Show hash values of files to be uploaded

[dukecat0]

Closes #62

Suggestions are welcomed.

Preview: https://github.com/meowmeowmeowcat/test-repo/runs/4746294453?check_suite_focus=true#step:5:16

[dukecat0]

@webknjaz It should work properly now.

[webknjaz]

@meowmeowmeowcat thanks! I've applied some refactoring through the web UI without testing it — could you verify that it doesn't error out before I merge this?

[webknjaz]

Preview: meowmeowmeowcat/test-repo/runs/4746294453?check_suite_focus=true#step:5:16

I noticed you use the main PyPI in tests. It's recommended to use the test instance (TestPyPI) instead: https://test.pypi.org. FYI.

[dukecat0]

could you verify that it doesn't error out before I merge this?

It doesn't error out and generates the correct hash values. 👍

Final test for it: https://github.com/meowmeowmeowcat/test-repo/runs/4752022357?check_suite_focus=true#step:6:1

EDIT: I've fixed the bug below.

However, the hash values generated by the script are very strange.

When I use Github Action to generate the tar.gz and wheel files by running python -m build, the hash values of the wheel file are not the same as the one on PyPI.

GHA link: https://github.com/meowmeowmeowcat/test-repo/runs/4751716715?check_suite_focus=true#step:6:22
PyPI link: https://pypi.org/project/my-test-repo/0.0.16/#files

If I generate the tar.gz and wheel files locally by running the same command as above and commit them, the hash values of the tar.gz file are not the same as the one on PyPI.

GHA link: https://github.com/meowmeowmeowcat/test-repo/runs/4751560961?check_suite_focus=true#step:5:15
PyPI link: https://pypi.org/project/my-test-repo/0.0.13/#files

[webknjaz]

I just realized that maybe it's better to make this plural. But it's too late now so I'll keep it as is.

[webknjaz]

This would be a breaking change of the public API. We'd have to wait until v2 or even v3 depending on how we decide to do deprecation. There are other things, I'd change like using kebab-case for the inputs but not today.

[dukecat0]

Yeah, and I just realized that.

[ghost]

You may add a print_hashes, and treat the current name as an undocumented alias.

[webknjaz]

Released https://github.com/pypa/gh-action-pypi-publish/releases/tag/v1.5.0