ext4-cli 0.0.1__tar.gz → 0.0.3__tar.gz

{ext4_cli-0.0.1 → ext4_cli-0.0.3}/.github/workflows/release.yml

@@ -56,6 +56,9 @@ jobs:
   build:
     name: Build ${{ matrix.target }}
     needs: test
+    # Guard: self-hosted runners only execute on trusted events (tag push,
+    # workflow_dispatch). Fork PRs must never dispatch jobs to self-hosted.
+    if: github.event_name != 'pull_request'
     strategy:
       matrix:
         include:
@@ -64,9 +67,9 @@ jobs:
           - target: aarch64-unknown-linux-gnu
             os: ubuntu-latest
           - target: x86_64-apple-darwin
-            os: macos-latest
+            os: [self-hosted, macOS, ARM64]
           - target: aarch64-apple-darwin
-            os: macos-latest
+            os: [self-hosted, macOS, ARM64]
     runs-on: ${{ matrix.os }}
     steps:
       - uses: actions/checkout@v4
@@ -81,8 +84,15 @@ jobs:
           sudo apt-get update
           sudo apt-get install -y gcc-aarch64-linux-gnu
 
+      - name: Install uv
+        uses: astral-sh/setup-uv@v6
+
       - name: Install maturin and zig
-        run: pip install maturin ziglang
+        shell: bash
+        run: |
+          uv venv "${RUNNER_TEMP}/build-venv"
+          uv pip install --python "${RUNNER_TEMP}/build-venv/bin/python" maturin ziglang
+          echo "${RUNNER_TEMP}/build-venv/bin" >> "$GITHUB_PATH"
 
       - name: Build wheel
         shell: bash
@@ -129,8 +139,14 @@ jobs:
     steps:
       - uses: actions/checkout@v4
 
+      - uses: astral-sh/setup-uv@v6
+
       - name: Install maturin
-        run: pip install maturin
+        shell: bash
+        run: |
+          uv venv "${RUNNER_TEMP}/build-venv"
+          uv pip install --python "${RUNNER_TEMP}/build-venv/bin/python" maturin
+          echo "${RUNNER_TEMP}/build-venv/bin" >> "$GITHUB_PATH"
 
       - name: Build sdist
         run: maturin sdist
@@ -154,7 +170,7 @@ jobs:
           path: /tmp/artifacts
 
       - name: Publish to crates.io
-        if: ${{ !inputs.dry_run && !inputs.skip_crates_io }}
+        if: ${{ !inputs.dry_run && !inputs.skip_crates_io && (github.ref_type == 'tag' || github.event_name != 'workflow_dispatch') }}
         run: cargo publish --locked
         env:
           CARGO_REGISTRY_TOKEN: ${{ secrets.CARGO_REGISTRY_TOKEN }}
@@ -171,8 +187,8 @@ jobs:
         uses: astral-sh/setup-uv@v6
 
       - name: Publish to PyPI
-        if: ${{ !inputs.dry_run && !inputs.skip_pypi }}
-        run: uv publish /tmp/artifacts/build-*/*.whl /tmp/artifacts/sdist/*.tar.gz
+        if: ${{ !inputs.dry_run && !inputs.skip_pypi && (github.ref_type == 'tag' || github.event_name != 'workflow_dispatch') }}
+        run: uv publish --check-url https://pypi.org/simple/ /tmp/artifacts/build-*/target/wheels/*.whl /tmp/artifacts/sdist/*.tar.gz
         env:
           UV_PUBLISH_TOKEN: ${{ secrets.PYPI_API_TOKEN }}
 
@@ -180,16 +196,16 @@ jobs:
         if: ${{ inputs.dry_run == true && !inputs.skip_pypi }}
         run: |
           echo "DRY RUN: Would upload to PyPI:"
-          find /tmp/artifacts/build-* -name "*.whl" -type f | sort
+          find /tmp/artifacts/build-*/target/wheels -name "*.whl" -type f | sort
           find /tmp/artifacts/sdist -name "*.tar.gz" -type f | sort
-          uv tool run twine check /tmp/artifacts/build-*/*.whl /tmp/artifacts/sdist/*.tar.gz
+          uv tool run twine check /tmp/artifacts/build-*/target/wheels/*.whl /tmp/artifacts/sdist/*.tar.gz
 
