feat: Emit OTEL attributes for AgentCore Evaluation support #68
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Release Publish | |
| on: | |
| pull_request: | |
| types: [closed] | |
| branches: [main] | |
| permissions: | |
| contents: write | |
| jobs: | |
| build: | |
| name: Build from Main | |
| if: > | |
| github.event.pull_request.merged == true && | |
| startsWith(github.event.pull_request.head.ref, 'release/v') | |
| runs-on: ubuntu-latest | |
| outputs: | |
| version: ${{ steps.version.outputs.version }} | |
| steps: | |
| - uses: actions/checkout@v6 | |
| with: | |
| fetch-depth: 0 | |
| - name: Set up Python | |
| uses: actions/setup-python@v6 | |
| with: | |
| python-version: '3.10' | |
| - name: Install uv | |
| run: | | |
| curl -LsSf https://astral.sh/uv/install.sh | sh | |
| echo "$HOME/.local/bin" >> $GITHUB_PATH | |
| - name: Build and check package | |
| run: | | |
| uv venv | |
| source .venv/bin/activate | |
| uv pip install build twine | |
| uv build | |
| twine check dist/* | |
| - name: Get version | |
| id: version | |
| run: | | |
| VERSION=$(ls dist/*.whl | sed -n 's/.*-\([0-9.]*\)-.*/\1/p') | |
| echo "version=$VERSION" >> $GITHUB_OUTPUT | |
| echo "Version: $VERSION" | |
| - name: Upload artifacts | |
| uses: actions/upload-artifact@v7 | |
| with: | |
| name: dist | |
| path: dist/ | |
| release-approval: | |
| name: Release Approval | |
| needs: build | |
| runs-on: ubuntu-latest | |
| environment: | |
| name: pypi-approval | |
| steps: | |
| - name: Approval checkpoint | |
| env: | |
| VERSION: ${{ needs.build.outputs.version }} | |
| run: | | |
| echo "✅ Build successful for v$VERSION" | |
| echo "📦 Package ready for PyPI publication" | |
| echo "" | |
| echo "⚠️ MANUAL APPROVAL REQUIRED" | |
| echo "Verify version and changelog before approving." | |
| publish-pypi: | |
| name: Publish to PyPI | |
| needs: [build, release-approval] | |
| runs-on: ubuntu-latest | |
| environment: | |
| name: pypi | |
| url: https://pypi.org/project/bedrock-agentcore/ | |
| # id-token: write is required for OIDC Trusted Publishing. | |
| # This replaces the PYPI_API_TOKEN secret | |
| permissions: | |
| id-token: write | |
| contents: write | |
| steps: | |
| - uses: actions/checkout@v6 | |
| with: | |
| fetch-depth: 0 | |
| - name: Download artifacts | |
| uses: actions/download-artifact@v8 | |
| with: | |
| name: dist | |
| path: dist/ | |
| # Uses the PyPI JSON API — stable and versioned. | |
| # pip index versions output format is not guaranteed stable across | |
| # pip versions and should not be used in CI. | |
| - name: Check if version already exists on PyPI | |
| env: | |
| VERSION: ${{ needs.build.outputs.version }} | |
| run: | | |
| PYPI_VERSIONS=$(curl -sf https://pypi.org/pypi/bedrock-agentcore/json \ | |
| | python3 -c "import sys, json; releases = json.load(sys.stdin)['releases']; print('\n'.join(releases.keys()))") | |
| if echo "$PYPI_VERSIONS" | grep -qx "$VERSION"; then | |
| echo "❌ ERROR: Version $VERSION already exists on PyPI!" | |
| exit 1 | |
| fi | |
| echo "✓ Version $VERSION is not on PyPI, safe to publish" | |
| # automatically detects and uses Trusted Publishing via OIDC when | |
| # no token is provided and id-token: write permission is set. | |
| - name: Publish to PyPI | |
| uses: pypa/gh-action-pypi-publish@release/v1 | |
| with: | |
| skip-existing: false | |
| verbose: true | |
| - name: Wait for PyPI availability | |
| env: | |
| VERSION: ${{ needs.build.outputs.version }} | |
| run: | | |
| echo "Waiting for package to be available on PyPI..." | |
| for i in {1..10}; do | |
| PYPI_VERSIONS=$(curl -sf https://pypi.org/pypi/bedrock-agentcore/json \ | |
| | python3 -c "import sys, json; releases = json.load(sys.stdin)['releases']; print('\n'.join(releases.keys()))" 2>/dev/null) | |
| if echo "$PYPI_VERSIONS" | grep -qx "$VERSION"; then | |
| echo "✓ Package version $VERSION is now available on PyPI" | |
| break | |
| fi | |
| echo "Attempt $i/10: Package not yet available, waiting 30s..." | |
| sleep 30 | |
| done | |
| - name: Create and push tag | |
| env: | |
| VERSION: ${{ needs.build.outputs.version }} | |
| run: | | |
| git config --global user.name "github-actions[bot]" | |
| git config --global user.email "github-actions[bot]@users.noreply.github.com" | |
| git tag -a "v$VERSION" -m "Release v$VERSION" | |
| git push origin "v$VERSION" | |
| - name: Create GitHub Release | |
| uses: softprops/action-gh-release@v2 | |
| with: | |
| tag_name: v${{ needs.build.outputs.version }} | |
| name: Bedrock AgentCore SDK v${{ needs.build.outputs.version }} | |
| files: dist/* | |
| generate_release_notes: true | |
| body: | | |
| ## Installation | |
| ```bash | |
| pip install bedrock-agentcore==${{ needs.build.outputs.version }} | |
| ``` | |
| ## What's Changed | |
| See [CHANGELOG.md](https://github.com/${{ github.repository }}/blob/v${{ needs.build.outputs.version }}/CHANGELOG.md) for details. |