coulomb/kaizen-agentic
2
0
Fork 0
Code Issues 4 Pull Requests Actions Projects Releases Wiki Activity

fix: use build venv in Gitea publish workflow (PEP 668)
Some checks failed
ci / test (push) Failing after 37s
Details

Browse Source 
Haskelseed runner blocks system-wide pip installs. Create an isolated
.build-venv for build/twine and document workflow_dispatch API path.
This commit is contained in:
Bernd Worsch
2026-06-16 07:15:57 +02:00
parent 5ce3d0766e
commit 9d2bab9a38
2 changed files with 12 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
.gitea/workflows/publish-python-package.yml
View File

@@ -26,11 +26,11 @@ jobs:
TWINE_PASSWORD: ${{ secrets.PACKAGE_TOKEN }} TWINE_PASSWORD: ${{ secrets.PACKAGE_TOKEN }}
run: | run: |
cd repo cd repo
python3 -m ensurepip --upgrade 2>/dev/null || \ python3 -m venv .build-venv
curl -sS https://bootstrap.pypa.io/get-pip.py -o /tmp/get-pip.py && python3 /tmp/get-pip.py . .build-venv/bin/activate
python3 -m pip install --upgrade pip build twine python -m pip install --upgrade pip build twine
python3 -m build python -m build
python3 -m twine check dist/* python -m twine check dist/*
python3 -m twine upload \ python -m twine upload \
--repository-url https://gitea.coulomb.social/api/packages/coulomb/pypi \ --repository-url https://gitea.coulomb.social/api/packages/coulomb/pypi \
dist/* dist/*

7
docs/PACKAGE_RELEASE.md
View File

@@ -72,10 +72,15 @@ invalid. Do not commit tokens to the repository.
Verify secrets without cutting a release: Verify secrets without cutting a release:
1. Open **Actions → Publish Python package → Run workflow** (`workflow_dispatch`) 1. Open **Actions → Publish Python package → Run workflow** (`workflow_dispatch`),
or dispatch via API:
`POST /api/v1/repos/coulomb/kaizen-agentic/actions/workflows/publish-python-package.yml/dispatches`
with body `{"ref":"main"}`
2. Confirm the run completes and `twine upload` succeeds 2. Confirm the run completes and `twine upload` succeeds
3. Optional: `pip install kaizen-agentic==<version> --extra-index-url ...` 3. Optional: `pip install kaizen-agentic==<version> --extra-index-url ...`
The publish job uses an isolated `.build-venv` on the runner (PEP 668 safe).
## Pre-tag release checklist ## Pre-tag release checklist
Before `git tag vX.Y.Z && git push origin vX.Y.Z`: Before `git tag vX.Y.Z && git push origin vX.Y.Z`: