Distribute via GitHub release tags instead of PyPI

Replace pip install fastcomments with a git+tag install, and repurpose
publish.sh to build the wheel/sdist and cut a tagged GitHub Release.

Author: winrid

README.md

@@ -3,12 +3,22 @@ The FastComments Python SDK. You can use this to build secure and scalable backe
 
 ## Installation
 
-### PyPI
+### Install from GitHub
+
+Install directly from a release tag (recommended, fully reproducible):
 
 ```bash
-pip install fastcomments
+pip install git+https://github.com/fastcomments/fastcomments-python.git@v3.0.0
+```
+
+Pin the tag rather than a branch so builds are deterministic. The same form works in `requirements.txt`:
+
+```
+fastcomments @ git+https://github.com/fastcomments/fastcomments-python.git@v3.0.0
 ```
 
+Each tagged [GitHub Release](https://github.com/fastcomments/fastcomments-python/releases) also has a built wheel attached if you prefer to install a binary artifact directly.
+
 ### Library Contents
 
 This library contains two modules: the generated API client and the core Python library which contains hand-written utilities to make working with the API easier, including SSO support.

publish.sh

@@ -4,31 +4,44 @@ set -e
 
 # Get version from pyproject.toml
 VERSION=$(grep "^version = " pyproject.toml | cut -d'"' -f2)
+TAG="v$VERSION"
 
-echo "Publishing FastComments Python SDK v$VERSION..."
+echo "Publishing FastComments Python SDK $TAG..."
 
 # Clean up old builds
 echo "Cleaning up old builds..."
 rm -rf dist/ build/ *.egg-info
 
-# Build the package
+# Build the package (wheel + sdist) to attach to the GitHub Release
 echo "Building the package..."
-#python3 -m pip install --upgrade build twine
+#python3 -m pip install --upgrade build
 python3 -m build
 
-# Check the package
-echo "Checking the package..."
-python3 -m twine check dist/*
-
 echo ""
 echo "Package built successfully!"
 echo ""
 
-# Publish to PyPI
-echo "Publishing to PyPI..."
-python3 -m twine upload dist/*
+# Tag the release (skip if the tag already exists)
+if git rev-parse "$TAG" >/dev/null 2>&1; then
+    echo "Tag $TAG already exists, skipping tag creation."
+else
+    echo "Tagging $TAG..."
+    git tag "$TAG"
+    git push origin "$TAG"
+fi
+
+# Create the GitHub Release with the built artifacts (skip if it already exists)
+if gh release view "$TAG" >/dev/null 2>&1; then
+    echo "Release $TAG already exists; uploading/clobbering artifacts..."
+    gh release upload "$TAG" dist/*.whl dist/*.tar.gz --clobber
+else
+    echo "Creating GitHub Release $TAG..."
+    gh release create "$TAG" dist/*.whl dist/*.tar.gz \
+        --title "$TAG" \
+        --notes "FastComments Python SDK $TAG"
+fi
 
 echo ""
-echo "✓ Published to PyPI!"
+echo "✓ Published GitHub Release $TAG!"
 echo "Users can install it with:"
-echo "  pip install fastcomments"
+echo "  pip install git+https://github.com/fastcomments/fastcomments-python.git@$TAG"