Add cargo-publish job

[Luni-4]

This PR runs cargo-publish.

To create the CRATESIO_TOKEN, you need to follow this guide

Thanks in advance for your review! :)

[est31]

@tomaka could you set up the secret as explained in the link above? I only see you as the crates.io owner of this crate.

[tomaka]

I don't have access to the settings of this repo.

[est31]

And I don't have publish rights on crates.io :)

Could you you run cargo owner --add github:rustaudio:cratesio-publish? Not sure though if it works if you're not part of the github team.

[est31]

@tomaka you should have admin rights now on this repo.

[tomaka]

Not sure though if it works if you're not part of the github team.

Getting this:

error: failed to invite owners to crate cpal: api errors (status 200 OK): only members of a team can add it as an owner

[tomaka]

I'm not sure I want to put my token in the settings of cpal, as this gives access to all my crates.
If I'm actively working on a repo, that's fine, as I might notice a PR that messes up with that.

However, now, anyone within the RustAudio orga could push something to master, or quickly submit-merge a PR, and publish a new version of any of my crates.

[est31]

I see your problem. I guess the issue is rust-lang/crates.io#849 .

What about I create a cpal maintainers team that I add you to and then you add crates.io publish rights? Then anyone in that team could publish to crates.io, but they have to do it manually.

[Luni-4]

Where was the token saved in travis? Perhaps it could be possible to recreate the same situation. If you would describe the steps, I could change the Github Actions script.

[est31]

Another alternative is creating a separate github account.

[Luni-4]

@est31

What's the status of this one?

[est31]

@Luni-4 my hands are bound. Only owner of cpal is still tomaka: https://crates.io/crates/cpal

[Luni-4]

@Luni-4 my hands are bound. Only owner of cpal is still tomaka: https://crates.io/crates/cpal

I see. So let's wait for @tomaka decision then :)

[est31]

Alright, I've added a new github account @rustaudio-publish-bot . Also I've created a new team @RustAudio/cpal-maintainers which tomaka is now a member of.

@tomaka can you try running cargo owner --add github:rustaudio:cpal-maintainers for the cpal crate? Then the bot account will be allowed to publish cpal to crates.io and we can use its token in this PR. The bot account will only ever have access to RustAudio crates so its impact will be limited.

[tomaka]

@est31 Done!

[est31]

@tomaka wonderful, thank you! Now everything should be set up. Let's hope it works.

[Luni-4]

Thank you @est31 and @tomaka! :)

[est31]

@tomaka could you also add the team for the alsa-sys crate? It's in the same repo as this one.

[tomaka]

Done.