Skip to content

Resolve upstream Python build tag #40

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
adilhusain-s wants to merge 1 commit into
base: main
Choose a base branch
from
+55 −4
Open

Resolve upstream Python build tag #40

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 4 additions & 2 deletions Makefile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -16,8 +16,10 @@ else
endif

# Versioning
PYTHON_VERSION ?= 3.13.3
ACTIONS_PYTHON_VERSIONS ?= 3.15.0-alpha.5-21016111327
PYTHON_VERSION ?= 3.14.5
# Auto-resolve from upstream releases unless explicitly overridden.
# To pin a specific tag: make ACTIONS_PYTHON_VERSIONS=3.14.4-25113653268 ...
ACTIONS_PYTHON_VERSIONS ?= $(shell ./scripts/resolve-upstream-tag.sh $(PYTHON_VERSION))
POWERSHELL_VERSION ?= v7.5.2
POWERSHELL_NATIVE_VERSION ?= v7.4.0
UBUNTU_VERSION ?= 24.04
Expand Down
4 changes: 2 additions & 2 deletions python-versions/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,8 +2,8 @@
ARG UBUNTU_VERSION=24.04
ARG BASE_IMAGE=powershell:ubuntu-${UBUNTU_VERSION}
ARG TARGETARCH
ARG PYTHON_VERSION=3.13.3
ARG ACTIONS_PYTHON_VERSIONS=3.13.3-14344076652
ARG PYTHON_VERSION=3.14.5
ARG ACTIONS_PYTHON_VERSIONS=3.14.5-25647354415
ARG TRIVY_VERSION=v0.68.1

# ================= BUILDER STAGE =====================
Expand Down
49 changes: 49 additions & 0 deletions scripts/resolve-upstream-tag.sh
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,49 @@
#!/usr/bin/env bash
# ------------------------------------------------------------------------------
# resolve-upstream-tag.sh
#
# Resolves a Python version (e.g., "3.14.5" or "3.15.0-beta.1") to the
# corresponding source-code tag from the actions/python-versions upstream
# repository by querying its GitHub releases.
#
# Usage:
# ./scripts/resolve-upstream-tag.sh <python-version>
#
# Examples:
# ./scripts/resolve-upstream-tag.sh 3.14.5 # → 3.14.5-25647354415
# ./scripts/resolve-upstream-tag.sh 3.15.0-beta.1 # → 3.15.0-beta.1-25533511631
#
# In CI: set GITHUB_TOKEN or GH_TOKEN for authenticated requests.
# Locally: runs without auth (unauthenticated requests work but have lower
# GitHub API rate limits).
# ------------------------------------------------------------------------------
set -euo pipefail

if [ $# -ne 1 ]; then
echo "Usage: $0 <python-version>" >&2
exit 1
fi

PYTHON_VERSION="$1"
UPSTREAM_REPO="actions/python-versions"

# Use GITHUB_TOKEN or GH_TOKEN if available, otherwise run unauthenticated
TOKEN="${GITHUB_TOKEN:-${GH_TOKEN:-}}"
AUTH_HEADER=""
if [ -n "$TOKEN" ]; then
AUTH_HEADER="-H \"Authorization: Bearer $TOKEN\""
fi

# Query the upstream releases API and find the release whose name
# matches the requested Python version exactly.
TAG_NAME=$(eval curl -sL "$AUTH_HEADER" \
"https://api.github.com/repos/${UPSTREAM_REPO}/releases" \
| jq -r --arg ver "$PYTHON_VERSION" \
'[.[] | select(.name == $ver)] | first | .tag_name // empty')

if [ -z "$TAG_NAME" ]; then
echo "ERROR: Could not find upstream release matching Python version '$PYTHON_VERSION' in $UPSTREAM_REPO" >&2
exit 1
fi

echo "$TAG_NAME"
Loading