fix: ensure wheel and source distributions are uploaded to GitHub releases#95
Closed
fix: ensure wheel and source distributions are uploaded to GitHub releases#95
Conversation
- Add [tool.semantic_release.publish] dist = false to prevent PyPI publishing - Preserve upload_to_vcs_release = true for GitHub releases - Maintain all branch configuration (main, release, feature) - Keep commit parser options and changelog settings - Fixes 401 Unauthorized errors from semantic-release trying to publish to PyPI without OIDC
…-publishing fix: disable PyPI publishing in semantic-release configuration
- Add dist_glob_patterns to semantic-release configuration to upload dist/* and checksums.txt - Add version_toml configuration to let semantic-release handle pyproject.toml updates - Modify build script to generate SHA256 checksums for all distribution files - Simplify build target to remove complex version logic - semantic-release handles versioning - Keep valuable build functionality: cleanup, dependency management, checksum generation - Enables users to download wheels directly from GitHub releases with integrity verification Files attached to releases: - *.whl (Python wheel) - *.tar.gz (Source distribution) - checksums.txt (SHA256 checksums for verification)
- Use 'make build' instead of 'python -m build' to get checksums and enhanced build features - Enable PyPI publishing with 'dist = true' - Add dist_glob_patterns to upload wheels and checksums to GitHub releases Workflow: version → build → tag → GitHub release → attach files → PyPI publish
feat: add Python wheels and checksums to GitHub releases
- Add actions, issues, and metadata read permissions - Fixes 401 Unauthorized error when creating GitHub releases - Semantic-release needs these permissions to create releases and upload assets
- Add explicit ref checkout and force reset to workflow SHA - This prevents GITHUB_TOKEN 401 errors when semantic-release tries to create releases for non-HEAD commits - GITHUB_TOKEN can only create releases/tags for the current HEAD commit due to GitHub API limitations - Based on GitHub community findings: https://github.com/orgs/community/discussions/121022
…eases Make dist_glob_patterns more specific to match .whl and .tar.gz files. This ensures built packages are properly attached to GitHub releases.
fgogolli
force-pushed
the
fix/semantic-release-wheel-uploads
branch
from
88c0c00 to
c9420ef
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Description
Semantic-release creates GitHub releases but doesn't attach the built wheel and source distribution files. This change makes the dist_glob_patterns more specific to ensure proper asset uploads.
Type of Change
Related Issues
Fixes missing wheel and source distribution attachments in GitHub releases
How Has This Been Tested?
Current semantic-release configuration creates releases but doesn't attach build artifacts. This change makes the glob patterns more specific to match actual build outputs.
Test Configuration
Checklist
Additional Notes
This change ensures semantic-release properly attaches built wheel (.whl) and source distribution (.tar.gz) files to GitHub releases.
Performance Impact
Security Considerations
Dependencies
No dependency changes
Deployment Notes
After merge, semantic-release should create GitHub releases with wheel and source distribution files attached.