Revert random version numbers
disable running on pushes to this dev branch
Rename gpg public key file once first version using this workflow is clear
Create follow-up PR to update website on verification informationUpdate information on verifying releases python-telegram-bot.github.io#21
Possibly extend the verification information with the optional parameters of sigstore
Verify that the testpypi upload & github draft release work

Bibo-Joshi added3 commits

July 9, 2024 11:29

Update readme section on verification

6e43bcb

Add a workflow for publishing to (Test) Pypi

fb2def2

Temporarily use random version numbers to enable multiple testpypi up…

bb14a65

…loads

Bibo-Joshi added the 🔗 github-actionsrelated technology: github-actions label

Jul 9, 2024

temporarily run on pushes to this branch

0bcc2ca

Bibo-Joshi temporarily deployed to release_test_pypi

July 9, 2024 10:44

— with

GitHub Actions Inactive

Try fixing the condition for compute-signatures

f2a2929

Bibo-Joshi temporarily deployed to release_test_pypi

July 9, 2024 10:52

— with

GitHub Actions Inactive

Bibo-Joshi temporarily deployed to release_test_pypi

July 9, 2024 10:56

— with

GitHub Actions Inactive

Try fixing the condition for compute-signatures - again

403d76e

Bibo-Joshi temporarily deployed to release_test_pypi

July 9, 2024 10:59

— with

GitHub Actions Inactive

Bibo-Joshi added2 commits

July 9, 2024 13:00

update upload artifact version

7f50a28

update download artifact version

bc92636

Bibo-Joshi temporarily deployed to release_test_pypi

July 9, 2024 11:04

— with

GitHub Actions Inactive

try getting the github release step to run

f33b6b1

Bibo-Joshi temporarily deployed to release_test_pypi

July 9, 2024 11:15

— with

GitHub Actions Inactive

add some debug prints

7980ffe

Bibo-Joshi temporarily deployed to release_test_pypi

July 9, 2024 15:45

— with

GitHub Actions Inactive

do another test run

b58ae39

Bibo-Joshi temporarily deployed to release_test_pypi

July 9, 2024 15:59

— with

GitHub Actions Inactive

Bibo-Joshi added4 commits

July 9, 2024 18:14

remove debug prints & adjust conditions for gh releases

433ca79

Revert "Temporarily use random version numbers to enable multiple tes…

510d3a8

…tpypi uploads"This reverts commitbb14a65.

Revert "temporarily run on pushes to this branch"

0b599ca

This reverts commit0bcc2ca.

Slightly extend info on sigstore

7d8738f

Copy link

MemberAuthor

Bibo-Joshi commentedJul 9, 2024

After a bit of trial and error, this seems to be running fine now :) pypi test releases can be seen athttps://test.pypi.org/project/python-telegram-bot/#history. the GH releases drafts worked as well, but I discarded them to not leave testing artifacts behind.

I'm attaching the produced artifacts from the last successfull run so that if you like you can verify that the sigstore verification and sha1 sum works as expected :)

python_telegram_bot-21.4a9571-artifacts.zip