Fix a deprecation msg typo in the ancient branch: "migrading"->"migrating" (#212 )

Add deprecationMessage to all inputs @ master
Render a depecation message in job summary.
2026-07-04 11:14:07 +00:00 · 2024-02-27 04:59:28 +01:00 · 2023-07-13 17:06:59 +02:00 · 2023-07-13 17:06:59 +02:00 · 2022-07-25 17:29:21 +02:00
2 changed files with 189 additions and 0 deletions
@@ -4,34 +4,186 @@ description: Upload Python distribution packages to PyPI
 inputs:
  user:
    description: PyPI user
+    deprecationMessage: >
+      UNSUPPORTED GITHUB ACTION VERSION
+
+
+      You are using `pypa/gh-action-pypi-publish@master`.
+      The `master` branch of this project has been sunset and will not
+      receive any updates, not even security bug fixes. Please, make
+      sure to use a supported version. If you want to pin to v1 major
+      version, use `pypa/gh-action-pypi-publish@release/v1`. If you
+      feel adventurous, you may opt to use use
+      `pypa/gh-action-pypi-publish@unstable/v1` instead. A more
+      general recommendation is to pin to exact tags or commit SHAs.
+
+
+      Please also consider migrating your setup to use secretless publishing:
+      https://github.com/marketplace/actions/pypi-publish#trusted-publishing
+
+
+      https://stand-with-ukraine.pp.ua
    required: false
    default: __token__
  password:
    description: Password for your PyPI user or an access token
+    deprecationMessage: >
+      UNSUPPORTED GITHUB ACTION VERSION
+
+
+      You are using `pypa/gh-action-pypi-publish@master`.
+      The `master` branch of this project has been sunset and will not
+      receive any updates, not even security bug fixes. Please, make
+      sure to use a supported version. If you want to pin to v1 major
+      version, use `pypa/gh-action-pypi-publish@release/v1`. If you
+      feel adventurous, you may opt to use use
+      `pypa/gh-action-pypi-publish@unstable/v1` instead. A more
+      general recommendation is to pin to exact tags or commit SHAs.
+
+
+      Please also consider migrating your setup to use secretless publishing:
+      https://github.com/marketplace/actions/pypi-publish#trusted-publishing
+
+
+      https://stand-with-ukraine.pp.ua
    required: true
  repository_url:
    description: The repository URL to use
+    deprecationMessage: >
+      UNSUPPORTED GITHUB ACTION VERSION
+
+
+      You are using `pypa/gh-action-pypi-publish@master`.
+      The `master` branch of this project has been sunset and will not
+      receive any updates, not even security bug fixes. Please, make
+      sure to use a supported version. If you want to pin to v1 major
+      version, use `pypa/gh-action-pypi-publish@release/v1`. If you
+      feel adventurous, you may opt to use use
+      `pypa/gh-action-pypi-publish@unstable/v1` instead. A more
+      general recommendation is to pin to exact tags or commit SHAs.
+
+
+      Please also consider migrating your setup to use secretless publishing:
+      https://github.com/marketplace/actions/pypi-publish#trusted-publishing
+
+
+      https://stand-with-ukraine.pp.ua
    required: false
  packages_dir:
    description: The target directory for distribution
+    deprecationMessage: >
+      UNSUPPORTED GITHUB ACTION VERSION
+
+
+      You are using `pypa/gh-action-pypi-publish@master`.
+      The `master` branch of this project has been sunset and will not
+      receive any updates, not even security bug fixes. Please, make
+      sure to use a supported version. If you want to pin to v1 major
+      version, use `pypa/gh-action-pypi-publish@release/v1`. If you
+      feel adventurous, you may opt to use use
+      `pypa/gh-action-pypi-publish@unstable/v1` instead. A more
+      general recommendation is to pin to exact tags or commit SHAs.
+
+
+      Please also consider migrating your setup to use secretless publishing:
+      https://github.com/marketplace/actions/pypi-publish#trusted-publishing
+
+
+      https://stand-with-ukraine.pp.ua
    required: false
    default: dist
  verify_metadata:
    description: Check metadata before uploading
+    deprecationMessage: >
+      UNSUPPORTED GITHUB ACTION VERSION
+
+
+      You are using `pypa/gh-action-pypi-publish@master`.
+      The `master` branch of this project has been sunset and will not
+      receive any updates, not even security bug fixes. Please, make
+      sure to use a supported version. If you want to pin to v1 major
+      version, use `pypa/gh-action-pypi-publish@release/v1`. If you
+      feel adventurous, you may opt to use use
+      `pypa/gh-action-pypi-publish@unstable/v1` instead. A more
+      general recommendation is to pin to exact tags or commit SHAs.
+
+
+      Please also consider migrating your setup to use secretless publishing:
+      https://github.com/marketplace/actions/pypi-publish#trusted-publishing
+
+
+      https://stand-with-ukraine.pp.ua
    required: false
    default: true
  skip_existing:
    description: >-
      Do not fail if a Python package distribution
      exists in the target package index
+    deprecationMessage: >
+      UNSUPPORTED GITHUB ACTION VERSION
+
+
+      You are using `pypa/gh-action-pypi-publish@master`.
