Skip to content

ci(ingestion): add manual package release workflow - #585

Merged
mehulp93 merged 1 commit into
mainfrom
feat/manual-ingestion-release
Jul 30, 2026
Merged

ci(ingestion): add manual package release workflow#585
mehulp93 merged 1 commit into
mainfrom
feat/manual-ingestion-release

Conversation

@mehulp93

@mehulp93 mehulp93 commented Jul 30, 2026

Copy link
Copy Markdown
Collaborator

Summary

  • make zep-ingest releases manual-only through workflow_dispatch
  • require releases to run from main and match the version declared in ingestion/pyproject.toml
  • test and build the exact resolved commit before creating the matching tag and GitHub Release
  • publish the validated distribution to PyPI through trusted publishing and document the manual release process

Why

The ingestion package release workflow previously required a GitHub Release to be published before its validation and publishing jobs could run. A manual workflow provides the same operator-driven release path as the repository's other release automation while preserving exact-source, version, and tag validation.

Validation

  • ran actionlint with ShellCheck and Pyflakes enabled
  • exercised valid manual dispatch, wrong-branch rejection, and version-mismatch rejection
  • exercised new-tag release creation, existing-release retry, and conflicting-tag rejection paths
  • ran git diff --check

@mehulp93 mehulp93 changed the title fix(python): ship PEP 561 markers for all published packages ingestion-package: fix release workflow Jul 30, 2026

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Critical

  • .github/workflows/release-ingestion.yml:184 — If a GitHub Release exists but its Git tag was deleted, TAG_EXISTS remains false while gh release view succeeds. The workflow then skips tag creation and publishes to PyPI without a validated source tag, despite claiming the release is “at the validated commit.” Fix by failing when the release exists without its tag, or recreate the tag at RELEASE_SHA and verify it before publishing.

@mehulp93
mehulp93 force-pushed the feat/manual-ingestion-release branch from d1a6fc4 to d5a2702 Compare July 30, 2026 01:40
@mehulp93 mehulp93 changed the title ingestion-package: fix release workflow ci(ingestion): add manual package release workflow Jul 30, 2026

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No actionable findings. The workflow change appears correct, securely validates the release source/version, handles existing tags safely, and follows repository conventions.

@mehulp93
mehulp93 merged commit 3ee8929 into main Jul 30, 2026
10 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant