release-flow

Automate Python package publishing to PyPI using GitHub Actions by configuring trusted publishing within a multi-stage release pipeline. This approach integrates semantic-release to handle version bumping and orchestrates the workflow to push packages automatically upon merging conventional commits.

Semantic release automates versioning by parsing conventional commit messages to determine the bump type. Patch, minor, or major version increments are applied automatically, generating an updated changelog and creating a new release tag without manual intervention.

Build and push multi-arch Docker images to GHCR by orchestrating the build process within GitHub Actions. The release pipeline triggers image creation and pushes the multi-architecture manifests directly to the GitHub Container Registry alongside PyPI publishing.

Yes, GitHub Actions supports trusted publishing for PyPI releases. The release pipeline orchestrates this OIDC-based trusted publishing mechanism, eliminating the need for long-lived API tokens and securely authenticating the workflow directly with PyPI.

Generate a changelog automatically from conventional commits by integrating semantic-release into your CI/CD pipeline. The tool reads commit history, determines the version bump, and writes the corresponding changelog entries during the automated release workflow.

The best way to manage a multi-stage release workflow for Docker and PyPI is orchestrating GitHub Actions to handle both targets. A unified pipeline uses semantic-release for tagging, then concurrently publishes to PyPI via trusted publishing and builds multi-arch images for GHCR.