Skip to content

Bump actions/attest-build-provenance from 2.2.2 to 2.2.3 in the actions group #22

Bump actions/attest-build-provenance from 2.2.2 to 2.2.3 in the actions group

Bump actions/attest-build-provenance from 2.2.2 to 2.2.3 in the actions group #22

Workflow file for this run

name: wheels
on:
workflow_dispatch:
release:
types:
- published
pull_request:
paths:
- .github/workflows/cd.yml
concurrency:
group: ${{ github.workflow }}-${{ github.ref }}
cancel-in-progress: true
env:
# Many color libraries just need this to be set to any value, but at least
# one distinguishes color depth, where "3" -> "256-bit color".
FORCE_COLOR: 3
jobs:
make_sdist:
name: Make SDist
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
with:
fetch-depth: 0
- name: Build SDist
run: pipx run build --sdist
- uses: actions/upload-artifact@v4
with:
name: cibw-sdist
path: dist/*.tar.gz
build_wheels:
name: "Wheels: ${{ matrix.os }} ${{ matrix.cibw_archs }} ${{ matrix.cibw_build }}"
runs-on: ${{ matrix.os }}
strategy:
fail-fast: false
matrix:
os: [ubuntu-latest, ubuntu-24.04-arm, windows-latest, macos-14, macos-13]
include:
- os: ubuntu-latest
cibw_archs: x86_64
cibw_build: "*"
cibw_skip: "pp* *musllinux*"
- os: ubuntu-24.04-arm
cibw_archs: aarch64
cibw_build: "*"
cibw_skip: "cp38* pp* *musllinux*"
- os: windows-latest
cibw_archs: AMD64
cibw_build: "*"
cibw_skip: "pp* *musllinux*"
- os: macos-14
cibw_archs: arm64
cibw_build: "*"
cibw_skip: "pp* *musllinux*"
- os: macos-13
cibw_archs: x86_64
cibw_build: "*"
cibw_skip: "pp* *musllinux*"
steps:
- uses: actions/checkout@v4
with:
fetch-depth: 0
- uses: pypa/cibuildwheel@v2.23
env:
# limited at least by availability of h5py, which skips pypy and musl
CIBW_ARCHS: ${{ matrix.cibw_archs }}
CIBW_BUILD: ${{ matrix.cibw_build }}
CIBW_SKIP: ${{ matrix.cibw_skip }}
- name: Upload wheels
uses: actions/upload-artifact@v4
with:
name: cibw-wheels-${{ matrix.os }}-${{ strategy.job-index }}
path: wheelhouse/*.whl
upload_all:
needs: [build_wheels, make_sdist]
environment: pypi
permissions:
id-token: write
attestations: write
contents: read
runs-on: ubuntu-latest
if: github.event_name == 'release' && github.event.action == 'published'
steps:
- uses: actions/download-artifact@v4
with:
pattern: cibw-*
path: dist
merge-multiple: true
- name: Generate artifact attestations
uses: actions/attest-build-provenance@v2.2.3
with:
subject-path: "dist/*"
- uses: pypa/gh-action-pypi-publish@release/v1