Build

Fix cache key hash collision: length-prefix extended cache key components #1991

	# Build verification for the msal Python package.
	#
	# This workflow runs on every PR (against any target branch) to give contributors
	# fast feedback that the package still builds and that the distribution metadata
	# passes `twine check`.
	#
	# Unit tests, E2E tests, benchmarks, SDL scans, and PyPI publishing are NOT run
	# here. Those run in the IDDP/ADO pipelines:
	# - azure-pipelines.yml (PRs + pushes: unit + E2E + benchmarks + SDL)
	# - .Pipelines/pipeline-publish.yml (manual release to TestPyPI / PyPI)

	name: Build

	on:
	pull_request:
	# No `branches` filter — run on PRs against any target branch.

	jobs:
	build:
	name: Build package (sdist + wheel)
	permissions:
	contents: read
	runs-on: ubuntu-22.04
	steps:
	- uses: actions/checkout@v4
	- name: Set up Python
	uses: actions/setup-python@v5
	with:
	python-version: '3.12'
	cache: 'pip'
	- name: Install build tooling
	run: \|
	python -m pip install --upgrade pip
	python -m pip install build twine
	- name: Build sdist and wheel
	run: python -m build --sdist --wheel --outdir dist/ .
	- name: Verify built artifacts
	# `twine check` catches broken long_description / metadata that would fail PyPI upload.
	run: twine check dist/*
	- name: Upload built artifacts
	uses: actions/upload-artifact@v4
	with:
	name: dist
	path: dist/
	retention-days: 7

Provide feedback