Fix release binary builds (Windows, Linux, macOS) (#730)

* Fix Windows release build: install poetry via pipx, fix matrix.OS casing

* Bump v4.1.13.dev1

* Revert pipx, fix windows path explicitly

* Bump v4.1.13.dev2

* Try another path

* Bump v4.1.13.dev3

* Try 3

* Bump v4.1.13.dev4

* Install rust on windows

* Bump v4.1.13.dev5

* Add rust toolchain

* Bump v4.1.13.dev6

* Drop tomli, use stdlib tomllib

* Bump v4.1.13.dev7

* Fix lint

* Ignore disputed pyjwt vuln PYSEC-2025-183 in pip-audit

* Bump base image to python:3.12.13-slim-bookworm

* Bump v4.1.13

* Bump v4.1.13 everywhere

* Revert "Bump base image to python:3.12.13-slim-bookworm"

This reverts commit 9da28a4.

* Revert "Ignore disputed pyjwt vuln PYSEC-2025-183 in pip-audit"

This reverts commit 54e928a.

Author: evgeny-stakewise

.github/workflows/release.yaml

@@ -145,18 +145,18 @@ jobs:
       - name: Checkout code
         uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5
 
-      - name: Install build dependencies for Linux
+      - name: Install build dependencies for Linux arm
         run: |
           sudo apt-get update
           sudo apt-get install --no-install-recommends -y build-essential curl libpq-dev postgresql-client
-        if: matrix.os == 'ubuntu-24.04-arm' || matrix.os == 'ubuntu-22.04-arm'
+        if: matrix.OS == 'ubuntu-24.04-arm' || matrix.OS == 'ubuntu-22.04-arm'
 
       - name: Install build dependencies for MacOS
         run: |
           brew install libpq
           brew link --force libpq
           brew install openssl@3.0
-        if: matrix.os == 'macos-14'
+        if: matrix.OS == 'macos-14'
 
       - name: Set up python
         uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
@@ -168,6 +168,17 @@ jobs:
         with:
           version: "1.8.3"
 
+      - name: Fix Poetry PATH (Windows)
+        if: matrix.OS == 'windows-latest'
+        run: echo "$env:USERPROFILE\.local\bin" | Out-File -FilePath $env:GITHUB_PATH -Append
+        shell: pwsh
+
+      - name: Install Rust toolchain (Windows)
+        if: matrix.OS == 'windows-latest'
+        uses: dtolnay/rust-toolchain@e97e2d8cc328f1b50210efc529dca0028893a2d9 # v1
+        with:
+          toolchain: stable
+
       - name: Install dependencies
         run: poetry install --with build --without dev --no-interaction --no-root
         env:

README.md

@@ -98,14 +98,14 @@ operator COMMAND --flagA=123 --flagB=xyz
 Pull the latest docker Operator docker image:
 
 ```bash
-docker pull europe-west4-docker.pkg.dev/stakewiselabs/public/v3-operator:v4.1.12
+docker pull europe-west4-docker.pkg.dev/stakewiselabs/public/v3-operator:v4.1.13
 ```
 
 You can also build the docker image from source by cloning this repo and executing the following command from within
 the `v3-operator` folder:
 
 ```bash
-docker build --pull -t europe-west4-docker.pkg.dev/stakewiselabs/public/v3-operator:v4.1.12 .
+docker build --pull -t europe-west4-docker.pkg.dev/stakewiselabs/public/v3-operator:v4.1.13 .
 ```
 
 You will execute Operator Service commands using the format below (note the use of flags are optional):
@@ -114,7 +114,7 @@ You will execute Operator Service commands using the format below (note the use
 docker run --rm -ti \
 -u $(id -u):$(id -g) \
 -v ~/.stakewise/:/data \
-europe-west4-docker.pkg.dev/stakewiselabs/public/v3-operator:v4.1.12 \
+europe-west4-docker.pkg.dev/stakewiselabs/public/v3-operator:v4.1.13 \
 src/main.py COMMAND \
 --flagA=123 \
 --flagB=xyz

operator.spec

@@ -1,5 +1,5 @@
 # -*- mode: python ; coding: utf-8 -*-
-from PyInstaller.utils.hooks import collect_data_files, collect_submodules, copy_metadata
+from PyInstaller.utils.hooks import collect_data_files, copy_metadata
 from sys import platform
 
 datas = [
@@ -22,16 +22,6 @@ hiddenimports = [
     'multiaddr.codecs.domain',
 ]
 
-# tomli
-hiddenimports += [
-    'ddc459050edb75a05942__mypyc',  # MacOS
-    '7bce59c0a152c0e01f70__mypyc',  # Ubuntu-22 (both arm and amd64)
-    '9deb819a160db3cef497__mypyc',  # Ubuntu-24 arm
-    '3c22db458360489351e4__mypyc',  # Windows
-    '__future__'
-]
-hiddenimports += collect_submodules('tomli')
-
 a = Analysis(
     ['src/main.py'],
     pathex=[],

poetry.lock

@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "v3-operator"
-version = "v4.1.12"
+version = "v4.1.13"
 description = "StakeWise operator service for registering vault validators"
 authors = ["StakeWise Labs <info@stakewise.io>"]
 package-mode = false
@@ -13,7 +13,6 @@ sw-utils = {git = "https://github.com/stakewise/sw-utils.git", rev = "v0.12.12"}
 staking-deposit = { git = "https://github.com/ethereum/staking-deposit-cli.git", rev = "v2.8.0" }
 pycryptodomex = "3.19.1"
 click = "==8.2.1"
-tomli = "~2"
 eciespy = "==0.4.3"
 prometheus-client = "==0.17.1"
 psycopg2 = "==2.9.9"

pyproject.toml

@@ -288,7 +288,7 @@ http_copy() {
 github_release() {
   owner_repo=$1
   version=$2
-  test -z "$version" && version="v4.1.12"
+  test -z "$version" && version="v4.1.13"
   giturl="https://github.com/${owner_repo}/releases/${version}"
   json=$(http_copy "$giturl" "Accept:application/json")
   test -z "$json" && return 1

scripts/install.sh

@@ -1,13 +1,12 @@
+import tomllib
 from pathlib import Path
 
-import tomli
-
 
 def _get_project_meta() -> dict:
     toml_path = Path(__file__).parents[1].joinpath('pyproject.toml')
 
     with toml_path.open(mode='rb') as pyproject:
-        return tomli.load(pyproject)['tool']['poetry']
+        return tomllib.load(pyproject)['tool']['poetry']
 
 
 __version__ = _get_project_meta()['version']