github-workflows/.github/workflows/release.yaml at main · tox-dev/github-workflows · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
name: Release actions
on:
  push:
    tags: ["*"]
permissions:
  contents: read
concurrency:
  group: release-${{ github.ref }}
  cancel-in-progress: false
jobs:
  notes:
    name: 📝 Render GitHub Release notes
    runs-on: ubuntu-26.04
    permissions:
      contents: read
    outputs:
      artifact-id: ${{ steps.artifact.outputs.artifact-id }}
    steps:
      - name: 📥 Check out repository
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
        with:
          fetch-depth: 0
          persist-credentials: false
      - name: 🐍 Install uv and Python
        uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e # v10.3.2
        with:
          version: latest-known
          python-version: "3.15"
          enable-cache: false
      - name: 📦 Install release tools
        env:
          EXCLUDE_NEWER: 7 days
          # Temporary: release-creator 4.3.0 is younger than seven days. Delete after 2026-11-03.
          EXCLUDE_NEWER_PACKAGE: release-creator=2026-10-27T20:03:25Z
        run: |
          tools/install_live_tools.sh .venv 'release-creator>=4.3'
          uv run --no-project --python .venv python tools/expose_locked_commands.py .venv
      - name: 📝 Render release notes
        uses: $/render-release-notes
        with:
          tag: ${{ github.ref_name }}
          changelog: CHANGELOG.md
      - name: 📤 Upload release notes
        id: artifact
        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
        with:
          name: release-notes
          path: ${{ runner.temp }}/release-notes.md
          if-no-files-found: error
  publish:
    name: 🚀 Publish GitHub Release
    needs: notes
    runs-on: ubuntu-26.04
    environment: release
    permissions:
      contents: write
    steps:
      - name: 📩 Download release notes
        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
        with:
          artifact-ids: ${{ needs.notes.outputs.artifact-id }}
          path: ${{ runner.temp }}
      - name: 🚀 Publish GitHub Release
        uses: $/publish-github-release
        env:
          GH_TOKEN: ${{ github.token }}
        with:
          tag: ${{ github.ref_name }}
          commit: ${{ github.sha }}
          title: ${{ github.ref_name }}
          notes-file: ${{ runner.temp }}/release-notes.md