Skip to content

Commit f200996

Browse files
authored
[no-ci] CI: harden pip in release.yml and retire release-cuda-pathfinder.yml (#3201)
CI: harden pip in release.yml and retire release-cuda-pathfinder.yml Harden the Pathfinder verify-testpypi and verify-pypi jobs: split the venv creation from the install step and run harden-pip against the venv before the first pip network call (CodeRabbit, #3197). Release-cuda-pathfinder.yml has been superseded by release.yml since #3046. The migration is complete: release.yml is the trusted publisher for both PyPI and TestPyPI, and all cuda-pathfinder-v* tags have published releases. Delete the workflow and remove the transition notes. After merge, the trusted-publisher registration for release-cuda-pathfinder.yml on PyPI and TestPyPI can be deleted. Refs #3195, #3197
1 parent 8f7a9eb commit f200996

4 files changed

Lines changed: 13 additions & 400 deletions

File tree

‎.github/RELEASE-core.md‎

Lines changed: 0 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -26,22 +26,12 @@ of `ci/tools/check_release_notes.py` that writes `version=<VERSION>` to
2626
`GITHUB_OUTPUT`. The release-notes job rejects an empty version before
2727
documentation, asset uploads, or package publication can start. Pathfinder
2828
package publication also requires successful draft metadata preparation.
29-
Use the retained legacy Pathfinder workflow for older tags without version
30-
output support during the transition; do not move existing tags to add the
31-
updated checker.
3229

3330
The default `dry-run` action validates preparation, builds docs, and
3431
collects release artifacts without creating a GitHub Release or publishing
3532
packages. It can be dispatched from a development branch; use
3633
`dry-run-docs-branch` only when a preview deployment is needed.
3734

38-
Before the first Pathfinder release through this workflow, its trusted
39-
publishers on **both PyPI and TestPyPI** must authorize `release.yml`.
40-
Until that migration is complete, `release-cuda-pathfinder.yml` remains
41-
available. Keep its existing publisher
42-
registrations during the transition; retire the old workflow and its
43-
registrations after the consolidated workflow is authorized on both indexes.
44-
4535
Each section below provides detailed guidance for a step in the
4636
[Release Checklist](ISSUE_TEMPLATE/release_checklist.yml). To start a
4737
release, create a new issue from that template and work through it item by

‎.github/actionlint.yaml‎

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -23,6 +23,9 @@ paths:
2323
- 'unexpected key "queue" for "concurrency" section'
2424
# GitHub supports self-repository ($/) action references, but the latest
2525
# actionlint release does not yet recognize them (rhysd/actionlint#711).
26+
".github/workflows/release.yml":
27+
ignore:
28+
- 'specifying action "\$/[^"]+" in invalid format because ref is missing'
2629
".github/workflows/test-wheel-linux.yml":
2730
ignore:
2831
- 'specifying action "\$/[^"]+" in invalid format because ref is missing'

0 commit comments

Comments
 (0)