Bump protobuf from 5.29.3 to 5.29.5 (#126) #370
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Test, build, and release | |
| on: | |
| push: | |
| branches: | |
| - main | |
| pull_request: | |
| branches: | |
| - main | |
| merge_group: | |
| jobs: | |
| test: | |
| runs-on: ubuntu-latest | |
| strategy: | |
| matrix: | |
| python-version: ["3.11", "3.12"] | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Set up Python ${{ matrix.python-version }} | |
| uses: actions/setup-python@v5 | |
| with: | |
| python-version: ${{ matrix.python-version }} | |
| - name: Install dependencies | |
| run: | | |
| python -m venv venv | |
| venv/bin/pip install -r requirements.txt | |
| venv/bin/pip install -e . --no-deps | |
| - name: Verify requirements.txt | |
| if: ${{ matrix.python-version == '3.11' }} | |
| run: | | |
| venv/bin/pip-compile --quiet --allow-unsafe --generate-hashes --strip-extras | |
| git diff --exit-code -- requirements.txt | |
| - name: Run lint check | |
| if: ${{ matrix.python-version == '3.11' }} | |
| run: | | |
| PATH="venv/bin:$PATH" bin/lint.sh | |
| - name: Run tests | |
| env: | |
| SENTRY_DSN: http://public@localhost:8090/1 | |
| STORAGE_EMULATOR_HOST: http://localhost:8001 | |
| PUBSUB_EMULATOR_HOST: localhost:5010 | |
| run: | | |
| docker compose up -d fakesentry gcs-emulator pubsub | |
| # Run outside docker because we are testing the matrix python version | |
| PATH="venv/bin:$PATH" bin/test.sh | |
| # stop services immediate and ignore errors | |
| docker compose down -t0 || true | |
| build-and-release: | |
| permissions: | |
| contents: write | |
| id-token: write | |
| if: ${{ github.ref == 'refs/heads/main' }} | |
| needs: test | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Fetch tags | |
| run: git fetch --tags origin | |
| - name: Set up Python | |
| uses: actions/setup-python@v5 | |
| with: | |
| python-version: 3.11 | |
| - name: Install dependencies | |
| run: | | |
| python -m venv venv | |
| venv/bin/pip install -r requirements.txt | |
| - name: Generate release tag | |
| run: echo RELEASE_TAG="$(venv/bin/python -c 'import obs_common.release; print(obs_common.release.generate_tag())')" >> "$GITHUB_ENV" | |
| - name: Overrride wheel version | |
| run: | | |
| # Convert version number to PEP 440-conformant version that's treated correctly | |
| # by Dependabot, see https://mozilla-hub.atlassian.net/browse/CRINGE-24. | |
| VERSION="${RELEASE_TAG#v}" | |
| MAIN_VERSION="${VERSION%-*}" | |
| case "$VERSION" in | |
| *-*) SUBVERSION=".${VERSION##*-}";; | |
| *) SUBVERSION="";; | |
| esac | |
| echo SETUPTOOLS_SCM_PRETEND_VERSION_FOR_OBS_COMMON="$MAIN_VERSION$SUBVERSION" >> "$GITHUB_ENV" | |
| - name: Build python wheel | |
| run: venv/bin/python -m build | |
| - name: Build docker images for publishing | |
| run: docker compose build fakesentry gcs-emulator | |
| - uses: google-github-actions/auth@v2 | |
| with: | |
| workload_identity_provider: ${{ vars.GCPV2_GITHUB_WORKLOAD_IDENTITY_PROVIDER }} | |
| service_account: artifact-writer@${{ secrets.GCP_PROJECT_ID }}.iam.gserviceaccount.com | |
| - name: Push fakesentry Docker image to GAR | |
| uses: mozilla-it/deploy-actions/[email protected] | |
| with: | |
| local_image: local/obs-common-fakesentry:latest | |
| image_repo_path: ${{ secrets.GCP_PROJECT_ID }}/cavendish-prod/fakesentry | |
| image_tag: ${{ env.RELEASE_TAG }} | |
| workload_identity_pool_project_number: ${{ vars.GCPV2_WORKLOAD_IDENTITY_POOL_PROJECT_NUMBER }} | |
| project_id: ${{ secrets.GCP_PROJECT_ID }} | |
| - name: Push gcs-emulator Docker image to GAR | |
| uses: mozilla-it/deploy-actions/[email protected] | |
| with: | |
| local_image: local/obs-common-gcs-emulator:latest | |
| image_repo_path: ${{ secrets.GCP_PROJECT_ID }}/cavendish-prod/gcs-emulator | |
| image_tag: ${{ env.RELEASE_TAG }} | |
| workload_identity_pool_project_number: ${{ vars.GCPV2_WORKLOAD_IDENTITY_POOL_PROJECT_NUMBER }} | |
| project_id: ${{ secrets.GCP_PROJECT_ID }} | |
| - name: Publish python package | |
| run: | |
| venv/bin/twine upload --verbose --repository-url https://us-python.pkg.dev/${{ secrets.GCP_PROJECT_ID }}/cavendish-prod-python/ dist/*.whl | |
| - name: Publish release | |
| env: | |
| GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| run: gh release create "$RELEASE_TAG" --repo="$GITHUB_REPOSITORY" --generate-notes dist/*.whl |