Merge pull request #31 from SFTtech/milo/crates-io-publishing

crates io publishing

Author: TheJJ

.bumpversion.toml

@@ -60,6 +60,11 @@ filename = "packages/debmagic-common/Cargo.toml"
 search = 'version = "{current_version}"'
 replace = 'version = "{new_version}"'
 
+[[tool.bumpversion.files]]
+filename = "Cargo.toml"
+search = 'debmagic-common = { path = "packages/debmagic-common", version = "{current_version}" }'
+replace = 'debmagic-common = { path = "packages/debmagic-common", version = "{new_version}" }'
+
 # Promote notes under [Unreleased] into a dated release section; keep [Unreleased] for the next cycle.
 [[tool.bumpversion.files]]
 filename = "packages/debmagic/CHANGELOG.md"

.github/workflows/release.yaml

@@ -11,7 +11,7 @@ jobs:
     uses: ./.github/workflows/ci.yaml
     secrets: inherit
 
-  publish:
+  publish-pypi:
     needs: ci
     runs-on: ubuntu-latest
     environment:
@@ -43,3 +43,27 @@ jobs:
             --compatibility pypi
       - name: Publish to PyPI
         run: uv publish --trusted-publishing always
+
+  publish-crates-io:
+    needs: ci
+    runs-on: ubuntu-latest
+    environment:
+      name: crates-io-publish
+    permissions:
+      id-token: write
+      contents: read
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v5
+      - name: Install Rust toolchain
+        run: rustup show
+      - uses: Swatinem/rust-cache@v2
+      - name: Authenticate to crates.io
+        uses: rust-lang/crates-io-auth-action@v1
+        id: auth
+      - name: Publish crates
+        env:
+          CARGO_REGISTRY_TOKEN: ${{ steps.auth.outputs.token }}
+        run: |
+          cargo publish -p debmagic-common --locked
+          cargo publish -p debmagic --locked

Cargo.toml

@@ -8,7 +8,7 @@ rust-version = "1.89"
 
 [workspace.dependencies]
 # internal
-debmagic-common = { path = "packages/debmagic-common" }
+debmagic-common = { path = "packages/debmagic-common", version = "0.0.1-alpha.7" }
 
 # third party
 clap = { version = ">=4.5.23", features = ["derive"] }

docs/develop/releasing.md

@@ -25,8 +25,11 @@ below `[Unreleased]`, so those notes become the release notes for the new versio
 
 Then commit, tag, and push. A `v*` tag (e.g. `v0.0.1-alpha.2`) triggers the
 [release workflow](../../.github/workflows/release.yaml), which runs
-[CI](../../.github/workflows/ci.yaml) first and, on success, builds `debmagic`
-(cli) and publishes it to PyPI via Trusted Publishing.
+[CI](../../.github/workflows/ci.yaml) first and, on success, publishes in
+parallel:
+
+- `debmagic` (cli) to PyPI via Trusted Publishing
+- `debmagic-common` then `debmagic` to crates.io via Trusted Publishing
 
 ```shell
 git push

docs/usage/getting-started.md

@@ -2,13 +2,19 @@
 
 ## Installation
 
+### Cargo
+
+```shell
+cargo install debmagic
+```
+
 ### Pip
 
 ```shell
 pip install debmagic
 ```
 
-or directly use uv
+or run it directly with uv:
 
 ```shell
 uvx debmagic

packages/debmagic-common/Cargo.toml

@@ -1,6 +1,8 @@
 [package]
 name = "debmagic-common"
 version = "0.0.1-alpha.7"
+description = "Shared helpers for debmagic (Debian versions, distro detection)"
+license = "GPL-2.0-or-later"
 documentation = "https://debmagic.readthedocs.org"
 homepage = "https://github.com/SFTtech/debmagic"
 repository = "https://github.com/SFTtech/debmagic.git"

packages/debmagic/CHANGELOG.md

@@ -7,6 +7,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+- publish the Rust crates to crates.io on tagged releases
+- provide a native implementation of the package signing workflow
+
 ## [0.0.1-alpha.7] - 2026-08-25
 
 - support non-debian and non-ubuntu distros using dpkg

packages/debmagic/Cargo.toml

@@ -1,6 +1,9 @@
 [package]
 name = "debmagic"
 version = "0.0.1-alpha.7"
+description = "modern tooling for building and packaging Debian/Ubuntu packages in isolated environments"
+license = "GPL-2.0-or-later"
+readme = "README.md"
 documentation = "https://debmagic.readthedocs.org"
 homepage = "https://github.com/SFTtech/debmagic"
 repository = "https://github.com/SFTtech/debmagic.git"

packages/debmagic/README.md

@@ -9,11 +9,15 @@ Modern, robust & easy tooling for building and packaging [Debian](https://debian
 
 ## Installation
 
+```shell
+cargo install debmagic
+```
+
 ```shell
 pip install debmagic
 ```
 
-or run it directly:
+or run it directly with uv:
 
 ```shell
 uvx debmagic