mirror of
https://github.com/openai/codex.git
synced 2026-10-25 18:28:38 +00:00
Adam Perry @ OpenAI
8eaf5fd115
## What changed Update `astral-sh/setup-uv` to `v10.3.2` and pin `uv` to `0.13.5` across the affected build, test, and release workflows. Refresh the checksum used for DotSlash publishing. Install `uv` in the Python SDK wheel test from a hash-pinned requirements file, requiring a binary distribution and hash verification. GitOrigin-RevId: 05295f6468f4897ca08672ccf9dc4e9b7d717fa8
53 lines
1.9 KiB
YAML
53 lines
1.9 KiB
YAML
name: Publish DotSlash manifests
|
|
description: Run the pinned upstream publisher directly on an Ubuntu runner.
|
|
|
|
inputs:
|
|
tag:
|
|
description: Release tag to publish manifests for.
|
|
required: true
|
|
configs:
|
|
description: Newline-separated paths to DotSlash configuration files.
|
|
required: true
|
|
|
|
runs:
|
|
using: composite
|
|
steps:
|
|
- name: Checkout DotSlash publisher
|
|
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
|
|
with:
|
|
repository: facebook/dotslash-publish-release
|
|
ref: 9c9ec027515c34db9282a09a25a9cab5880b2c52 # v2
|
|
path: .dotslash-publish-release
|
|
persist-credentials: false
|
|
|
|
- name: Install uv
|
|
uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e # v10.3.2
|
|
with:
|
|
version: "0.13.5"
|
|
checksum: "f68d291c75783122dad58ab77def0e13f3233f358731db5d6d7e8715603b928f"
|
|
github-token: ""
|
|
enable-cache: false
|
|
|
|
- name: Publish DotSlash manifests
|
|
shell: bash
|
|
env:
|
|
ACTION_PATH: ${{ github.action_path }}
|
|
RELEASE_TAG: ${{ inputs.tag }}
|
|
DOTSLASH_CONFIGS: ${{ inputs.configs }}
|
|
run: |
|
|
set -euo pipefail
|
|
|
|
# Ubuntu runners already provide Python and gh. Avoid rebuilding the
|
|
# upstream Docker image and downloading its apt dependencies per release.
|
|
uv venv --python "$(command -v python3)" "${RUNNER_TEMP}/dotslash-publish-release-venv"
|
|
python="${RUNNER_TEMP}/dotslash-publish-release-venv/bin/python"
|
|
uv pip install --python "$python" \
|
|
--require-hashes --only-binary=:all: -r "${ACTION_PATH}/requirements.txt"
|
|
|
|
while IFS= read -r config; do
|
|
if [[ -n "$config" ]]; then
|
|
"$python" .dotslash-publish-release/process_config.py \
|
|
--config "$config" --tag "$RELEASE_TAG" --upload
|
|
fi
|
|
done <<< "$DOTSLASH_CONFIGS"
|