Skip to content

feat(workflows): add gh release instead of ncipollo/release-action#1392

Merged
seifertm merged 4 commits intopytest-dev:mainfrom
dzhalaevd:1382-remove-ncipollo-deps
Apr 7, 2026
Merged

feat(workflows): add gh release instead of ncipollo/release-action#1392
seifertm merged 4 commits intopytest-dev:mainfrom
dzhalaevd:1382-remove-ncipollo-deps

Conversation

@dzhalaevd
Copy link
Copy Markdown
Contributor

@dzhalaevd dzhalaevd commented Mar 30, 2026

What was wrong?

Due to security issues with ncipollo/release-action need to remove this dependency and replace with gh release

Closes: #1382
Related: #1382

How it was fixed?

The release logic previously implemented via ncipollo/release-action has been reimplemented using the gh

Our workflow now relied on two key flags:

  • allowUpdates: true
  • skipIfReleaseExists: true

These flags overlap in behavior at least semantically and the ncipollo documentation doesn't clearly define their interaction or precedence. Based on the existing workflow, i was reimplemented as follows with this idea:

if release exists:
    if draft:
        gh release edit
    if published:
        exit
else:
    gh release create

I tried run jobs for check how release creating here
and re-run for checking how it was updates

@codecov-commenter
Copy link
Copy Markdown

codecov-commenter commented Apr 1, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 95.13%. Comparing base (b6f574c) to head (f3278d7).
⚠️ Report is 13 commits behind head on main.

Additional details and impacted files
@@           Coverage Diff           @@
##             main    #1392   +/-   ##
=======================================
  Coverage   95.13%   95.13%           
=======================================
  Files           2        2           
  Lines         473      473           
  Branches       57       57           
=======================================
  Hits          450      450           
  Misses         17       17           
  Partials        6        6           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@dzhalaevd dzhalaevd changed the title [WIP] feat(workflows): add gh release instead of ncipollo/release-action feat(workflows): add gh release instead of ncipollo/release-action Apr 1, 2026
@dzhalaevd dzhalaevd marked this pull request as ready for review April 1, 2026 08:31
Copy link
Copy Markdown
Contributor Author

@dzhalaevd dzhalaevd left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think this is ready for review

Copy link
Copy Markdown
Contributor

@seifertm seifertm left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

First of all, thanks for the initiative of solving this!

I think I understand what process you're aiming for, but we can keep it simpler. Releases are always created from a specific commit hash/tag. If the build is reproducible, the same commit will always lead to the same release artifacts. Therefore, there's no reason to foresee a release being updated or changed.

That means, if a release for a tag is already present, we do nothing. Otherwise, we create a new release. No need to update existing releases.

@dzhalaevd dzhalaevd force-pushed the 1382-remove-ncipollo-deps branch from 22e01aa to 5d3fed3 Compare April 6, 2026 20:58
* remove `changed` file
* simplify main.yaml
* replace VERSION to TAG_NAME in title

Co-authored-by: Michael Seifert <m.seifert@digitalernachschub.de>
@dzhalaevd dzhalaevd force-pushed the 1382-remove-ncipollo-deps branch from 5d3fed3 to f3278d7 Compare April 6, 2026 21:03
@seifertm seifertm added this pull request to the merge queue Apr 7, 2026
Merged via the queue into pytest-dev:main with commit bad3415 Apr 7, 2026
21 of 22 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Remove dependency on ncipollo/release-action

3 participants