Skip to content

👷 ci(release): drive package tags with a GitHub App token #797

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
nstarman merged 4 commits into from
Jul 24, 2026
Merged

👷 ci(release): drive package tags with a GitHub App token #797

Show file tree
Hide file tree
Changes from 2 commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
fa36412
👷 ci(release): drive package tags with a GitHub App token
nstarman Jul 24, 2026
d586074
👷 ci(release): point re-runs at the manual recovery path
nstarman Jul 24, 2026
c69912d
🔒 ci(release): validate the tag on dispatch runs too
nstarman Jul 24, 2026
596b5b0
📝 docs(release): correct App permission wording; document tag access …
nstarman Jul 24, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
87 changes: 0 additions & 87 deletions .github/actions/dispatch-package-cd/action.yml
View file
Open in desktop

This file was deleted.

10 changes: 2 additions & 8 deletions .github/workflows/cd-unxt-api.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,13 +3,8 @@ name: CD - unxt-api
on:
workflow_dispatch:
push:
branches:
- main
tags:
- "unxt-api-v*" # Package-specific tags (unxt-api-vX.Y.Z)
paths:
- "packages/unxt-api/**"
- ".github/workflows/cd-unxt-api.yml"

concurrency:
group: ${{ github.workflow }}-${{ github.ref }}
Expand All @@ -24,11 +19,10 @@ jobs:
runs-on: ubuntu-latest
permissions:
contents: read
# Build runs for manual dispatch, main pushes, and direct package tag pushes
# Build for a manual dispatch or a package tag push (release).
if: |
github.event_name == 'workflow_dispatch' ||
(github.event_name == 'push' && github.ref == 'refs/heads/main') ||
(github.event_name == 'push' && startsWith(github.ref, 'refs/tags/'))
startsWith(github.ref, 'refs/tags/')

steps:
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
Expand Down
10 changes: 2 additions & 8 deletions .github/workflows/cd-unxt-hypothesis.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,13 +3,8 @@ name: CD - unxt-hypothesis
on:
workflow_dispatch:
push:
branches:
- main
tags:
- "unxt-hypothesis-v*" # Package-specific tags (unxt-hypothesis-vX.Y.Z)
paths:
- "packages/unxt-hypothesis/**"
- ".github/workflows/cd-unxt-hypothesis.yml"

concurrency:
group: ${{ github.workflow }}-${{ github.ref }}
Expand All @@ -24,11 +19,10 @@ jobs:
runs-on: ubuntu-latest
permissions:
contents: read
# Build runs for manual dispatch, main pushes, and direct package tag pushes.
# Build for a manual dispatch or a package tag push (release).
if: |
github.event_name == 'workflow_dispatch' ||
(github.event_name == 'push' && github.ref == 'refs/heads/main') ||
(github.event_name == 'push' && startsWith(github.ref, 'refs/tags/'))
startsWith(github.ref, 'refs/tags/')

steps:
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
Expand Down
12 changes: 2 additions & 10 deletions .github/workflows/cd-unxt.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,15 +3,8 @@ name: CD - unxt
on:
workflow_dispatch:
push:
branches:
- main
tags:
- "unxt-v*" # Package-specific tags (unxt-vX.Y.Z)
paths:
- "src/**"
- "pyproject.toml"
- "README.md"
- ".github/workflows/cd-unxt.yml"

concurrency:
group: ${{ github.workflow }}-${{ github.ref }}
Expand All @@ -26,11 +19,10 @@ jobs:
runs-on: ubuntu-latest
permissions:
contents: read
# Build runs for manual dispatch, main pushes, and direct package tag pushes
# Build for a manual dispatch or a package tag push (release).
if: |
github.event_name == 'workflow_dispatch' ||
(github.event_name == 'push' && github.ref == 'refs/heads/main') ||
(github.event_name == 'push' && startsWith(github.ref, 'refs/tags/'))
startsWith(github.ref, 'refs/tags/')

Comment thread
nstarman marked this conversation as resolved.
steps:
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
Expand Down
10 changes: 2 additions & 8 deletions .github/workflows/cd-unxts-api.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,13 +3,8 @@ name: CD - unxts-api
on:
workflow_dispatch:
push:
branches:
- main
tags:
- "unxts-api-v*" # Package-specific tags (unxts-api-vX.Y.Z)
paths:
- "packages/unxts.api/**"
- ".github/workflows/cd-unxts-api.yml"

concurrency:
group: ${{ github.workflow }}-${{ github.ref }}
Expand All @@ -24,11 +19,10 @@ jobs:
runs-on: ubuntu-latest
permissions:
contents: read
# Build runs for manual dispatch, main pushes, and direct package tag pushes
# Build for a manual dispatch or a package tag push (release).
if: |
github.event_name == 'workflow_dispatch' ||
(github.event_name == 'push' && github.ref == 'refs/heads/main') ||
(github.event_name == 'push' && startsWith(github.ref, 'refs/tags/'))
startsWith(github.ref, 'refs/tags/')

steps:
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
Expand Down
10 changes: 2 additions & 8 deletions .github/workflows/cd-unxts-hypothesis.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,13 +3,8 @@ name: CD - unxts-hypothesis
on:
workflow_dispatch:
push:
branches:
- main
tags:
- "unxts-hypothesis-v*" # Package-specific tags (unxts-hypothesis-vX.Y.Z)
paths:
- "packages/unxts.hypothesis/**"
- ".github/workflows/cd-unxts-hypothesis.yml"

concurrency:
group: ${{ github.workflow }}-${{ github.ref }}
Expand All @@ -24,11 +19,10 @@ jobs:
runs-on: ubuntu-latest
permissions:
contents: read
# Build runs for manual dispatch, main pushes, and direct package tag pushes
# Build for a manual dispatch or a package tag push (release).
if: |
github.event_name == 'workflow_dispatch' ||
(github.event_name == 'push' && github.ref == 'refs/heads/main') ||
(github.event_name == 'push' && startsWith(github.ref, 'refs/tags/'))
startsWith(github.ref, 'refs/tags/')

steps:
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
Expand Down
10 changes: 2 additions & 8 deletions .github/workflows/cd-unxts-interop-gala.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,13 +3,8 @@ name: CD - unxts-interop-gala
on:
workflow_dispatch:
push:
branches:
- main
tags:
- "unxts-interop-gala-v*" # Package-specific tags (unxts-interop-gala-vX.Y.Z)
paths:
- "packages/unxts.interop.gala/**"
- ".github/workflows/cd-unxts-interop-gala.yml"

concurrency:
group: ${{ github.workflow }}-${{ github.ref }}
Expand All @@ -24,11 +19,10 @@ jobs:
runs-on: ubuntu-latest
permissions:
contents: read
# Build runs for manual dispatch, main pushes, and direct package tag pushes
# Build for a manual dispatch or a package tag push (release).
if: |
github.event_name == 'workflow_dispatch' ||
(github.event_name == 'push' && github.ref == 'refs/heads/main') ||
(github.event_name == 'push' && startsWith(github.ref, 'refs/tags/'))
startsWith(github.ref, 'refs/tags/')

steps:
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
Expand Down
10 changes: 2 additions & 8 deletions .github/workflows/cd-unxts-interop-matplotlib.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,13 +3,8 @@ name: CD - unxts-interop-matplotlib
on:
workflow_dispatch:
push:
branches:
- main
tags:
- "unxts-interop-matplotlib-v*" # Package-specific tags (unxts-interop-matplotlib-vX.Y.Z)
paths:
- "packages/unxts.interop.matplotlib/**"
- ".github/workflows/cd-unxts-interop-matplotlib.yml"

concurrency:
group: ${{ github.workflow }}-${{ github.ref }}
Expand All @@ -24,11 +19,10 @@ jobs:
runs-on: ubuntu-latest
permissions:
contents: read
# Build runs for manual dispatch, main pushes, and direct package tag pushes
# Build for a manual dispatch or a package tag push (release).
if: |
github.event_name == 'workflow_dispatch' ||
(github.event_name == 'push' && github.ref == 'refs/heads/main') ||
(github.event_name == 'push' && startsWith(github.ref, 'refs/tags/'))
startsWith(github.ref, 'refs/tags/')

steps:
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
Expand Down
10 changes: 2 additions & 8 deletions .github/workflows/cd-unxts-interop-xarray.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,13 +3,8 @@ name: CD - unxts-interop-xarray
on:
workflow_dispatch:
push:
branches:
- main
tags:
- "unxts-interop-xarray-v*" # Package-specific tags (unxts-interop-xarray-vX.Y.Z)
paths:
- "packages/unxts.interop.xarray/**"
- ".github/workflows/cd-unxts-interop-xarray.yml"

concurrency:
group: ${{ github.workflow }}-${{ github.ref }}
Expand All @@ -24,11 +19,10 @@ jobs:
runs-on: ubuntu-latest
permissions:
contents: read
# Build runs for manual dispatch, main pushes, and direct package tag pushes
# Build for a manual dispatch or a package tag push (release).
if: |
github.event_name == 'workflow_dispatch' ||
(github.event_name == 'push' && github.ref == 'refs/heads/main') ||
(github.event_name == 'push' && startsWith(github.ref, 'refs/tags/'))
startsWith(github.ref, 'refs/tags/')

steps:
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
Expand Down
10 changes: 2 additions & 8 deletions .github/workflows/cd-unxts-linalg.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,13 +3,8 @@ name: CD - unxts-linalg
on:
workflow_dispatch:
push:
branches:
- main
tags:
- "unxts-linalg-v*" # Package-specific tags (unxts-linalg-vX.Y.Z)
paths:
- "packages/unxts.linalg/**"
- ".github/workflows/cd-unxts-linalg.yml"

concurrency:
group: ${{ github.workflow }}-${{ github.ref }}
Expand All @@ -24,11 +19,10 @@ jobs:
runs-on: ubuntu-latest
permissions:
contents: read
# Build runs for manual dispatch, main pushes, and direct package tag pushes
# Build for a manual dispatch or a package tag push (release).
if: |
github.event_name == 'workflow_dispatch' ||
(github.event_name == 'push' && github.ref == 'refs/heads/main') ||
(github.event_name == 'push' && startsWith(github.ref, 'refs/tags/'))
startsWith(github.ref, 'refs/tags/')

steps:
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
Expand Down
10 changes: 2 additions & 8 deletions .github/workflows/cd-unxts-parametric.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,13 +3,8 @@ name: CD - unxts-parametric
on:
workflow_dispatch:
push:
branches:
- main
tags:
- "unxts-parametric-v*" # Package-specific tags (unxts-parametric-vX.Y.Z)
paths:
- "packages/unxts.parametric/**"
- ".github/workflows/cd-unxts-parametric.yml"

concurrency:
group: ${{ github.workflow }}-${{ github.ref }}
Expand All @@ -24,11 +19,10 @@ jobs:
runs-on: ubuntu-latest
permissions:
contents: read
# Build runs for manual dispatch, main pushes, and direct package tag pushes
# Build for a manual dispatch or a package tag push (release).
if: |
github.event_name == 'workflow_dispatch' ||
(github.event_name == 'push' && github.ref == 'refs/heads/main') ||
(github.event_name == 'push' && startsWith(github.ref, 'refs/tags/'))
startsWith(github.ref, 'refs/tags/')

steps:
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
Expand Down
Loading
Loading