Merge pull request #180 from rmartin16/attest-packages

Use new create package action with attestation

.github/workflows/ci.yml

@@ -5,6 +5,11 @@ on:
     branches:
       - main
   workflow_call:
+    inputs:
+      attest-package:
+        description: "Create GitHub provenance attestation for the package."
+        default: "false"
+        type: string
     outputs:
       artifact-name:
         description: "Name of the uploaded artifact; use for artifact retrieval."
@@ -20,12 +25,18 @@ jobs:
     uses: beeware/.github/.github/workflows/towncrier-run.yml@main
 
   package:
-    name: Python Package
+    name: Package Travertino
+    permissions:
+      id-token: write
+      contents: read
+      attestations: write
     uses: beeware/.github/.github/workflows/python-package-create.yml@main
+    with:
+      attest: ${{ inputs.attest-package }}
 
   unit-tests:
     name: Python compatibility test
-    needs: [pre-commit, towncrier, package]
+    needs: [ pre-commit, towncrier, package ]
     runs-on: ubuntu-latest
     continue-on-error: ${{ matrix.experimental }}
     strategy:
@@ -54,12 +65,11 @@ jobs:
         name: ${{ needs.package.outputs.artifact-name }}
         path: dist
 
-    - name: Install dev dependencies
-      run: |
-        # We don't actually want to install travertino;
-        # we just want the dev extras so we have a known version of tox.
-        python -m pip install $(ls dist/travertino-*.whl)[dev]
+    - name: Install Tox
+      uses: beeware/.github/.github/actions/install-requirement@main
+      with:
+        requirements: tox
+        extra: dev
 
     - name: Test
-      run: |
-        tox -e py --installpkg dist/travertino-*.whl
+      run: tox -e py --installpkg dist/travertino-*.whl

.github/workflows/release.yml

@@ -7,7 +7,10 @@ on:
 
 jobs:
   ci:
+    name: CI
     uses: ./.github/workflows/ci.yml
+    with:
+      attest-package: "true"
 
   release:
     name: Create Release
@@ -20,7 +23,7 @@ jobs:
     steps:
       - name: Set build variables
         run: |
-          echo "VERSION=${GITHUB_REF_NAME#v}" >> $GITHUB_ENV
+          echo "VERSION=${GITHUB_REF_NAME#v}" | tee -a $GITHUB_ENV
 
       - name: Set up Python
         uses: actions/[email protected]

changes/180.misc.rst

@@ -0,0 +1 @@
+``hynek/build-and-inspect-python-package`` is now used to create the Python package.

tox.ini

@@ -14,7 +14,7 @@ ignore =
     W503,
 
 [tox]
-envlist = towncrier-check,pre-commit,package,py{38,39,310,311,312,313}
+envlist = towncrier-check,pre-commit,py{38,39,310,311,312,313}
 skip_missing_interpreters = true
 
 [testenv:pre-commit]
@@ -39,15 +39,3 @@ deps =
 commands =
     check  : python -m towncrier.check --compare-with origin/main
     !check : python -m towncrier {posargs}
-
-[testenv:package]
-skip_install = True
-depends =
-    towncrier-check
-    pre-commit
-deps =
-    build==1.2.1
-    twine==5.1.0
-commands =
-    python -m build . --outdir dist{/}
-    python -m twine check dist{/}*