Releasing checkmaite
Use the manual publish jobs only after the release tag already exists on main.
One-time GitLab setup
- Protect release tags, for example
[0-9]*, with create access limited to Maintainers. - Add
TEST_PYPI_API_TOKENscoped to thepypi-testenvironment. - Add
PYPI_API_TOKENas Protected + Masked and scoped to thepypi-productionenvironment. - Protect the
pypi-productionenvironment and require approvals before deployment.
Release steps
- Create and push an unprefixed version tag, for example
1.2.3, from a commit onmain. - In GitLab, open CI/CD → Pipelines → Run pipeline.
- Select branch
main, setRELEASE_TAGto the tag, and create the web pipeline. - Run
publish-testpypifirst and inspect the saveddist/artifacts. - After the TestPyPI package looks correct, run and approve
publish-pypi. - Verify the final package at https://pypi.org/project/checkmaite/.