fix: move to upstream semantic-release

.github/workflows/ci.yml

@@ -238,40 +238,47 @@ jobs:
       - docker-image
       - pre-commit
       - tensorflow
-    concurrency: release
     steps:
       - uses: tibdex/github-app-token@v1
-        if: ${{ github.event_name != 'pull_request' }}
         id: generate_token
         with:
           app_id: ${{ secrets.APP_ID }}
           private_key: ${{ secrets.APP_PRIVATE_KEY }}
 
       - uses: actions/checkout@v2
-        if: ${{ github.event_name != 'pull_request' }}
         with:
           fetch-depth: 0
           token: ${{ steps.generate_token.outputs.token }}
 
-      - uses: actions/checkout@v2
-        if: ${{ github.event_name == 'pull_request' }}
+      - uses: cachix/install-nix-action@v16
         with:
-          fetch-depth: 0
+          nix_path: nixpkgs=channel:nixos-unstable-small
 
-      - run: git config --global user.name "github-actions"
-      - run: git config --global user.email "[email protected]"
+      - uses: cachix/cachix-action@v10
+        with:
+          name: stupidb
+          extraPullNames: nix-community,poetry2nix
 
-      - uses: actions/setup-python@v2
+      - name: setup nodejs
+        uses: actions/setup-node@v2
         with:
-          python-version: "3.x"
+          node-version: 16
 
-      - run: pip install poetry python-semantic-release
+      - name: run semantic-release
+        run: |
+          set -euo pipefail
 
-      - run: semantic-release publish --verbosity=DEBUG
-        if: ${{ github.event_name != 'pull_request' }}
+          npx \
+            -p semantic-release \
+            -p "@semantic-release/commit-analyzer" \
+            -p "@semantic-release/release-notes-generator" \
+            -p "@semantic-release/changelog" \
+            -p "@semantic-release/github" \
+            -p "@semantic-release/exec"\
+            -p "@semantic-release/git" \
+            semantic-release \
+            --ci
         env:
-          GH_TOKEN: ${{ steps.generate_token.outputs.token }}
-          PYPI_TOKEN: ${{ secrets.PYPI_TOKEN }}
-
-      - run: semantic-release publish --noop --verbosity=DEBUG
-        if: ${{ github.event_name == 'pull_request' }}
+          POETRY_PYPI_TOKEN_PYPI: ${{ secrets.PYPI_TOKEN }}
+          GIT_CREDENTIALS: ${{ steps.generate_token.outputs.token }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.releaserc.json

@@ -0,0 +1,34 @@
+{
+  "branches": ["main"],
+  "plugins": [
+    "@semantic-release/commit-analyzer",
+    "@semantic-release/release-notes-generator",
+    [
+      "@semantic-release/changelog",
+      {
+        "changelogTitle": "# Release Notes"
+      }
+    ],
+    [
+      "@semantic-release/exec",
+      {
+        "verifyConditionsCmd": "ci/release/verify.sh",
+        "prepareCmd": "ci/release/prepare.sh ${nextRelease.version}",
+        "publishCmd": "ci/release/publish.sh"
+      }
+    ],
+    [
+      "@semantic-release/github",
+      {
+        "assets": ["dist/*.whl"]
+      }
+    ],
+    [
+      "@semantic-release/git",
+      {
+        "assets": ["pyproject.toml", "CHANGELOG.md"],
+        "message": "chore(release): ${nextRelease.version}"
+      }
+    ]
+  ]
+}

CHANGELOG.md

@@ -1,6 +1,4 @@
-# Changelog
-
-<!--next-version-placeholder-->
+# Release Notes
 
 ## v0.7.1 (2021-12-24)
 ### Documentation

ci/release/prepare.sh

@@ -0,0 +1,11 @@
+#!/usr/bin/env nix-shell
+#!nix-shell --pure -p poetry -i bash
+# shellcheck shell=bash
+
+set -euo pipefail
+
+# set version
+poetry version "$1"
+
+# build artifacts
+poetry build

ci/release/publish.sh

@@ -0,0 +1,7 @@
+#!/usr/bin/env nix-shell
+#!nix-shell --pure --keep POETRY_PYPI_TOKEN_PYPI -p poetry -i bash
+# shellcheck shell=bash
+
+set -euo pipefail
+
+poetry publish

ci/release/verify.sh

@@ -0,0 +1,15 @@
+#!/usr/bin/env nix-shell
+#!nix-shell --pure --keep POETRY_PYPI_TOKEN_PYPI -p poetry -p git -i bash
+# shellcheck shell=bash
+
+set -euo pipefail
+
+# verify TOML is sane
+poetry check
+
+# verify that the lock file is up to date
+poetry lock --no-update
+git diff --exit-code poetry.lock
+
+# verify that we have a token available to push to pypi using set -u
+: "${POETRY_PYPI_TOKEN_PYPI}"

flake.nix

@@ -234,14 +234,26 @@
               entry = "${pkgs.protoletariatDevEnv}/bin/mypy";
               types = [ "python" ];
             };
+
+            shellcheck = {
+              enable = true;
+              entry = "${pkgs.shellcheck}/bin/shellcheck";
+              files = "\\.sh$";
+              types_or = [ "file" ];
+            };
+
+            shfmt = {
+              enable = true;
+              entry = "${pkgs.shfmt}/bin/shfmt -i 2 -sr -d -s -l";
+              files = "\\.sh$";
+            };
           };
         };
       };
 
       devShell = pkgs.mkShell {
         nativeBuildInputs = with pkgs; [
           buf
-          commitizen
           grpc
           poetry
           prettierTOML

pyproject.toml

@@ -38,17 +38,6 @@ types-protobuf = "^3.18.1"
 [tool.poetry.scripts]
 protol = "protoletariat.__main__:main"
 
-[tool.semantic_release]
-version_toml = "pyproject.toml:tool.poetry.version"
-version_variable = ["protoletariat/__init__.py:__version__"]
-branch = "main"
-upload_to_pypi = true
-upload_to_release = true
-build_command = "poetry build"
-commit_subject = "chore(release): {version}"
-commit_author = "github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>"
-changelog_file = "CHANGELOG.md"
-
 [tool.pytest.ini_options]
 xfail_strict = true
 addopts = [