release: Release v3.2.4

Shortlog of commit since last release:

    Bruno Rocha (2):
          Release version 3.2.3
          fix(env): allow underscore in env name #1011 (#1015)

    Jake Callahan (1):
          fix(vault): pin hvac minimum version

    Pedro Pessoa (3):
          fix(set): non-str key raising type error #1005 (#1008)
          fix(merge): dynaconf_merge=False on nested structures (#1012)
          fix(cli): support for 'entrypoint-path' in FLASK_APP #946 (#1014)

    Sebastian Correa (1):
          doc(validation): Improve Configuration and Validation sections of the docs (#989)

    Vladislav Sharapov (1):
          doc(envvars): Fix link to configuration page (#1020)

.github/scripts/dist-health-check.sh

@@ -0,0 +1,17 @@
+#!/bin/env bash
+
+set -euo pipefail
+echo "Checking dist build health"
+
+venv="$(mktemp --directory)"
+python3 -m venv "${venv}"
+source "${venv}/bin/activate"
+
+for dist in dist/*; do
+    pip install --quiet "${dist}"
+    dynaconf list --help 1>/dev/null
+done
+
+deactivate
+rm -rf "${venv}"
+echo "Done"

.github/workflows/doc-ignore.yml

@@ -1,20 +1,27 @@
-# This overrides main.yml when only doc related changes were made
+# This overrides main.yml when doc-only changes or tag pushed are made.
+#
+# Because the workflow "CI" is required, that is, it cannot be skipped,
+# we use this placeholder workflow to bypass the required-check.
 # see: https://docs.github.com/en/repositories/configuring-branches-and-merges-in-your-repository/defining-the-mergeability-of-pull-requests/troubleshooting-required-status-checks#handling-skipped-but-required-checks
 
 name: CI
 on:
   # Triggers the workflow on push or pull request events but only for the main branch
   push:
     branches: [master]
-    # will run when at least one file matches something else than those
-    paths:
+    paths:  # run only if one of these is modified
       - "docs/**"
       - "mkdocs.yml"
+    tags:
+      - "**"
+
   pull_request:
     branches: [master]
     paths:
       - "docs/**"
       - "mkdocs.yml"
+    tags:
+      - "**"
 
 jobs:
   checkpoint:

.github/workflows/main.yml

@@ -7,16 +7,26 @@ on:
   # Triggers the workflow on push or pull request events but only for the main branch
   push:
     branches: [master]
-    # will run when at least one file matches something else than those
-    paths-ignore:
+    paths-ignore: # run if anything different from these is modified
       - "docs/**"
       - "mkdocs.yml"
+    tags-ingore: # run if no tags
+      - "**"
+
   pull_request:
     branches: [master]
     paths-ignore:
       - "docs/**"
       - "mkdocs.yml"
+    tags-ingore:
+      - "**"
 
+  # called by publish workflow to assure pipeline consistency.
+  on_workflow_call:
+    secrets:
+      CODECOV_TOKEN:
+        required: true
+
   # Allows you to run this workflow manually from the Actions tab
   workflow_dispatch:
 

.github/workflows/publish-release.yml

@@ -0,0 +1,81 @@
+name: publish-and-release
+
+on:
+  push:
+    branches:
+      - master
+    tags:
+      - "**" # TODO: improve this match or use semver validation
+
+jobs:
+  # main.yml is ignored when pushing tags (aka, publish-releasing).
+  # Then, it is called here to assure pipeline consistency.
+  main-ci:
+    name: Main CI
+    uses: ./.github/workflows/main.yml
+    secrets: inherit
+
+  build-and-test-dist:
+    name: Build and Test distribution
+    runs-on: ubuntu-latest
+    needs: main-ci
+    steps:
+      - uses: actions/checkout@v3
+      - run: chmod +x .github/scripts/dist-health-check.sh
+
+      - name: Build distribution
+        run: make dist
+
+      - name: Check dist health
+        run: .github/scripts/dist-health-check.sh
+
+      - name: Save dist files
+        uses: actions/upload-artifact@v3
+        with:
+          name: dist-folder
+          path: dist
+
+  pypi-publish:
+    name: Upload release to PyPI
+    needs: build-and-test-dist
+    runs-on: ubuntu-latest
+    environment:
+      name: pypi
+      url: https://pypi.org/p/<your-pypi-project-name>
+    permissions:
+      id-token: write  # IMPORTANT: this permission is mandatory for trusted publishing
+    steps:
+      - name: Get dist
+        uses: actions/download-artifact@v3
+        with:
+          name: dist-folder
+
+      - name: Publish package distributions to PyPI
+        # uses: pypa/gh-action-pypi-publish@release/v1
+        run: echo "Publishing to PyPI"
+
+  github_release:
+    name: Create GitHub Release
+    needs: pypi-publish
+    runs-on: ubuntu-latest
+    steps:
+    - name: Checkout
+      uses: actions/checkout@v3
+
+    - name: Setup Python
+      uses: actions/setup-python@v4
+
+    - name: Install git-changelog
+      run: pip install git-changelog
+
+    - name: Prepare release notes
+      run: |
+        git-changelog --release-notes > release-notes.md
+        echo "Release notes being used:"
+        cat release-notes.md
+
+    - name: Create GitHub release
+      # uses: softprops/action-gh-release@v1
+      # with:
+      #   body_path: release-notes.md
+      run: echo "Publishing GH release"

CHANGELOG.md

@@ -1,9 +1,27 @@
 Changelog
 =========
 
+<!-- insertion marker -->
+
+## [3.2.4](https://github.com/dynaconf/dynaconf/releases/tag/3.2.4) - 2023-10-30
+
+### Bug Fixes
+
+- allow underscore in env name #1011 (#1015) ([f55c277](https://github.com/dynaconf/dynaconf/commit/f55c27761ec839df3e6c5806d19a52594f6a5c9b) by Bruno Rocha).
+- support for 'entrypoint-path' in FLASK_APP #946 (#1014) ([f2bb032](https://github.com/dynaconf/dynaconf/commit/f2bb032ea25a3110f3ba38891fc3307edc203a9a) by Pedro Pessoa).
+- dynaconf_merge=False on nested structures (#1012) ([b113e74](https://github.com/dynaconf/dynaconf/commit/b113e744617dd75aa6ce1d4d1d793a93abf65edc) by Pedro Pessoa).
+- non-str key raising type error #1005 (#1008) ([4ed2350](https://github.com/dynaconf/dynaconf/commit/4ed2350da4c6f4fa2b046cbef2f07a56f97ef94b) by Pedro Pessoa).
+- pin hvac minimum version ([9170beb](https://github.com/dynaconf/dynaconf/commit/9170beb2386989f7486fcc22e21918fe441aa1e8) by Jake Callahan).
+
+### Docs
+
+- Fix link to configuration page (#1020) ([df3b437](https://github.com/dynaconf/dynaconf/commit/df3b43718858786d0a2feb2d7b60c9515b01a15d) by Vladislav Sharapov).
+- Improve Configuration and Validation sections of the docs (#989) ([99741a3](https://github.com/dynaconf/dynaconf/commit/99741a3124b4c788e6a8e9e3761e90e7f9be5cc3) by Sebastian Correa).
+
+<!-- insertion marker -->
+
+## [3.2.3]() - 2023-09-13
 
-3.2.3 (2023-09-13)
-------------------
 - Release version 3.2.3. [Bruno Rocha]
 
   Shortlog of commits since last release: