40797214247
100%

Ran 29 Oct 2026 12:55AM UTC

Jobs 9

Files 7

Run time 1min

Badge

Embed ▾

Committed 29 Oct 2026 12:55AM UTC coverage: 100.0%. Remained the same

Build # 40797214247

Build Type

push

github

Committed by

marcelometal

Commit Message

Add PyPI release workflow

Releases were uploaded to PyPI by hand, with no record in the repository of
how a version gets out. This adds a release workflow that builds the sdist
and wheel with uv build on Python 3.11 on every pull request, building the
wheel from the sdist so both artifacts ship the same files, and on an X.Y.Z
tag push also uploads them to PyPI through the pypi environment with trusted
publishing and attestations, so no API token is stored in GitHub. It first
checks that the tag matches the version in pyproject.toml, since a mismatch
would otherwise upload the wrong version or nothing at all. Actions are
pinned to commit SHAs, with pypa/gh-action-pypi-publish on 1.14.3 for
GHSA-5xjx-3w67-w9x9, and CONTRIBUTING.md documents the flow.

The upload only works once a trusted publisher for thumbor/libthumbor,
workflow release.yml, environment pypi, is registered on PyPI. The build job
skips the uv cache, which a tag build on 3.11 would otherwise restore from
the test and lint jobs on master, and does not persist the checkout
credentials. Build and publish are separate jobs so id-token: write and the
pypi environment only apply to the upload, and CONTRIBUTING.md lists the
repository settings that should protect that environment and the tags.

Coverage Stats

370 of 370 relevant lines covered (100.0%)

9.0 hits per line

Jobs

ID	Job ID	Ran	Files	Coverage
1	run-3.13-django5 - 40797214247.1	29 Oct 2026 12:55AM UTC	7	100.0	GitHub Action Run
2	run-3.15-django5 - 40797214247.2	29 Oct 2026 12:56AM UTC	7	100.0	GitHub Action Run
3	run-3.14-django6 - 40797214247.3	29 Oct 2026 12:55AM UTC	7	100.0	GitHub Action Run
4	run-3.15-django6 - 40797214247.4	29 Oct 2026 12:56AM UTC	7	100.0	GitHub Action Run
5	run-3.11-django5 - 40797214247.5	29 Oct 2026 12:55AM UTC	7	100.0	GitHub Action Run
6	run-3.14-django5 - 40797214247.6	29 Oct 2026 12:55AM UTC	7	100.0	GitHub Action Run
7	run-3.12-django5 - 40797214247.7	29 Oct 2026 12:55AM UTC	7	100.0	GitHub Action Run
8	run-3.12-django6 - 40797214247.8	29 Oct 2026 12:56AM UTC	7	100.0	GitHub Action Run
9	run-3.13-django6 - 40797214247.9	29 Oct 2026 12:55AM UTC	7	100.0	GitHub Action Run

thumbor / libthumbor / 40797214247
100%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 40797214247

thumbor / libthumbor / 40797214247 100%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 40797214247

thumbor / libthumbor / 40797214247
100%

README BADGES
x