Files
Classic298 40b1c561a5 ci: lock the exact versions of the GitHub Actions our workflows use (#33679)
Our workflows refer to actions by tag, and a tag can be moved to different code after we reviewed it. This adds GitHub's workflow lockfile, which records the exact commit behind each action version, and the workflows now name exact releases (v5.1.0 instead of v5, for example) as the lockfile tool requires. Dependabot already tracks these actions. The regression workflow that follows the tests repo's main branch is not covered.
2026-11-04 05:06:30 +09:00

40 lines
992 B
YAML

name: Release to PyPI
on:
push:
branches:
- main # or whatever branch you want to use
- pypi-release
jobs:
release:
runs-on: ubuntu-latest
environment:
name: pypi
url: https://pypi.org/p/open-webui
permissions:
id-token: write
steps:
- name: Checkout repository
uses: actions/checkout@v5.1.0
with:
fetch-depth: 0
- name: Install Git
run: sudo apt-get update && sudo apt-get install -y git
- uses: actions/setup-node@v5.0.0
with:
node-version: 22
- uses: actions/setup-python@v6.3.0
with:
python-version: 3.12
- name: Build
env:
APP_BUILD_CHANNEL: main
APP_BUILD_HASH: ${{ github.sha }}
run: |
python -m pip install --upgrade pip
pip install build
python -m build .
- name: Publish package distributions to PyPI
uses: pypa/gh-action-pypi-publish@release/v1