build-and-inspect-python-package

build-and-inspect-python-package copied to clipboard

Full log: https://github.com/hynek/build-and-inspect-python-package/actions/runs/8904967778

github-actions[bot]

Sigstore signing?

1

Would it make sense to have a sigstore signing option? https://packaging.python.org/en/latest/guides/publishing-package-distribution-releases-using-github-actions-ci-cd-workflows/#signing-the-distribution-packages (Someone could download, sign, then reupload, but this seems like the sort of thing that could be integrated)

henryiii

add a resuable workflow that caches/builds + another one that downloads artifacts + does pypi uploads

4

with https://docs.github.com/en/actions/using-workflows/reusing-workflows the action can be argument to enable just listing it with a basic setup aka instead of copy&pasting ```yaml jobs: check-package: name: Build & inspect our package. runs-on:...

RonnyPfannschmidt

provide artifact filenames as output for later usage

1

as i learned, github actions have no consistent globbing between platforms, so passing a artifact by glob is a error prone chore if the artifact filenames where provided as output,...

RonnyPfannschmidt

Hey Hynek! Do let me know if this going a bit far in scope for this action, but the use case is essentially what I put in the updated example...

edgarrmondragon

Building 2+ packages at once

6

I have something like [this workspace layout](https://docs.astral.sh/uv/concepts/workspaces/#workspace-layouts), which leads to this GitHub Action: ```yaml - run: |- uv build --sdist --wheel --out-dir dist/ . uv build --sdist --wheel --out-dir dist/...

jamesbraza

Compatibility with `check-sdist`

7

If I use `build-and-inspect-python-package` in normal CI, do I still need https://github.com/henryiii/check-sdist? - If BAIPP is a superset of `check-sdist`: can we document that it's no longer necessary in the...

jamesbraza

BohdanMarek

Support building all or specific packages in a uv workspace

1

Do let me know if you think this is beyond the scope of this action, cause this is specific to uv-managed packages. ## Related - Closes https://github.com/hynek/build-and-inspect-python-package/issues/146

edgarrmondragon

building multiple packages in the same job will break as unpack testing leaves the out dir in dist and twine rejects that

3

discovered in https://github.com/pypa/setuptools-scm/actions/runs/18457259529/job/52580833267 using ```yaml - name: Build vcs-versioning uses: hynek/build-and-inspect-python-package@v2 with: path: nextgen/vcs-versioning upload-name-suffix: -vcs-versioning - name: Build setuptools-scm uses: hynek/build-and-inspect-python-package@v2 with: upload-name-suffix: -setuptools-scm ``` in the same job...

RonnyPfannschmidt