chore: 2.0.0b8 release #50

	# Actions are pinned to commit SHAs (not version tags) to prevent supply chain attacks.
	# Version comments (e.g., "# v6") allow Dependabot to track and update to newer versions.
	name: Release

	on:
	push:
	tags:
	- "v*"

	env:
	# Artifactory credentials for resolving build dependencies (e.g. hatchling)
	# via the default index configured in pyproject.toml.
	# No UV_DEFAULT_INDEX fallback needed here — unlike test.yml, releases only
	# trigger on tag pushes to the main repo where secrets are always available.
	UV_INDEX_CISCO_ARTIFACTORY_DEVHUB_USERNAME: ${{ secrets.UV_INDEX_CISCO_ARTIFACTORY_DEVHUB_USERNAME }}
	UV_INDEX_CISCO_ARTIFACTORY_DEVHUB_PASSWORD: ${{ secrets.UV_INDEX_CISCO_ARTIFACTORY_DEVHUB_PASSWORD }}
	UV_HTTP_TIMEOUT: 120
	UV_HTTP_CONNECT_TIMEOUT: 30
	UV_HTTP_RETRIES: 10

	jobs:
	test:
	uses: ./.github/workflows/test.yml

	build:
	needs: test
	runs-on: ubuntu-latest
	permissions:
	contents: read
	steps:
	- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6

	- name: Install uv
	uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0

	- name: Build and publish
	env:
	UV_PUBLISH_TOKEN: ${{ secrets.UV_PUBLISH_TOKEN }}
	run: \|
	uv build
	uv publish

Navigation Menu