release: v1.9.15

Author: pirate

.github/workflows/publish.yml

@@ -0,0 +1,37 @@
+name: Publish to PyPI
+
+on:
+  release:
+    types: [published]
+
+permissions:
+  contents: read
+  id-token: write
+
+jobs:
+  publish:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 1
+
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+
+      - uses: astral-sh/setup-uv@v6
+        with:
+          enable-cache: true
+
+      - run: uv sync --all-extras --no-cache --upgrade
+      - run: uv build
+      - name: Publish package
+        env:
+          UV_PUBLISH_TOKEN: ${{ secrets.PYPI_PAT_SECRET }}
+        run: |
+          if [[ -n "${UV_PUBLISH_TOKEN:-}" ]]; then
+            uv publish
+          else
+            uv publish --trusted-publishing always
+          fi

.github/workflows/release.yml

@@ -0,0 +1,38 @@
+name: Release State
+
+on:
+  push:
+    branches:
+      - '**'
+  workflow_dispatch:
+
+permissions:
+  contents: write
+  id-token: write
+
+jobs:
+  release-state:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+          ref: ${{ github.ref_name }}
+
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+
+      - uses: astral-sh/setup-uv@v6
+        with:
+          enable-cache: true
+
+      - name: Configure git identity
+        run: |
+          git config user.name "github-actions[bot]"
+          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
+
+      - name: Run release script
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: ./bin/release.sh

abx_pkg/binprovider.py

@@ -86,6 +86,11 @@
 UNKNOWN_ABSPATH = Path("/usr/bin/true")
 UNKNOWN_VERSION = cast(SemVer, SemVer.parse("999.999.999"))
 
+
+def env_flag_is_true(name: str) -> bool:
+    return os.getenv(name, "").strip().lower() in {"1", "true", "yes", "on"}
+
+
 ################## VALIDATORS #######################################
 
 NEVER_CACHE = (
@@ -409,6 +414,10 @@ def EUID(self) -> int:
 
         return self.detect_euid()
 
+    @property
+    def DRY_RUN(self) -> bool:
+        return self._dry_run or env_flag_is_true("DRY_RUN")
+
     @computed_field
     @property
     def INSTALLER_BIN_ABSPATH(self) -> HostBinPath | None:
@@ -856,7 +865,7 @@ def exec(
             f"cwd must be a valid, accessible directory: {cwd}"
         )
         cmd = [str(bin_abspath), *(str(arg) for arg in cmd)]
-        if self._dry_run:
+        if self.DRY_RUN:
             logger.info(
                 "DRY RUN (%s): %s",
                 self.__class__.__name__,
@@ -883,7 +892,7 @@ def drop_privileges():
             except Exception:
                 pass
 
-        if self._dry_run:
+        if self.DRY_RUN:
             return subprocess.CompletedProcess(cmd, 0, "", "skipped (dry run)")
 
         return subprocess.run(
@@ -1103,7 +1112,7 @@ def install(
             if not quiet:
                 raise
 
-        if self._dry_run:
+        if self.DRY_RUN:
             # return fake ShallowBinary if we're just doing a dry run
             # no point trying to get real abspath or version if nothing was actually installed
             return ShallowBinary.model_validate(
@@ -1200,7 +1209,7 @@ def update(
             if not quiet:
                 raise
 
-        if self._dry_run:
+        if self.DRY_RUN:
             return ShallowBinary.model_validate(
                 {
                     "name": bin_name,
@@ -1289,7 +1298,7 @@ def uninstall(
 
         self.invalidate_cache(bin_name)
 
-        if self._dry_run:
+        if self.DRY_RUN:
             return True
 
         if uninstall_result is not False: