Skip to content

Re-enable pypi publishing from releases #4484

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
pdgendt opened this issue Mar 12, 2025 · 4 comments
Open

Re-enable pypi publishing from releases #4484

pdgendt opened this issue Mar 12, 2025 · 4 comments

Comments

@pdgendt
Copy link
Contributor

pdgendt commented Mar 12, 2025

Is your feature request related to a problem? Please describe.
Currently CodeChecker pypi versions are behind on released versions, because of a disabled workflow step. See:

# FIXME: This was disabled because it was not working. We have to make sure
# that the token is appropriate. This automatic publishing is also dangerous,
# because there is no way to recover a broken release if PyPI is tainted
# (the filename will be forever locked and reserved even if we nuke a release)

Describe the solution you would like
Enable Pypi trusted publishing to re-enable the Github Workflow for easier publishing.
This can be combined with Github Environments, so a manual action (clicking a button/CI testing/...) is still required before the actual publishing is done.
For an example, see the release workflow for west from the Zephyr project.

Describe alternatives you have considered
Leave it up to the maintainers to do manual publishing, but this is error prone and requires additional effort.

Additional context
N/A

@lengye7
Copy link

lengye7 commented Mar 12, 2025

Yes,I also want pypi package.

@pdgendt
Copy link
Contributor Author

pdgendt commented Mar 20, 2025

Hi, any feedback on this?

@amai2012
Copy link

pypi now features 6.25.1

@pdgendt
Copy link
Contributor Author

pdgendt commented Mar 26, 2025

pypi now features 6.25.1

Sure, but that isn't what this issue is about, but rather updating workflows to automate things.
I think it would help the project to make it easier to publish to pypi from Github actions.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants