repro-lambda 0.6.0__tar.gz → 0.6.1__tar.gz

{repro_lambda-0.6.0 → repro_lambda-0.6.1}/.github/workflows/build.yml

@@ -117,8 +117,10 @@ jobs:
 
       # Render the dev build's content shas + a copy-paste promotion command per function
       # into the run's Step Summary (the build JSON is otherwise buried in step logs).
+      # NB: the JSON lives in RUNNER_TEMP (outside the workspace), so hashFiles() can't guard
+      # it - run on success() and skip inside the script if the file is somehow absent.
       - name: Build summary (content shas + promote commands)
-        if: ${{ hashFiles(format('{0}/build-summary.json', runner.temp)) != '' }}
+        if: success()
         env:
           SUMMARY_JSON: ${{ runner.temp }}/build-summary.json
           PROMOTION_REPO: ${{ inputs.promotion_repo }}
@@ -129,9 +131,13 @@ jobs:
           SRC_COMMIT: ${{ github.sha }}
         run: |
           python3 - <<'PY'
-          import json, os
+          import json, os, sys
 
-          rows = json.load(open(os.environ["SUMMARY_JSON"]))
+          path = os.environ["SUMMARY_JSON"]
+          if not os.path.exists(path):
+              print(f"::notice::no build summary JSON at {path}; skipping summary.")
+              sys.exit(0)
+          rows = json.load(open(path))
           repo = os.environ["PROMOTION_REPO"]
           wf = os.environ["PROMOTION_WORKFLOW"]
           project = os.environ["PROJECT"]
@@ -151,18 +157,30 @@ jobs:
               out.append(
                   f"| `{r['logical_name']}` | {r['outcome']} | `{r['sha256']}` | `{r['bucket_key']}` |"
               )
-          out += ["", "### Promote to prod", ""]
+          out += [
+              "",
+              "### Pipeline",
+              "",
+              "1. **Build** (this run) - artifacts uploaded to the dev bucket, keyed by content sha.",
+              "2. **Pin dev** - point the dev stack's lambda pin at the sha below, then apply dev and test.",
+              "3. **Promote to prod** - run the promote command below (copies dev -> prod by content"
+              " sha + opens the prod-pin PR), then apply prod.",
+              "",
+              "### Per-function",
+              "",
+          ]
           for r in rows:
               fn, sha = r["logical_name"], r["sha256"]
-              out += [f"**`{fn}`** prod pin: `{fn} = \"{sha}\"`", ""]
+              out += [f"**`{fn}`** - content sha `{sha}`", "", f"- dev pin: `{fn} = \"{sha}\"`"]
               if repo:
                   out += [
+                      "- promote to prod:",
                       "```bash",
                       f"gh workflow run {wf} --repo {repo} "
                       f"-f project={project} -f function={fn} -f sha={sha}",
                       "```",
-                      "",
                   ]
+              out += [""]
 
           with open(os.environ["GITHUB_STEP_SUMMARY"], "a") as f:
               f.write("\n".join(out) + "\n")

{repro_lambda-0.6.0 → repro_lambda-0.6.1}/.github/workflows/ci.yml

@@ -3,7 +3,7 @@ name: ci
 on:
   pull_request:
   push:
-    branches: [main]
+    branches: [master]
 
 jobs:
   lint-and-test:

repro_lambda-0.6.1/.github/workflows/release.yml

@@ -0,0 +1,85 @@
+name: release
+
+# Automated releases via release-please. On every push to master, release-please
+# maintains a "release PR" that bumps the version (pyproject.toml + __init__.py) and
+# the CHANGELOG. Merging that PR creates the vX.Y.Z tag + GitHub Release, then this
+# same run publishes to PyPI (OIDC) and force-moves the sliding v0 major tag.
+#
+# Why publish here instead of relying on publish.yml's tag trigger: release-please
+# creates the tag via the GitHub API using GITHUB_TOKEN, and a GITHUB_TOKEN-created
+# tag does NOT trigger other workflows. So the publish + major-tag steps run as
+# release_created-gated jobs in this workflow. publish.yml / move-major-tag.yml stay
+# as the manual-tag fallback (a human can still `git tag vX.Y.Z && git push`).
+
+on:
+  push:
+    branches: [master]
+  workflow_dispatch:
+
+permissions: {}
+
+jobs:
+  release-please:
+    runs-on: ubuntu-24.04
+    permissions:
+      contents: write        # create the release commit, tag, and GitHub Release
+      pull-requests: write    # open/update the release PR
+      issues: write           # manage the autorelease:* labels
+    outputs:
+      release_created: ${{ steps.release.outputs.release_created }}
+      tag_name: ${{ steps.release.outputs.tag_name }}
+    steps:
+      - uses: googleapis/release-please-action@v5
+        id: release
+        with:
+          token: ${{ secrets.GITHUB_TOKEN }}
+          target-branch: master
+          config-file: release-please-config.json
+          manifest-file: .release-please-manifest.json
+
+  publish:
+    needs: release-please
+    if: ${{ needs.release-please.outputs.release_created == 'true' }}
+    runs-on: ubuntu-24.04
+    permissions:
+      id-token: write        # PyPI OIDC Trusted Publishing
+      contents: read
+    steps:
+      - uses: actions/checkout@v7
+      - uses: astral-sh/setup-uv@v8.2.0
+      - run: uv sync --all-extras
+      - name: Verify tag matches package version
+        env:
+          TAG_NAME: ${{ needs.release-please.outputs.tag_name }}
+        run: |
+          TAG="${TAG_NAME#v}"
+          PKG=$(uv run python -c "import repro_lambda; print(repro_lambda.__version__)")
+          if [[ "$TAG" != "$PKG" ]]; then
+            echo "tag $TAG != package version $PKG" >&2
+            exit 1
+          fi
+      - name: Build sdist + wheel
+        run: uv build
+      - name: Publish to PyPI
+        uses: pypa/gh-action-pypi-publish@release/v1
+        with:
+          packages-dir: dist/
+
+  major-tag:
+    needs: release-please
+    if: ${{ needs.release-please.outputs.release_created == 'true' }}
+    runs-on: ubuntu-24.04
+    permissions:
+      contents: write
+    steps:
+      - uses: actions/checkout@v7
+        with:
+          fetch-depth: 0
+          fetch-tags: true
+      - name: Force-move sliding major tag
+        env:
+          TAG: ${{ needs.release-please.outputs.tag_name }}
+        run: |
+          MAJOR="${TAG%%.*}"   # v0.4.1 -> v0
+          git tag -f "$MAJOR" "$TAG"
+          git push -f origin "refs/tags/$MAJOR"

repro_lambda-0.6.1/.release-please-manifest.json

@@ -0,0 +1,3 @@
+{
+  ".": "0.6.1"
+}

{repro_lambda-0.6.0 → repro_lambda-0.6.1}/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## [0.6.1](https://github.com/antonbabenko/repro-lambda/compare/v0.6.0...v0.6.1) (2026-06-22)
+
+
+### Bug Fixes
+
+* **ci:** render the build Step Summary (hashFiles cannot guard a RUNNER_TEMP file) ([#5](https://github.com/antonbabenko/repro-lambda/issues/5)) ([4fadb30](https://github.com/antonbabenko/repro-lambda/commit/4fadb307136f4dffd8c7e6bf5303d79f1a641f5a))
+
 ## v0.5.2 - 2026-06-21
 
 ### Fixed

{repro_lambda-0.6.0 → repro_lambda-0.6.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: repro-lambda
-Version: 0.6.0
+Version: 0.6.1
 Summary: Build reproducible AWS Lambda packages outside Terraform, optimized for terraform-aws-lambda by serverless.tf.
 Project-URL: Homepage, https://github.com/antonbabenko/repro-lambda
 Project-URL: Repository, https://github.com/antonbabenko/repro-lambda

{repro_lambda-0.6.0 → repro_lambda-0.6.1}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "repro-lambda"
-version = "0.6.0"
+version = "0.6.1"
 description = "Build reproducible AWS Lambda packages outside Terraform, optimized for terraform-aws-lambda by serverless.tf."
 readme = "README.md"
 requires-python = ">=3.11"

repro_lambda-0.6.1/release-please-config.json

@@ -0,0 +1,26 @@
+{
+  "$schema": "https://raw.githubusercontent.com/googleapis/release-please/main/schemas/config.json",
+  "packages": {
+    ".": {
+      "release-type": "python",
+      "package-name": "repro-lambda",
+      "include-component-in-tag": false,
+      "bump-minor-pre-major": true,
+      "bump-patch-for-minor-pre-major": false,
+      "changelog-path": "CHANGELOG.md",
+      "extra-files": [
+        "src/repro_lambda/__init__.py"
+      ],
+      "changelog-sections": [
+        { "type": "feat", "section": "Features" },
+        { "type": "fix", "section": "Bug Fixes" },
+        { "type": "perf", "section": "Performance Improvements" },
+        { "type": "refactor", "section": "Code Refactoring" },
+        { "type": "docs", "section": "Documentation" },
+        { "type": "test", "section": "Tests", "hidden": true },
+        { "type": "chore", "section": "Miscellaneous", "hidden": true },
+        { "type": "ci", "section": "Continuous Integration", "hidden": true }
+      ]
+    }
+  }
+}

{repro_lambda-0.6.0 → repro_lambda-0.6.1}/src/repro_lambda/__init__.py

@@ -1,3 +1,3 @@
 """repro-lambda — reproducible AWS Lambda packaging outside Terraform."""
 
-__version__ = "0.6.0"
+__version__ = "0.6.1"  # x-release-please-version

{repro_lambda-0.6.0 → repro_lambda-0.6.1}/uv.lock

@@ -646,7 +646,7 @@ wheels = [
 
 [[package]]
 name = "repro-lambda"
-version = "0.6.0"
+version = "0.6.1"
 source = { editable = "." }
 dependencies = [
     { name = "boto3" },