ci: make and publish fixes after uv migration
What the developer wrote
Authored by ShahanaFarooqui
ci: make and publish fixes after uv migration
Changelog-None.
What changed, and why it matters
This is a routine fix to the project's automated Python package publishing workflow after switching to a new Python tooling system called 'uv'. It changes command-line options and a Makefile target name so packages build and publish correctly. There is no security issue visible in the commit.
No security action needed; this is a normal CI maintenance patch.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The commit updates .github/workflows/pypi.yml to match the uv CLI: it replaces –package and –skip-existing flags with –check-url for TestPyPI, and changes the Makefile target from upgrade-version to update-pyln-versions. These are build/pipeline maintenance changes with no apparent security implications.
Changed components
.github/workflows/pypi.ymlInspect captured patch +3 / −3
diff --git a/.github/workflows/pypi.yml b/.github/workflows/pypi.yml
index b96d3350..3ab33513 100644
--- a/.github/workflows/pypi.yml
+++ b/.github/workflows/pypi.yml
@@ -75,7 +75,7 @@ jobs:
run: |
echo "Pyln VERSION: $VERSION"
uv build --package ${{ matrix.PACKAGE }}
- uv publish --package ${{ matrix.PACKAGE }} --publish-url https://test.pypi.org/legacy/ --skip-existing
+ uv publish --publish-url https://test.pypi.org/legacy/ --check-url https://test.pypi.org/simple/
- name: Publish distribution 📦 to PyPI
if: github.repository == 'ElementsProject/lightning' && steps.set-values.outputs.DISTLOCATION == 'prod'
@@ -87,7 +87,7 @@ jobs:
cd ${{ env.WORKDIR }}
export VERSION=$(git describe --tags --abbrev=0)
echo "Pyln VERSION: $VERSION"
- make upgrade-version NEW_VERSION=$VERSION
+ make update-pyln-versions NEW_VERSION=$VERSION
cd /github/workspace
uv build --package ${{ matrix.PACKAGE }}
- uv publish --package ${{ matrix.PACKAGE }}
+ uv publish
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.