cleanup old scripts and move to --no-rcs shebang #26
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Build Python 3.9 | |
| env: | |
| TYPE: "recommended" | |
| DEV_INSTALLER_ID: "Developer ID Installer: Mac Admins Open Source (T4SK8ZXCXG)" | |
| DEV_APPLICATION_ID: "Developer ID Application: Mac Admins Open Source (T4SK8ZXCXG)" | |
| NOTARY_APP_PASSWORD: ${{ secrets.NOTARY_APP_PASSWORD_MAOS }} | |
| PYTHON_VERSION: "3.9.13" | |
| PYTHON_MAJOR_VERSION: "3.9" | |
| on: | |
| workflow_dispatch: | |
| pull_request: | |
| jobs: | |
| build: | |
| runs-on: macos-13 | |
| steps: | |
| - name: Checkout python repo | |
| uses: actions/checkout@24cb9080177205b6e8c946b17badbe402adc938f # v3.4.0 | |
| with: | |
| fetch-depth: 0 | |
| - name: Install Apple Developer ID Application certificates | |
| uses: apple-actions/import-codesign-certs@8f3fb608891dd2244cdab3d69cd68c0d37a7fe93 # v2.0.0 | |
| with: | |
| keychain-password: ${{ github.run_id }} | |
| p12-file-base64: ${{ secrets.APP_CERTIFICATES_P12_MAOS }} | |
| p12-password: ${{ secrets.APP_CERTIFICATES_P12_PASSWORD_MAOS }} | |
| - name: Install Apple Developer ID Installer certificates | |
| uses: apple-actions/import-codesign-certs@8f3fb608891dd2244cdab3d69cd68c0d37a7fe93 # v2.0.0 | |
| with: | |
| create-keychain: false # do not create a new keychain for this value | |
| keychain-password: ${{ github.run_id }} | |
| p12-file-base64: ${{ secrets.PKG_CERTIFICATES_P12_MAOS }} | |
| p12-password: ${{ secrets.PKG_CERTIFICATES_P12_PASSWORD_MAOS }} | |
| - name: Run build package script | |
| run: ./build_python_framework_pkgs.zsh "$TYPE" "$DEV_INSTALLER_ID" "$DEV_APPLICATION_ID" "$PYTHON_VERSION" "$PYTHON_MAJOR_VERSION" "${NOTARY_APP_PASSWORD}" | |
| - name: get environment variables | |
| id: get_env_var | |
| run: | | |
| echo "PYTHON_BUILD_VERSION=$(/bin/cat ./build_info.txt)" >> $GITHUB_ENV | |
| - name: Generate changelog | |
| id: changelog | |
| uses: metcalfc/changelog-generator@afdcb9470aebdb2252c0c95a1c130723c9e21f3a # v4.1 | |
| with: | |
| myToken: ${{ secrets.GITHUB_TOKEN }} | |
| reverse: 'true' | |
| - name: Create Release | |
| id: create_release | |
| uses: softprops/action-gh-release@de2c0eb89ae2a093876385947365aca7b0e5f844 # v0.1.15 | |
| with: | |
| name: Python ${{env.PYTHON_BUILD_VERSION}} | |
| tag_name: v${{env.PYTHON_BUILD_VERSION}} | |
| draft: false | |
| prerelease: true | |
| token: ${{ secrets.GITHUB_TOKEN }} | |
| body: | | |
| # Notes | |
| Python ${{env.PYTHON_VERSION}} Framework | |
| ## Changes | |
| - Upgraded Python to 3.9.13 | |
| **Note: Some of these updates may have breaking changes. Always test your code before deploying to production!** | |
| Please see the `requirements_recommended.txt` for the current libraries being used. | |
| ## Security Notice | |
| The python org [does not provide macOS packages for Python 3.9.14 and higher](https://www.python.org/downloads/release/python-3914/). This means that this project cannot use the most recent version of Python 3.9 with all security updates. Proceed with caution when using this release. | |
| > According to the release calendar specified in PEP 596, Python 3.9 is now in the "security fixes only" stage of its life cycle: the 3.9 branch only accepts security fixes and releases of those are made irregularly in source-only form until October 2025. Python 3.9 isn't receiving regular bug fixes anymore, and binary installers are no longer provided for it. Python 3.9.13 was the last full bugfix release of Python 3.9 with binary installers. | |
| ${{ steps.changelog.outputs.changelog }} | |
| # Flavors of Python | |
| At this time, the automated build process will **only** create the Recommended package | |
| ## Recommended | |
| This is a Python.framework that contains everything from minimal, and a few libraries that various well known open source projects require. | |
| ## Signing/Notarization | |
| The signed package is fully notarized, including the Python.framework file | |
| files: ${{github.workspace}}/outputs/*.pkg | |
| - name: Upload packages | |
| uses: actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce # v3.1.2 | |
| with: | |
| name: packages | |
| path: outputs/ |