auto push a new python version on bumps

Author: kmolan

.github/workflows/auto-tag-py.yml

@@ -0,0 +1,55 @@
+name: Auto-tag Python release
+
+on:
+  push:
+    branches: [main]
+    paths:
+      - 'bonsai-py/Cargo.toml'
+
+permissions:
+  contents: write
+
+jobs:
+  tag:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          token: ${{ secrets.RELEASE_TAG_PAT }}
+          fetch-depth: 0  # need full history so `git rev-parse` can see existing tags
+
+      - name: Extract version from Cargo.toml
+        id: version
+        run: |
+          version=$(grep -m1 '^version' bonsai-py/Cargo.toml | sed -E 's/.*"([^"]+)".*/\1/')
+          if [ -z "$version" ]; then
+            echo "::error::Could not parse version from bonsai-py/Cargo.toml"
+            exit 1
+          fi
+          echo "version=$version" >> "$GITHUB_OUTPUT"
+          echo "Detected version: $version"
+
+      - name: Check if py-v tag already exists
+        id: check
+        run: |
+          v="${{ steps.version.outputs.version }}"
+          if git rev-parse "py-v$v" >/dev/null 2>&1; then
+            echo "py-v$v already exists — no-op."
+            echo "skip=true" >> "$GITHUB_OUTPUT"
+          else
+            echo "py-v$v does not exist — will tag."
+            echo "skip=false" >> "$GITHUB_OUTPUT"
+          fi
+
+      - name: Configure git
+        if: steps.check.outputs.skip == 'false'
+        run: |
+          git config user.name "github-actions[bot]"
+          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
+
+      - name: Push py-v-X.Y.Z (real PyPI release)
+        if: steps.check.outputs.skip == 'false'
+        run: |
+          v="${{ steps.version.outputs.version }}"
+          git tag "py-v$v"
+          git push origin "py-v$v"

.github/workflows/python-wheels.yml

@@ -3,7 +3,7 @@ name: Python wheels
 on:
   push:
     branches: [main]
-    tags: ["py-v*", "py-test-*"]
+    tags: ["py-v*"]
   pull_request:
     branches: [main]
   workflow_dispatch:  # manual ad-hoc builds from any branch
@@ -63,7 +63,6 @@ jobs:
         run: |
           tag="${GITHUB_REF#refs/tags/}"
           version="${tag#py-v}"
-          version="${version#py-test-}"
           cargo_version=$(grep -m1 '^version' bonsai-py/Cargo.toml | sed -E 's/.*"([^"]+)".*/\1/')
           if [ "$version" != "$cargo_version" ]; then
             echo "::error::Tag version '$version' does not match Cargo.toml version '$cargo_version'."
@@ -149,12 +148,12 @@ jobs:
           python -c "import bonsai_bt; print(bonsai_bt.__version__)"
 
   publish:
-    name: Publish to PyPI / TestPyPI
+    name: Publish to PyPI
     needs: [build, sdist, verify-sdist]
-    if: startsWith(github.ref, 'refs/tags/py-v') || startsWith(github.ref, 'refs/tags/py-test-')
+    if: startsWith(github.ref, 'refs/tags/py-v')
     runs-on: ubuntu-latest
     environment:
-      name: ${{ startsWith(github.ref, 'refs/tags/py-test-') && 'testpypi' || 'pypi' }}
+      name: pypi
     permissions:
       id-token: write   # OIDC for Trusted Publishing
     steps:
@@ -174,7 +173,5 @@ jobs:
 
       - uses: pypa/gh-action-pypi-publish@release/v1
         with:
-          repository-url: >-
-            ${{ startsWith(github.ref, 'refs/tags/py-test-') && 'https://test.pypi.org/legacy/' || 'https://upload.pypi.org/legacy/' }}
           packages-dir: dist
           skip-existing: true