uvbox/.goreleaser.yaml at main · AmadeusITGroup/uvbox · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
project_name: uvbox
version: 2
report_sizes: true

before:
  hooks:
    # Clean folders. Goreleaser only clean the dist/ folder
    - rm -rf build wheels
    # Ensure the embedded box repository archive is generated before building
    - bash -lc "cd boxer && go generate"

builds:
  - id: uvbox
    dir: ./boxer
    main: .
    binary: uvbox
    env:
      - CGO_ENABLED=0
    goos:
      - linux
      - darwin
      - windows
    goarch:
      - amd64
      - arm64
    hooks:
      post:
        - cmd: python3 pypi/uvbox/build_wheels.py "{{ .Os }}" "{{ .Arch }}" "{{ .Version }}" "{{ .Path }}" --binary-name "{{ .Name }}"
          output: true

archives:
  - id: default
    ids:
      - uvbox
    name_template: "{{ .Binary }}_{{ .Version }}_{{ .Os }}_{{ .Arch }}"
    format_overrides:
      - goos: windows
        formats: zip

checksum:
  name_template: "checksums.txt"

nfpms:
  - id: uvbox
    package_name: uvbox
    ids:
      - uvbox
    formats: [apk, archlinux, deb, ipk, rpm]
    vendor: "Amadeus"
    maintainer: "Jean-Philippe CARLENS <jcarlens@pm.me>"
    homepage: "https://github.com/AmadeusITGroup/uvbox"
    description: |
      uvbox generates standalone Python executables that bootstrap an embedded
      uv to install and run your app in an isolated environment. For any platform, from any platform.
    license: MIT
    provides:
      - uvbox
    priority: extra
    section: utils

sboms:
  - id: archive
    artifacts: archive
    documents:
      - "{{ .ArtifactName }}.cdx.json"
    cmd: python3
    args: ["../pypi/uvbox/sbom.py", "--os", "{{ .Os }}", "--arch", "{{ .Arch }}", "--output", "$document"]
    # Re-export env vars needed by mise shims (python3, cyclonedx-gomod).
    # Goreleaser's SBOM cataloger runs in dist/ and does not reliably propagate
    # the parent environment, so mise fails its trust check on mise.toml.
    env:
      - "MISE_TRUSTED_CONFIG_PATHS={{ .Env.MISE_TRUSTED_CONFIG_PATHS }}"

release:
  # Use GitHub Releases (default)
  draft: false
  prerelease: auto
  header: |
    ## Installation

    **Recommended:** Install uvbox from [PyPI](https://pypi.org/project/uvbox):

    ```bash
    # With uv
    uv add --dev uvbox

    # With pip
    pip install uvbox
    ```

    Installing from PyPI automatically includes **Go** and **nfpm** as dependencies, so you don't need to install them separately.

    Alternatively, you can download the pre-built binaries below for your platform.

changelog:
  use: github
  sort: desc
  filters:
    exclude:
      - '^docs:'
      - '^test:'