toml' | |
| push: origin HEAD:main |