+      The `master` branch of this project has been sunset and will not
+      receive any updates, not even security bug fixes. Please, make
+      sure to use a supported version. If you want to pin to v1 major
+      version, use `pypa/gh-action-pypi-publish@release/v1`. If you
+      feel adventurous, you may opt to use use
+      `pypa/gh-action-pypi-publish@unstable/v1` instead. A more
+      general recommendation is to pin to exact tags or commit SHAs.
+
+
+      Please also consider migrating your setup to use secretless publishing:
+      https://github.com/marketplace/actions/pypi-publish#trusted-publishing
+
+
+      https://stand-with-ukraine.pp.ua
    required: false
    default: false
  verbose:
    description: Show verbose output.
+    deprecationMessage: >
+      UNSUPPORTED GITHUB ACTION VERSION
+
+
+      You are using `pypa/gh-action-pypi-publish@master`.
+      The `master` branch of this project has been sunset and will not
+      receive any updates, not even security bug fixes. Please, make
+      sure to use a supported version. If you want to pin to v1 major
+      version, use `pypa/gh-action-pypi-publish@release/v1`. If you
+      feel adventurous, you may opt to use use
+      `pypa/gh-action-pypi-publish@unstable/v1` instead. A more
+      general recommendation is to pin to exact tags or commit SHAs.
+
+
+      Please also consider migrating your setup to use secretless publishing:
+      https://github.com/marketplace/actions/pypi-publish#trusted-publishing
+
+
+      https://stand-with-ukraine.pp.ua
    required: false
    default: false
  print_hash:
    description: Show hash values of files to be uploaded
+    deprecationMessage: >
+      UNSUPPORTED GITHUB ACTION VERSION
+
+
+      You are using `pypa/gh-action-pypi-publish@master`.
+      The `master` branch of this project has been sunset and will not
+      receive any updates, not even security bug fixes. Please, make
+      sure to use a supported version. If you want to pin to v1 major
+      version, use `pypa/gh-action-pypi-publish@release/v1`. If you
+      feel adventurous, you may opt to use use
+      `pypa/gh-action-pypi-publish@unstable/v1` instead. A more
+      general recommendation is to pin to exact tags or commit SHAs.
+
+
+      Please also consider migrating your setup to use secretless publishing:
+      https://github.com/marketplace/actions/pypi-publish#trusted-publishing
+
+
+      https://stand-with-ukraine.pp.ua
    required: false
    default: false
 branding:
@@ -2,6 +2,43 @@
 set -Eeuo pipefail


+echo \
+    '# UNSUPPORTED GITHUB ACTION VERSION' \
+    '\n\n' \
+    You are using `pypa/gh-action-pypi-publish@master`. \
+    The `master` branch of this project has been sunset and will not \
+    receive any updates, not even security bug fixes. Please, make \
+    sure to use a supported version. If you want to pin to v1 major \
+    version, use `pypa/gh-action-pypi-publish@release/v1`. If you \
+    feel adventurous, you may opt to use use \
+    `pypa/gh-action-pypi-publish@unstable/v1` instead. A more \
+    general recommendation is to pin to exact tags or commit shas. \
+    '\n\n' \
+    '\n\n' \
+    '### Oh, and while you are here — #StandWithUkraine' \
+    '\n\n' \
+    '[![SWUbanner]][SWUdocs]' \
+    '\n\n' \
+    '[SWUbanner]:' \
+    'https://raw.githubusercontent.com/vshymanskyy/StandWithUkraine/main/banner-direct-single.svg' \
+    '\n\n' \
+    '[SWUdocs]:' \
+    'https://github.com/vshymanskyy/StandWithUkraine/blob/main/docs/README.md' \
+    >> "${GITHUB_STEP_SUMMARY}"
+echo \
+    ::warning file='# >>' PyPA publish to PyPI GHA'%3A' \
+    UNSUPPORTED GITHUB ACTION VERSION \
+    '<< ':: \
+    You are using '"pypa/gh-action-pypi-publish@master"'. \
+    The '"master"' branch of this project has been sunset and will not \
+    receive any updates, not even security bug fixes. Please, make \
+    sure to use a supported version. If you want to pin to v1 major \
+    version, use '"pypa/gh-action-pypi-publish@release/v1"'. If you \
+    feel adventurous, you may opt to use use \
+    '"pypa/gh-action-pypi-publish@unstable/v1"' instead. A more \
+    general recommendation is to pin to exact tags or commit shas.
+
+
 if [[
    "$INPUT_USER" == "__token__" &&
    ! "$INPUT_PASSWORD" =~ ^pypi-
Author	SHA1	Message	Date
Hugo van Kemenade	c1b3402824	Fix a deprecation msg typo in the ancient branch: "migrading"->"migrating" (#212 )	2024-02-27 04:59:28 +01:00
Sviatoslav Sydorenko	c5d8ac5008	Add `deprecationMessage` to all inputs @ `master`	2023-07-13 17:06:59 +02:00
Sviatoslav Sydorenko	ffa46275f9	Render a depecation message in job summary.	2023-07-13 17:06:59 +02:00
Sviatoslav Sydorenko	9b8e7336db	📝Inform about deprecation of `master` branch This patch suggests the users to use `release/v1`. Resolves #83	2022-07-25 17:29:21 +02:00