68f9a0992d
chore: pin publish workflow actions by SHA
2026-09-03 20:32:51 -07:00
8db8283af3
chore: pin uv in publish workflow
2026-09-03 20:32:51 -07:00
1186d4cc44
publish: gate publish_to_pypi behind release env
...
browser-use ships to PyPI via OIDC trusted-publishing today, but the
publish job had no environment gate — anyone with workflow-dispatch
access (or any token with workflow scope) could trigger a publish
single-handedly. Adds:
- environment: release on publish_to_pypi
Reviewers configured separately on the env: gregpr07, MagMueller,
sauravpanda. prevent_self_review:true so the dispatcher cannot
self-approve.
- Fail-closed preflight that verifies the env still has required
reviewers and prevent_self_review enabled before publishing.
Same check the sdk pipeline uses. Guards against silent env
config drift.
- actions: read permission on the publish job for the env check.
Does NOT change the trigger model (release:published + workflow_dispatch),
does NOT touch tag_pre_release, does NOT touch the trusted-publishing
publish command itself. Minimal change, single security win:
two-person rule on every PyPI release.
Refs ENG-4762.
2026-06-10 15:31:33 +02:00
636470a1aa
Allow manual publish without auto tag
2026-06-08 11:15:14 -07:00
b31c3ab0b4
no sync pip
2025-10-24 01:24:41 -07:00
aba7e2cbae
cancel tests on new commit
2025-09-08 08:52:25 -07:00
caa0e7ef1b
Rename controller to tools instances
2025-08-26 11:30:39 -07:00
d96b6f4b23
update pip workflow file
2025-08-18 17:28:37 -07:00
7d0fb62bda
dont re-run entire tests suite before pypi release
2025-06-30 04:35:51 -04:00
cdf0706f20
only create pre-release versions manually
2025-06-12 10:49:04 -07:00
ffd36eb5da
tweak env vars for CI
2025-06-10 03:58:37 -07:00
04a3c881df
add docker setting for ci
2025-05-23 22:22:10 -07:00
cacc7c2020
allow running publish manually
2025-05-23 22:18:09 -07:00
8e8f9a2381
allow running publish manually
2025-05-23 22:17:09 -07:00
4196e79faa
fix publish action
2025-05-23 22:15:34 -07:00
815ae48938
fix pypi publish action
2025-05-23 18:21:18 -07:00
405bf63c9b
prevent github actions from running twice for each commit
2025-04-28 05:09:28 +08:00
e280cab621
revert: deploy only on release
2025-04-17 14:27:07 +02:00
7cefa730d3
Temporarily allow deploy on push to main (hotfix release)
2025-04-17 14:24:47 +02:00
6862feb0e1
don't deploy on every push
2025-04-17 14:19:46 +02:00
52b9327767
update publish workflow, id-token write permission needed to deploy to pup
2025-04-17 13:50:30 +02:00
a8e7b42e74
Fix the ignored pytests
2025-03-29 13:25:28 +05:30
222aff332a
updated python version in publish.yml
2025-03-29 13:22:22 +05:30
bf9aca838b
Apply suggestions from code review
...
updated the github action
Co-authored-by: Christian Clauss <cclauss@me.com >
2025-03-29 12:03:43 +05:30
4539e5da19
Update workflow to use uv for build and publish; comment out broken tests
2025-03-29 10:21:03 +05:30
20b45e7cef
added the comment in publish.yml
2025-03-28 15:42:44 +05:30
6fc5f10931
Merge branch 'main' into #1174
2025-03-28 15:39:23 +05:30
79a6b40e56
feat: Update GitHub Actions workflow and documentation for branching and tagging strategy
2025-03-28 15:36:05 +05:30
8006a8d5fc
Removed hatch and added comment on devops
2025-03-16 18:19:01 -07:00
680c2859e7
fix : browser-use/browser-use#214
2025-01-12 00:43:03 +05:30
00f2c3de0c
pypi release files
2024-11-06 18:55:31 +01:00
MagMueller