CI: Fix releases (#175)

* dependabot: automatically update GitHub Actions Signed-off-by: William Woodruff <[email protected]> * workflows/release: refactor to a release-first flow No longer creates the release; the releaser is expected to do that. Signed-off-by: William Woodruff <[email protected]> Signed-off-by: William Woodruff <[email protected]>
trailofbits · Nov 14, 2022 · 1a5330d · 1a5330d
1 parent 22e5f98
commit 1a5330d
Show file tree

Hide file tree

Showing 2 changed files with 15 additions and 15 deletions.
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -0,0 +1,7 @@
+version: 2
+
+updates:
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: daily
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -1,7 +1,7 @@
 on:
-  push:
-    tags:
-      - 'v*'
+  release:
+    types:
+      - published
 
 name: release
 
@@ -11,21 +11,14 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v2
-    - uses: actions/setup-python@v1
-      with:
-        python-version: 3.8
-    - name: create release
-      id: create_release
-      uses: actions/create-release@v1
-      env:
-        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+
+    - uses: actions/setup-python@v4
       with:
-        tag_name: ${{ github.ref }}
-        release_name: Release ${{ github.ref }}
-        draft: false
-        prerelease: ${{ contains(github.ref, 'pre') || contains(github.ref, 'rc') }}
+        python-version: "3.x"
+
     - name: sdist
       run: python3 setup.py sdist
+
     - name: publish
       uses: pypa/gh-action-pypi-publish@master
       with: