IntelPython / dpnp / 41910169681

84%

push

github

Pass tokens to run steps via env (#3155)

`ANACONDA_TOKEN` and `GITHUB_TOKEN` were inlined in `run:` commands with
template expressions, so their values were written into the generated
step scripts.

This PR passes them through `env:` and expands them as shell variables:

- `conda-package.yml`, `upload` job: the `Upload` and `Upload wheels`
steps already set `ANACONDA_TOKEN` in `env:` but used `${{
env.ANACONDA_TOKEN }}`; they now use `"${ANACONDA_TOKEN}"` (and
`"${PACKAGE_VERSION}"`).
- `conda-package.yml`, `Cleanup old packages`: new `env:` entry.
- `build-sphinx.yml`, `Remove docs [PR closed]`: `GITHUB_TOKEN` via
`env:` for the tokened remote URL.

The `upload` job's default shell was `cmd` on Windows, which doesn't
expand `${VAR}`. It is now `bash -el {0}` on both OSes, as its `Package
version` step already used, and the per-step overrides are removed.

The `upload` and cleanup steps only run on `master`, so this PR's CI
doesn't exercise them; the first `master` run after merge confirms the
Windows upload under bash. The `clean` step in `build-sphinx.yml` runs
when this PR is closed.

- [x] Have you provided a meaningful PR description?
- [ ] Have you added a test, reproducer or referred to an issue with a
reproducer?
- [ ] Have you tested your changes locally for CPU and GPU devices?
- [x] Have you made sure that new changes do not introduce compiler
warnings?
- [ ] Have you checked performance impact of proposed changes?
- [ ] Have you added documentation for your changes, if necessary?
- [ ] Have you added your changes to the changelog?

1792 of 2998 branches covered (59.77%)

Branch coverage included in aggregate %.

29615 of 34216 relevant lines covered (86.55%)

39124.29 hits per line