publish-to-pypi.yml

name: Publish to PyPI

on:
  push:
    tags:
      - 'v*.*.*'  # Triggers on version tags like v0.0.21, v1.0.0, etc.

jobs:
  publish:
    runs-on: ubuntu-latest
    permissions:
      contents: write
      packages: write
      id-token: write
    
    steps:
    - name: Checkout code
      uses: actions/checkout@v4
    
    - name: Set up Python
      uses: actions/setup-python@v4
      with:
        python-version: '3.12'
    
    - name: Install build dependencies
      run: |
        python -m pip install --upgrade pip
        pip install build twine
    
    - name: Extract version from tag
      id: get_version
      run: |
        # Get the tag name (e.g., v0.0.21)
        TAG=${GITHUB_REF#refs/tags/v}
        echo "VERSION=$TAG" >> $GITHUB_OUTPUT
        echo "Publishing version: $TAG"
    
    - name: Verify version matches setup.py
      run: |
        SETUP_VERSION=$(python -c "import re; content=open('setup.py').read(); print(re.search(r'version=\"([^\"]+)\"', content).group(1))")
        TAG_VERSION="${{ steps.get_version.outputs.VERSION }}"
        echo "setup.py version: $SETUP_VERSION"
        echo "Git tag version: $TAG_VERSION"
        if [ "$SETUP_VERSION" != "$TAG_VERSION" ]; then
          echo "ERROR: Version mismatch!"
          echo "setup.py has version $SETUP_VERSION but git tag is v$TAG_VERSION"
          exit 1
        fi
        echo "✅ Versions match!"
    
    - name: Build package
      run: python -m build
    
    - name: Check distribution files
      run: |
        ls -lh dist/
        twine check dist/*
    
    - name: Publish to PyPI
      env:
        TWINE_USERNAME: __token__
        TWINE_PASSWORD: ${{ secrets.PYPI_API_TOKEN }}
      run: |
        twine upload dist/*
    
    - name: Create GitHub Release
      uses: softprops/action-gh-release@v1
      with:
        generate_release_notes: true
        files: |
          dist/*.tar.gz
          dist/*.whl