dependabot[bot]
555c378e7a
Bumps [metcalfc/changelog-generator](https://github.com/metcalfc/changelog-generator) from b794d7e4101afb6a8fe5c97eaedaf789d43b1288 to 0440d0932f9a0dd1cc9ecd8412830761351323bd. - [Release notes](https://github.com/metcalfc/changelog-generator/releases) - [Changelog](https://github.com/metcalfc/changelog-generator/blob/main/release-notes.png) - [Commits](https://github.com/metcalfc/changelog-generator/compare/b794d7e4101afb6a8fe5c97eaedaf789d43b1288...0440d0932f9a0dd1cc9ecd8412830761351323bd) --- updated-dependencies: - dependency-name: metcalfc/changelog-generator dependency-version: 0440d0932f9a0dd1cc9ecd8412830761351323bd dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
97 lines
3.5 KiB
YAML
97 lines
3.5 KiB
YAML
name: Build Python 3.11
|
|
|
|
env:
|
|
TYPE: "recommended"
|
|
DEV_INSTALLER_ID: "Developer ID Installer: Mac Admins Open Source (T4SK8ZXCXG)"
|
|
DEV_APPLICATION_ID: "Developer ID Application: Mac Admins Open Source (T4SK8ZXCXG)"
|
|
NOTARY_APP_PASSWORD: ${{ secrets.NOTARY_APP_PASSWORD_MAOS }}
|
|
PYTHON_VERSION: "3.11.9"
|
|
PYTHON_MAJOR_VERSION: "3.11"
|
|
|
|
on:
|
|
workflow_dispatch:
|
|
pull_request:
|
|
|
|
jobs:
|
|
build:
|
|
runs-on: macos-26
|
|
|
|
steps:
|
|
- name: Checkout python repo
|
|
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
|
|
with:
|
|
fetch-depth: 0
|
|
|
|
- name: Install Apple Developer ID Application certificates
|
|
uses: apple-actions/import-codesign-certs@b2e261033a9e248f91a9b57201e8d1e12b15a24e # v7.0.0
|
|
with:
|
|
keychain-password: ${{ github.run_id }}
|
|
p12-file-base64: ${{ secrets.APP_CERTIFICATES_P12_MAOS }}
|
|
p12-password: ${{ secrets.APP_CERTIFICATES_P12_PASSWORD_MAOS }}
|
|
|
|
- name: Install Apple Developer ID Installer certificates
|
|
uses: apple-actions/import-codesign-certs@b2e261033a9e248f91a9b57201e8d1e12b15a24e # v7.0.0
|
|
with:
|
|
create-keychain: false # do not create a new keychain for this value
|
|
keychain-password: ${{ github.run_id }}
|
|
p12-file-base64: ${{ secrets.PKG_CERTIFICATES_P12_MAOS }}
|
|
p12-password: ${{ secrets.PKG_CERTIFICATES_P12_PASSWORD_MAOS }}
|
|
|
|
- name: Run build package script
|
|
run: |
|
|
./build_python_framework_pkgs.zsh \
|
|
--python-version "$PYTHON_VERSION" \
|
|
--installer-id "$DEV_INSTALLER_ID" \
|
|
--application-id "$DEV_APPLICATION_ID" \
|
|
--notary-password "$NOTARY_APP_PASSWORD"
|
|
|
|
- name: get environment variables
|
|
id: get_env_var
|
|
run: |
|
|
echo "PYTHON_BUILD_VERSION=$(/bin/cat ./build_info.txt)" >> $GITHUB_ENV
|
|
|
|
- name: Generate changelog
|
|
id: changelog
|
|
uses: metcalfc/changelog-generator@0440d0932f9a0dd1cc9ecd8412830761351323bd # v4.7.0
|
|
with:
|
|
myToken: ${{ secrets.GITHUB_TOKEN }}
|
|
reverse: 'true'
|
|
|
|
- name: Create Release
|
|
id: create_release
|
|
uses: softprops/action-gh-release@b4309332981a82ec1c5618f44dd2e27cc8bfbfda # v3.0.0
|
|
with:
|
|
name: Python ${{env.PYTHON_BUILD_VERSION}}
|
|
tag_name: v${{env.PYTHON_BUILD_VERSION}}
|
|
draft: false
|
|
prerelease: true
|
|
token: ${{ secrets.GITHUB_TOKEN }}
|
|
body: |
|
|
# Notes
|
|
Python ${{env.PYTHON_VERSION}} Framework
|
|
|
|
## Changes
|
|
- Upgraded Python to 3.11.9
|
|
**Note: Some of these updates may have breaking changes. Always test your code before deploying to production!**
|
|
|
|
Please see the `requirements_recommended.txt` for the current libraries being used.
|
|
|
|
## Final Release
|
|
**This is the final release of the Python 3.11 framework for Intel macs.** macOS 27 will ship without Intel support so please plan your migration soon.
|
|
|
|
# Flavors of Python
|
|
At this time, the automated build process will **only** create the Recommended package
|
|
|
|
## Recommended
|
|
This is a Python.framework with a recommended set of libraries for tools like Autopkg, Munki, and InstallApplications.
|
|
|
|
## Signing/Notarization
|
|
The signed package is fully notarized, including the Python.framework file
|
|
files: ${{github.workspace}}/outputs/*.pkg
|
|
|
|
- name: Upload packages
|
|
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
|
|
with:
|
|
name: packages
|
|
path: outputs/
|