release.yaml

name: Release

on:
  # Run when you push any tag
  push:
    tags:
      - "*"
  workflow_dispatch: # Allows manual trigger
    inputs:
      version:
        description: "Version to publish, e.g. 1.3.4. Defaults to the version already in pyproject.toml."
        required: false
        type: string

jobs:
  build-and-publish:
    runs-on: ubuntu-latest

    steps:
      - name: Checkout code
        uses: actions/checkout@v3

      - name: Determine version
        id: get_version
        env:
          INPUT_VERSION: ${{ inputs.version }}
        run: |
          set -euo pipefail
          # On a tag push GITHUB_REF_NAME is the tag itself ("1.2.3" or "v1.2.3").
          # On a manual run it is the branch, so fall back to the input, and then
          # to whatever pyproject.toml already declares.
          if [ "$GITHUB_REF_TYPE" = "tag" ]; then
            VERSION="$GITHUB_REF_NAME"
          elif [ -n "$INPUT_VERSION" ]; then
            VERSION="$INPUT_VERSION"
          else
            VERSION=""
          fi
          echo "Version is ${VERSION:-<unset: keeping pyproject.toml>}"
          echo "version=$VERSION" >> "$GITHUB_OUTPUT"

      - name: Set up Python
        uses: actions/setup-python@v4
        with:
          python-version: "3.11"

      - name: Install build dependencies
        run: |
          python -m pip install --upgrade pip
          python -m pip install build twine mypy

      - name: Set version from tag
        if: steps.get_version.outputs.version != ''
        env:
          VERSION: ${{ steps.get_version.outputs.version }}
        run: |
          set -euo pipefail
          sed -i "s/^version = .*/version = \"${VERSION}\"/" pyproject.toml
          grep -n '^version' pyproject.toml

      - name: Build sdist and wheel
        # No flags: builds the sdist, then builds the wheel *from* that sdist,
        # which verifies the sdist is complete enough to rebuild the package.
        run: python -m build --outdir dist

      - name: Check artifacts
        run: |
          ls -l dist
          twine check dist/*

      - name: Publish to PyPI
        uses: pypa/gh-action-pypi-publish@release/v1
        with:
          user: __token__
          password: ${{ secrets.PYPI_API_TOKEN }}