release.yml

# Copyright (c) 2026 Santander Group
# SPDX-License-Identifier: Apache-2.0
#
# Release packaging. On a published GitHub Release this workflow builds the
# sdist + wheel and attaches them to the release as downloadable assets.

name: Release

on:
  release:
    types: [published]
  workflow_dispatch:

permissions:
  contents: read

jobs:
  build:
    name: Build + attach distributions
    runs-on: ubuntu-latest
    permissions:
      contents: write  # required to upload the release assets
    steps:
      - name: Checkout
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1

      - name: Set up Python
        uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97  # v7.0.0
        with:
          python-version: "3.11"

      - name: Build sdist + wheel
        run: |
          set -euo pipefail
          python -m pip install --upgrade pip build
          python -m build
          (cd dist && for f in *; do sha256sum "$f" > "$f.sha256"; done)
          ls -l dist

      - name: Upload distributions as workflow artifact
        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a  # v7.0.1
        with:
          name: dist
          path: dist/

      - name: Attach distributions to the GitHub Release
        if: github.event_name == 'release'
        env:
          GH_TOKEN: ${{ github.token }}
        run: gh release upload "${GITHUB_REF_NAME}" dist/* --clobber