Repository navigation
通过验证后使用 GitHub Actions 发布 PyPI 包 - #24
Merged
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
为 cloudmusic 增加手动触发的 PyPI 可信发布流程。发布仅允许 master，要求输入版本与源码一致，先运行现有跨平台 CI，再构建、严格检查并独立安装 wheel，最后由独立任务通过 OIDC 上传，不保存长期 token。
README 更新安装和发布说明；GitHub pypi 环境已限制为 master。构建和 twine check --strict 均通过；实际上传将在 PyPI 可信发布者配置完成后执行。