publish-pypi.yml

name: Publish to PyPI

on:
  release:
    types: [published]

permissions:
  contents: read
  actions: write
  id-token: write  # Required for trusted publishing

jobs:
  publish:
    name: Publish to PyPI
    runs-on: ubuntu-latest
    environment:
      name: pypi
      url: https://pypi.org/p/webarena-verified

    steps:
      - name: Validate version tag
        run: |
          TAG="${{ github.event.release.tag_name }}"
          if [[ ! "$TAG" =~ ^v[0-9]+\.[0-9]+\.[0-9]+(-[a-zA-Z0-9.]+)?$ ]]; then
            echo "::error::Invalid version tag format: $TAG"
            echo "Expected format: v1.2.3 or v1.2.3-rc.1"
            exit 1
          fi
          echo "Valid version tag: $TAG"

      - name: Checkout code
        uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Setup environment
        uses: ./.github/actions/setup
        with:
          sync-args: --group dev

      - name: Build package
        run: uv build

      - name: Publish to PyPI
        uses: pypa/gh-action-pypi-publish@release/v1