Skip to content

bump: v0.10.12

bump: v0.10.12 #418

Workflow file for this run

name: Release
# Trigger directly on tag pushes, not via workflow_run after CI.
# GitHub's workflow_run trigger does not reliably deliver tag-ref CI
# completions to listening workflows (see issue #123 — head_branch comes
# back as the default branch, so the `if` guard skips every run). Instead,
# release.yml owns the CI gate by invoking ci.yml as a reusable workflow
# (workflow_call). pypi-apple / java jobs run only if CI passes via
# `needs: ci`. CI's direct tag push trigger was removed in tandem so the
# same SHA does not run CI twice.
on:
push:
tags:
- "v*"
jobs:
# Gate publish on full CI passing for the tag SHA. Calls ci.yml as a
# reusable workflow; secrets: inherit lets CI jobs access the same
# secret scope they would on a master push.
ci:
uses: ./.github/workflows/ci.yml
secrets: inherit
pypi-apple:
needs: ci
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v6
- uses: actions/setup-python@v6
with:
python-version: "3.13"
- run: pip install build
- run: python -m build
- uses: actions/upload-artifact@v7
with:
name: dist-apple
path: dist/
pypi-publish-apple:
needs: pypi-apple
runs-on: ubuntu-latest
environment: release
permissions:
id-token: write
steps:
- uses: actions/download-artifact@v8
with:
name: dist-apple
path: dist/
- uses: pypa/gh-action-pypi-publish@release/v1
with:
skip-existing: true
java:
needs: ci
runs-on: ubuntu-latest
defaults:
run:
working-directory: pine-java
steps:
- uses: actions/checkout@v6
- uses: actions/setup-java@v5
with:
distribution: temurin
java-version: "25"
cache: maven
server-id: central
server-username: CENTRAL_USERNAME
server-password: CENTRAL_TOKEN
gpg-private-key: ${{ secrets.GPG_PRIVATE_KEY }}
gpg-passphrase: GPG_PASSPHRASE
- run: mvn deploy -B -DskipTests -Prelease
env:
CENTRAL_USERNAME: ${{ secrets.CENTRAL_USERNAME }}
CENTRAL_TOKEN: ${{ secrets.CENTRAL_TOKEN }}
GPG_PASSPHRASE: ""