ci: Update build workflow (#1118)

hoxbro · web-flow · commit 17d18b979d70 · 2026-03-26T10:13:25.000+01:00
diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
@@ -6,7 +6,6 @@ on:
       - "v[0-9]+.[0-9]+.[0-9]+a[0-9]+"
       - "v[0-9]+.[0-9]+.[0-9]+b[0-9]+"
       - "v[0-9]+.[0-9]+.[0-9]+rc[0-9]+"
-  # Dry-run only
   workflow_dispatch:
   schedule:
     - cron: "0 13 * * SUN"
@@ -16,8 +15,8 @@ defaults:
     shell: bash -e {0}
 
 env:
-  PYTHON_VERSION: "3.11"
   PACKAGE: "param"
+  PYTHON_VERSION: "3.10"
 
 jobs:
   waiting_room:
@@ -48,45 +47,35 @@ jobs:
           install: false
       - name: conda build
         run: pixi run -e build build-conda
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@v7
         if: always()
         with:
-          name: conda
-          path: dist/*.tar.bz2
+          name: artifacts-conda
+          path: dist/*.conda
           if-no-files-found: error
 
   conda_publish:
     name: Publish Conda
     runs-on: ubuntu-latest
     needs: [conda_build, waiting_room]
     if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags/')
-    defaults:
-      run:
-        shell: bash -el {0}
     steps:
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v8
         with:
-          name: conda
+          name: artifacts-conda
           path: dist/
-      - name: Set environment variables
+      - name: anaconda setup
         run: |
-          echo "TAG=${GITHUB_REF#refs/*/}" >> $GITHUB_ENV
-          echo "CONDA_FILE=$(ls dist/*.tar.bz2)" >> $GITHUB_ENV
-      - uses: conda-incubator/setup-miniconda@v3
-        with:
-          miniconda-version: "latest"
-          channel: "conda-forge"
-      - name: conda setup
-        run: |
-          conda install -y anaconda-client
-      - name: conda dev upload
-        if: contains(env.TAG, 'a') || contains(env.TAG, 'b') || contains(env.TAG, 'rc')
+          pipx install anaconda-client
+          binstar --version
+      - name: anaconda dev upload
+        if: contains(github.ref_name, 'a') || contains(github.ref_name, 'b') || contains(github.ref_name, 'rc')
         run: |
-          anaconda --token ${{ secrets.CONDA_UPLOAD_TOKEN }} upload --user pyviz --label=dev $CONDA_FILE
-      - name: conda main upload
-        if: (!(contains(env.TAG, 'a') || contains(env.TAG, 'b') || contains(env.TAG, 'rc')))
+          binstar --token ${{ secrets.CONDA_UPLOAD_TOKEN }} upload --user pyviz --label=dev dist/*.conda
+      - name: anaconda upload
+        if: (!(contains(github.ref_name, 'a') || contains(github.ref_name, 'b') || contains(github.ref_name, 'rc')))
         run: |
-          anaconda --token ${{ secrets.CONDA_UPLOAD_TOKEN }} upload --user pyviz --label=dev --label=main $CONDA_FILE
+          binstar --token ${{ secrets.CONDA_UPLOAD_TOKEN }} upload --user pyviz --label=dev --label=main dist/*.conda
 
   pip_build:
     name: Build PyPI
@@ -100,10 +89,10 @@ jobs:
           install: false
       - name: Build package
         run: pixi run -e build build-pip
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@v7
         if: always()
         with:
-          name: pip
+          name: artifacts-pip
           path: dist/
           if-no-files-found: error
 
@@ -112,12 +101,12 @@ jobs:
     runs-on: "ubuntu-latest"
     needs: [pip_build]
     steps:
-      - uses: actions/setup-python@v5
+      - uses: actions/setup-python@v6
         with:
           python-version: ${{ env.PYTHON_VERSION }}
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v8
         with:
-          name: pip
+          name: artifacts-pip
           path: dist/
       - name: Install package
         run: python -m pip install dist/*.whl
@@ -129,14 +118,46 @@ jobs:
     runs-on: ubuntu-latest
     needs: [pip_build, waiting_room]
     if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags/')
+    permissions:
+      id-token: write
     steps:
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v8
         with:
-          name: pip
+          name: artifacts-pip
           path: dist/
       - name: Publish to PyPI
         uses: pypa/gh-action-pypi-publish@release/v1
+
+  announce:
+    name: Announce GitHub
+    runs-on: ubuntu-latest
+    needs: [waiting_room]
+    permissions:
+      contents: write
+    if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags/')
+    env:
+      TAG: ${{ github.ref_name }}
+    steps:
+      - uses: actions/checkout@v6
+      - uses: actions/download-artifact@v8
         with:
-          user: ${{ secrets.PPU }}
-          password: ${{ secrets.PPP }}
-          repository-url: "https://upload.pypi.org/legacy/"
+          pattern: artifacts-*
+          path: artifacts/
+          merge-multiple: true
+      - name: Extract changelog section
+        run: |
+          awk -v ver="## Version ${TAG#v}" '
+            $0 == ver {flag=1; next}
+            /^## Version / && flag {exit}
+            flag && !/^(\*\*.*\*\*)$/ && !/^Date:/
+          ' doc/releases.md | tee RELEASE_BODY.md
+      - name: Create draft GitHub release with dist artifacts
+        if: (!(contains(github.ref_name, 'a') || contains(github.ref_name, 'b') || contains(github.ref_name, 'rc')))
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          gh release create "$TAG" \
+            --title "Version ${TAG#v}" \
+            --notes-file RELEASE_BODY.md \
+            --draft \
+            artifacts/*
diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml
@@ -112,7 +112,7 @@ jobs:
       - name: Test Examples
         run: |
           pixi run -e ${{ matrix.environment }} test-example
-      - uses: codecov/codecov-action@v4
+      - uses: codecov/codecov-action@v5
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
 
@@ -145,16 +145,16 @@ jobs:
         python-version: ["pypy3.11"]
     timeout-minutes: 30
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           fetch-depth: "100"
       - name: Fetch
         run: git fetch --prune --tags -f
-      - uses: actions/setup-python@v5
+      - uses: actions/setup-python@v6
         with:
           python-version: ${{ matrix.python-version }}
       - name: Install the latest version of uv
-        uses: astral-sh/setup-uv@v5
+        uses: astral-sh/setup-uv@v7
       - name: Create virtual environment
         run: uv venv --python ${{ matrix.python-version }}
       - name: Install project dependencies
diff --git a/scripts/conda/build.sh b/scripts/conda/build.sh
@@ -9,6 +9,6 @@ python -m build --sdist .
 VERSION=$(python -c "import $PACKAGE; print($PACKAGE._version.__version__)")
 export VERSION
 
-conda build scripts/conda/recipe --no-anaconda-upload --no-verify -c conda-forge --package-format 1
+conda build scripts/conda/recipe --no-anaconda-upload --no-verify -c conda-forge --package-format 2
 
-mv "$CONDA_PREFIX/conda-bld/noarch/$PACKAGE-$VERSION-py_0.tar.bz2" dist
+mv "$CONDA_PREFIX/conda-bld/noarch/$PACKAGE-$VERSION-py_0.conda" dist
