TheKevJames / coveralls-python / 988045a8-5fb6-4599-a8a5-700fb67d2b6c

97%

push

circleci

ci: release on merge: tag with the deploy key, then publish and release (#869)

* ci: release on merge: tag with the deploy key, then publish and release

Merging a version change is now the release (bakery:501):

- `tag` (master pushes) calls tools' `_tag.yml`, which pushes the version's
  tag with the `tag` environment's deploy key; the tag push runs the
  existing build and publish.
- `build` also checks the tagged commit is on master.
- `github-release` (new) publishes an immutable GitHub Release with git-cliff
  notes (`cliff.toml`, from the template's `release` feature) and the dists
  attached, replacing the hand-made ones.
- `.github/environments/pypi.json`: `pypi` only admits release tags. The
  stale `release` environment (build.yml's) is deleted by repo-settings.
- Synced from the template: the `tags`, `reviews` and `renovate-branches`
  rulesets, the `repo-settings` and `tag` environments, immutable releases.

Part of bakery:501, after the canary on TheKevJames/task#40. Merge after TheKevJames/tools#1840, #1841 and TheKevJames/dotsystem#523, then run `repo-template set-deploy-key TheKevJames/coveralls-python`.

* ci: rerun now that tools has _tag.yml

* fix(ci): drop the default update parameter from renovate-branches

176 of 184 branches covered (95.65%)

Branch coverage included in aggregate %.

633 of 654 relevant lines covered (96.79%)

6.78 hits per line