aio-libs / multidict / 35621094685

87%

push

github

Upload release assets one at a time to avoid the secondary rate limit (#1503)

<!-- Thank you for your contribution! -->

## What do these changes do?

The v6.9.0 deploy job
([run](https://github.com/aio-libs/multidict/actions/runs/35338595754/job/105598615903))
failed on the last step: `softprops/action-gh-release` uploaded 513
files to the GitHub Release in parallel and GitHub rejected the burst
with a secondary rate limit error after 499 of them. PyPI publishing and
Sigstore signing had already succeeded.

The step is replaced with a shell loop that uploads one file at a time
with `gh release upload`, skips assets already attached to the release,
and retries each upload up to five times with an increasing pause. A
re-run of the job therefore only fills in what a previous attempt
missed. The set of files attached to the release is unchanged.

The 14 wheels missing from v6.9.0 were uploaded by hand from the run
artifacts after checking their SHA256 against the Sigstore bundles on
the release and against PyPI; the release now has all 513 assets.

## Are there changes in behavior for the user?

No.

## Is it a substantial burden for the maintainers to support this?

No, it is a short shell step with no third party action.

## Related issue number

N/A

## Checklist

- [x] I think the code is well written
- [ ] Unit tests for the changes exist N/A, release workflow only
- [ ] Documentation reflects the changes N/A
- [ ] If you provide code modification, please add yourself to
`CONTRIBUTORS.txt` N/A
- [x] Add a new news fragment into the `CHANGES/` folder
- [x] `make doc-spelling` passes and any new technical words are added
to `docs/spelling_wordlist.txt`

<details>
<summary>Agent run details (optional, for reviewers)</summary>

Lint: `pre-commit run --files .github/workflows/ci-cd.yml` passed
(actionlint, timeout-minutes check, yamllint).
Spelling: `make doc-spelling` passed.
Dry run: the skip logic was run against the live v6.9.0 release with the
uplo... (continued)

762 of 1524 branches covered (50.0%)

Branch coverage included in aggregate %.

6514 of 6786 relevant lines covered (95.99%)

1.92 hits per line