swadhinbiswas 🚀 release: 2.0.8 — write-path fix (ADR-080), fork-safe GIL pool (ADR-081), HTTP/3 (ADR-082), Security DI fix, docs honesty pass · 8/6/2026
731fffe
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
#!/usr/bin/env bash
# scripts/publish.sh — build + verify + publish the justapi PyPI wheels.
#
# The only missing piece for a real release is the PyPI token
# (MATURIN_PYPI_TOKEN / TWINE_PASSWORD). Everything else — portable
# manylinux + musllinux builds for x86_64 + aarch64 (via maturin --zig),
# twine check, fresh-venv install smoke — is done here so
# `bash scripts/publish.sh` is the single release command.
#
# Prereqs: maturin (with --zig; requires zig on PATH), rustup with the
# target stds installed (aarch64-unknown-linux-gnu, aarch64-unknown-linux-musl,
# x86_64-unknown-linux-musl), python3.
#
# Usage:
# bash scripts/publish.sh # build + verify (safe, no upload)
# MATURIN_PYPI_TOKEN=... bash scripts/publish.sh --upload
set -euo pipefail
ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
WHEELS_DIR="$ROOT/target/wheels-user"
UPLOAD="${1:-}"
PLATFORMS=(
"x86_64-unknown-linux-gnu"
"aarch64-unknown-linux-gnu"
"x86_64-unknown-linux-musl"
"aarch64-unknown-linux-musl"
)
echo "[publish] building wheels for: ${PLATFORMS[*]}"
mkdir -p "$WHEELS_DIR"
for target in "${PLATFORMS[@]}"; do
echo "[publish] building $target..."
(cd "$ROOT/crates/justapi-py" && maturin build --release --target "$target" --zig --out "$WHEELS_DIR")
done
echo "[publish] wheels:"
ls -la "$WHEELS_DIR"/*.whl
echo "[publish] twine check (all wheels)..."
python3 -m venv /tmp/justapi_publish_venv
/tmp/justapi_publish_venv/bin/pip install --quiet twine
/tmp/justapi_publish_venv/bin/python -m twine check "$WHEELS_DIR"/*.whl
echo "[publish] fresh-venv install smoke (x86_64 manylinux)..."
WHEEL="$(ls "$WHEELS_DIR"/*manylinux*x86_64*.whl | head -1)"
/tmp/justapi_publish_venv/bin/pip install --quiet "$WHEEL"
/tmp/justapi_publish_venv/bin/python -c "
from justapi import JustAPIApp, Depends, Security, Schema
app = JustAPIApp()
@app.get('/')
def root(): return {'ok': True}
from justapi import JustAPITestClient
r = JustAPITestClient(app).get('/')
assert r['status'] == 200, r
print('fresh-venv smoke: OK')
"
if [[ "$UPLOAD" == "--upload" ]]; then
if [[ -z "${MATURIN_PYPI_TOKEN:-}" && -z "${TWINE_PASSWORD:-}" ]]; then
echo "[publish] ERROR: --upload requires MATURIN_PYPI_TOKEN or TWINE_PASSWORD" >&2
exit 1
fi
echo "[publish] uploading to PyPI..."
/tmp/justapi_publish_venv/bin/python -m twine upload --skip-existing "$WHEELS_DIR"/*.whl
echo "[publish] DONE — justapi is on PyPI (4 platforms)"
else
echo "[publish] build + verify OK. To release:"
echo " MATURIN_PYPI_TOKEN=... bash scripts/publish.sh --upload"
fi