fix(gitleaks): 统一用 [[allowlists]] 新语法(不能与 [allowlist] 混用) #18
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Publish PyPI | ||
| on: | ||
| release: | ||
| types: | ||
| - published | ||
| workflow_dispatch: | ||
| inputs: | ||
| ksadk_web_version: | ||
| description: KsADK Web npm version to bundle | ||
| required: false | ||
| default: "0.2.16" | ||
| permissions: | ||
| contents: read | ||
| pages: write | ||
| id-token: write | ||
| concurrency: | ||
| group: publish-pypi-${{ github.ref }} | ||
| cancel-in-progress: false | ||
| jobs: | ||
| publish: | ||
| runs-on: ubuntu-latest | ||
| environment: | ||
| name: pypi | ||
| env: | ||
| KSADK_WEB_VERSION: ${{ github.event.inputs.ksadk_web_version || '0.2.16' }} | ||
| permissions: | ||
| contents: read | ||
| id-token: write | ||
| steps: | ||
| - uses: actions/checkout@v4 | ||
| - uses: actions/setup-python@v5 | ||
| with: | ||
| python-version: "3.11" | ||
| - uses: actions/setup-node@v4 | ||
| with: | ||
| node-version: "22" | ||
| - uses: astral-sh/setup-uv@v5 | ||
| with: | ||
| enable-cache: true | ||
| - name: Sync KsADK Web static assets | ||
| run: make sync-ksadk-web-static | ||
| - name: Run public release preflight | ||
| run: make public-preflight | ||
| - name: Verify release approval gate | ||
| run: make public-publish-gate | ||
| - name: Publish to PyPI | ||
| uses: pypa/gh-action-pypi-publish@release/v1 | ||
| # 发版时同步部署 Fumadocs 文档站到 GitHub Pages, 文档与 PyPI 版本一致。 | ||
| deploy-pages: | ||
| needs: publish | ||
| runs-on: ubuntu-latest | ||
| defaults: | ||
| run: | ||
| working-directory: docs-site | ||
| steps: | ||
| - uses: actions/checkout@v4 | ||
| - uses: actions/setup-node@v4 | ||
| with: | ||
| node-version: "22" | ||
| - name: Enable pnpm | ||
| run: | | ||
| corepack enable | ||
| corepack prepare pnpm@10.33.2 --activate | ||
| - name: Install dependencies | ||
| run: pnpm install --frozen-lockfile | ||
| - name: Build static site (Fumadocs) | ||
| run: pnpm build:static | ||
| env: | ||
| # GitHub Pages project site serves from /<repo>, 需设 base path | ||
| NEXT_PUBLIC_BASE_PATH: /${{ github.event.repository.name }} | ||
| NEXT_STATIC_EXPORT: "1" | ||
| - name: Upload artifact for GitHub Pages | ||
| uses: actions/upload-pages-artifact@v3 | ||
| with: | ||
| path: docs-site/out | ||
| - name: Deploy to GitHub Pages | ||
| id: deploy | ||
| uses: actions/deploy-pages@v4 | ||
| environment: | ||
| name: github-pages | ||
| url: ${{ steps.deploy.outputs.page_url }} | ||