       - name: Skip PyPI publishing
         if: ${{ inputs.skip_pypi == true }}
         run: echo "Skipping PyPI publishing as requested"
 
       - name: Create GitHub Release
-        if: ${{ !inputs.dry_run && !inputs.skip_github_release }}
+        if: ${{ !inputs.dry_run && !inputs.skip_github_release && (github.ref_type == 'tag' || github.event_name != 'workflow_dispatch') }}
         run: |
           gh release create ${{ github.ref_name }} \
             --title "${{ github.ref_name }}" \
@@ -226,7 +242,7 @@ jobs:
 
       - name: Update Homebrew formula
         env:
-          GH_TOKEN: ${{ secrets.HOMEBREW_TAP_TOKEN }}
+          HOMEBREW_TAP_DEPLOY_KEY: ${{ secrets.HOMEBREW_TAP_DEPLOY_KEY }}
         run: |
           VERSION="${{ github.ref_name }}"
           VERSION_NUM="${VERSION#v}"
@@ -275,7 +291,15 @@ jobs:
           sed -i "s/SHA_AARCH64_UNKNOWN_LINUX_GNU/${{ steps.hashes.outputs.aarch64_unknown_linux_gnu }}/g" /tmp/ext4.rb
           sed -i "s/SHA_X86_64_UNKNOWN_LINUX_GNU/${{ steps.hashes.outputs.x86_64_unknown_linux_gnu }}/g" /tmp/ext4.rb
 
-          git clone https://x-access-token:${GH_TOKEN}@github.com/rvben/homebrew-tap.git /tmp/tap
+          # Authenticate to the tap with a write deploy key scoped to
+          # rvben/homebrew-tap. The key does not expire, so cross-repo pushes
+          # keep working without periodic token rotation.
+          mkdir -p ~/.ssh
+          echo "$HOMEBREW_TAP_DEPLOY_KEY" > ~/.ssh/id_ed25519
+          chmod 600 ~/.ssh/id_ed25519
+          ssh-keyscan -t ed25519 github.com >> ~/.ssh/known_hosts 2>/dev/null
+
+          git clone git@github.com:rvben/homebrew-tap.git /tmp/tap
           mkdir -p /tmp/tap/Formula
           cp /tmp/ext4.rb /tmp/tap/Formula/ext4.rb
           cd /tmp/tap

{ext4_cli-0.0.1 → ext4_cli-0.0.3}/CHANGELOG.md

@@ -4,6 +4,26 @@ All notable changes to this project will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/).
 
+
+
+## [0.0.3](https://github.com/rvben/ext4-cli/compare/v0.0.2...v0.0.3) - 2026-06-20
+
+### Fixed
+
+- **schema**: remove conflict error kind not emitted by the binary ([1105e6e](https://github.com/rvben/ext4-cli/commit/1105e6e2f3ca11580956847feec6e3a341f01d2b))
+
+## [0.0.2](https://github.com/rvben/ext4-cli/compare/v0.0.1...v0.0.2) - 2026-06-11
+
+### Added
+
+- add clispec v0.2 compliance (24/24 score) ([810bb87](https://github.com/rvben/ext4-cli/commit/810bb87f26c9091bda70acd862b62b5d153369d3))
+- add PyPI distribution via maturin ([6909fce](https://github.com/rvben/ext4-cli/commit/6909fcef7a0f00d39a50c9c3cbb4dfe6f1979c76))
+
+### Fixed
+
+- **ci**: use --check-url for uv publish to skip already-uploaded files ([ed9e19a](https://github.com/rvben/ext4-cli/commit/ed9e19a3c90afda0c272234cbe12f22612185bd6))
+- **ci**: correct wheel artifact path and add --skip-existing for PyPI publish ([9ec39c6](https://github.com/rvben/ext4-cli/commit/9ec39c62e618178f1dd855ef4114befef2c94f8b))
+
 ## [0.0.1] - 2026-04-13
 
 ### Added