mirror of
https://github.com/instaloader/instaloader.git
synced 2026-10-23 17:09:37 -07:00
Andreas FehlnerandAlexander Graf
1e58dddb1f
## What this changes This PR adds Dependabot configuration and hardens GitHub Actions checkout behavior. ## Dependabot - adds .github/dependabot.yml - enables grouped dependency updates - schedules updates monthly - configures a 7-day cooldown to avoid rapid follow-up bumps - includes GitHub Actions updates Configured update scopes: - pip in / - github-actions in / ## GitHub Actions hardening Sets persist-credentials: false for ctions/checkout@v4 in: - .github/workflows/windows_exe.yml - .github/workflows/packages.yml - .github/workflows/lint.yml - .github/workflows/documentation.yml ## Why - grouped updates reduce PR noise - monthly cadence is lower maintenance - cooldown helps avoid update churn - disabling persisted checkout credentials follows least-privilege CI practices --------- Co-authored-by: Alexander Graf <17130992+aandergr@users.noreply.github.com>
41 lines
1.1 KiB
YAML
41 lines
1.1 KiB
YAML
name: "Publish Packages"
|
|
|
|
on:
|
|
push:
|
|
tags:
|
|
- v*
|
|
|
|
jobs:
|
|
publish:
|
|
name: "Publish Package"
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: "Checkout Repository"
|
|
uses: actions/checkout@v7
|
|
with:
|
|
persist-credentials: false
|
|
- name: "Setup Python"
|
|
uses: actions/setup-python@v6
|
|
with:
|
|
python-version: 3.14
|
|
- name: "Get the tagged version"
|
|
id: get_version
|
|
env:
|
|
GITHUB_REF: ${{ github.ref }}
|
|
run: echo "VERSION=${GITHUB_REF/refs\/tags\/v/}" >> $GITHUB_OUTPUT
|
|
shell: bash
|
|
- name: "Install Dependencies"
|
|
run: python -m pip install -U setuptools wheel build
|
|
- name: "Generate Python Package"
|
|
run: python -m build
|
|
- name: "Publish Distribution to PyPI"
|
|
uses: pypa/gh-action-pypi-publish@release/v1
|
|
with:
|
|
password: ${{ secrets.PYPI_PASSWORD }}
|
|
- name: "Publish Distribution to AUR"
|
|
run: deploy/arch/deploy.sh $VERSION_TAG
|
|
env:
|
|
VERSION_TAG: v${{ steps.get_version.outputs.VERSION }}
|
|
AUR_KEY: ${{ secrets.AUR_KEY }}
|
|
AUR_IV: ${{ secrets.AUR_IV }}
|