cd dist
gpg --detach-sign --armor -u 1F2DD0CB756A76D8 <filename>.tar.gz
you should be prompted to use the roundup release key. If not you
can add --local=roundup-devellists.sourceforge.net.
This will create a file by the name <filename>.tar.gz.asc.
Move file to website/www/signature directory
mv <filename>.tar.gz.asc ../webite/www/signatures/.
hg add ../website/www/signature/<filename>.tar.gz.asc
commiting the file will be done in step 12
cd ..
Add a link to the signature to doc/security.txt. Add a new link
to the start of the signature list in doc/security.txt (look for
the word multicol).
12. Assuming all is well commit and tag the release in the version-control
system.
a) hg commit ... commit any edits from steps 1-5
b) hg tag 2.1.0 use right version. Should create/commit a changeset
c) hg push update main repo
d) hg sum verify that the tag shows up
13. Upload source distribution to PyPI - requires you sign up for a
pypi account and be added as a maintainer to roundup. Ask existing
maintainer for access. Do this using twine (pip install twine).
The original directions used twine to upload the tarball and the
signature, but as of May 2023, PyPI no longer accepts signature
files. So we publish the signature as part of the website.
Use twine to upload the distribution tarball. E.G.
twine upload --repository pypi <filename>.tar.gz
The distribution file should appear on
https://pypi.python.org/pypi/roundup in no time. If you are using
python older than 2.7.13 you need a .pypirc shown below since the
URL has changed.
You can also use twine to upload the .whl (wheel) format
distributions (if created). Follow the directions for generating
the gpg asc files and place the .whl.asc in the signature
directory.
Another way to upload is to use:
python3 setup.py sdist upload --repository pypi
BUT this rebuilds the source distribution tarball and uploads it.
This means that you have uploaded something that is not tested.
Also the metadata in the file changes and will not match the GPG
signature you commited in step 12. So use twine.
14. Refresh website.
website/README.txt
https://www.roundup-tracker.org/ should state that the stable
version is the one that you released.
https://www.roundup-tracker.org/docs.html should also match the
released version (or at least the major non pre-release
1.x/2.x version).
15. Send doc/announcement.txt to python-announcepython.org,
roundup-userslists.sourceforge.net,
roundup-devellists.sourceforge.net, and lwnlwn.net.