Pypi package hash check (#108)

mckinsey · Oct 12, 2023 · aa19052 · aa19052
1 parent 70153f6
commit aa19052
Show file tree

Hide file tree

Showing 2 changed files with 50 additions and 0 deletions.
diff --git a/.github/workflows/check-release.yml b/.github/workflows/check-release.yml
@@ -77,6 +77,14 @@ jobs:
         with:
           packages-dir: ${{ needs.check-version.outputs.package_name }}/dist
           password: ${{ env.PYPI_TOKEN }}
+      - name: Check correct package uploaded to PyPI
+        run: |
+          cd "${{ needs.check-version.outputs.package_name }}/dist"
+          local=$(md5sum vizro-${{needs.check-version.outputs.package_version}}-py3-none-any.whl)
+          cd "${{ needs.check-version.outputs.package_name }}"
+          pip download vizro==${{needs.check-version.outputs.package_version}} -d . --no-deps --timeout 300
+          pypi=$(md5sum vizro-${{needs.check-version.outputs.package_version}}-py3-none-any.whl)
+          if [ $local = $pypi ]; then; echo "md5 hash is the same"; else; echo "md5 hash is not the same" exit 1; fi;
 
   version-bump:
     needs: [check-version, build-publish]

diff --git a/vizro-core/changelog.d/20231012_143551_alexey_snigir_pypi_package_hash_check.md b/vizro-core/changelog.d/20231012_143551_alexey_snigir_pypi_package_hash_check.md
@@ -0,0 +1,42 @@
+<!--
+A new scriv changelog fragment.
+
+Uncomment the section that is right (remove the HTML comment wrapper).
+-->
+
+<!--
+### Removed
+
+- A bullet item for the Removed category.
+
+-->
+<!--
+### Added
+
+- A bullet item for the Added category.
+
+-->
+<!--
+### Changed
+
+- A bullet item for the Changed category.
+
+-->
+<!--
+### Deprecated
+
+- A bullet item for the Deprecated category.
+
+-->
+<!--
+### Fixed
+
+- A bullet item for the Fixed category.
+
+-->
+<!--
+### Security
+
+- A bullet item for the Security category.
+
+-->