Release #51
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| --- | |
| name: Release | |
| on: | |
| workflow_run: | |
| workflows: | |
| - "CI" | |
| types: | |
| - completed | |
| jobs: | |
| validate-tag: | |
| name: Check tag | |
| runs-on: ubuntu-latest | |
| outputs: | |
| valid_tag: ${{ steps.validation.outputs.valid_tag }} | |
| if: ${{ github.event.workflow_run.conclusion == 'success' && github.event.workflow_run.event == 'push' && startsWith(github.event.workflow_run.head_branch, 'v') }} | |
| steps: | |
| - name: Check out the repository including tags | |
| uses: actions/checkout@v6 | |
| with: | |
| ref: ${{ github.event.workflow_run.head_sha }} | |
| fetch-depth: 0 | |
| fetch-tags: true | |
| - name: Validate tag | |
| id: validation | |
| run: | | |
| # Validation is necessary in the unlikely case that a branch matching the tag naming pattern is pushed | |
| # and the CI workflow in that branch is modified to run upon a push to that branch | |
| REF='${{ github.event.workflow_run.head_branch }}' # This can be a branch or tag name | |
| if [[ "$REF" != v*.*.* ]]; then | |
| echo "valid_tag=false" >> "$GITHUB_OUTPUT"; exit 0 | |
| fi | |
| # Validate that the tag exists | |
| if ! git rev-parse -q --verify "refs/tags/$REF" >/dev/null; then | |
| echo "There is no tag matching $REF - $REF is a branch" | |
| echo "valid_tag=false" >> "$GITHUB_OUTPUT"; exit 0 | |
| fi | |
| # Validate that the tag is for the same commit that was pushed | |
| TAG_SHA="$(git rev-parse "$REF^{commit}")" | |
| COMMIT_SHA="${{ github.event.workflow_run.head_sha }}" | |
| if [ "$TAG_SHA" != "$COMMIT_SHA" ]; then | |
| echo "Tag SHA $TAG_SHA does not match pushed commit SHA $COMMIT_SHA" | |
| echo "valid_tag=false" >> "$GITHUB_OUTPUT"; exit 0 | |
| fi | |
| echo "Tag $REF exists and is valid. Tag $TAG_SHA matches the pushed commit $COMMIT_SHA." | |
| echo "valid_tag=true" >> "$GITHUB_OUTPUT" | |
| publish: | |
| name: Publish to PyPI | |
| needs: validate-tag | |
| runs-on: ubuntu-latest | |
| if: ${{ needs.validate-tag.outputs.valid_tag == 'true' && github.event.workflow_run.conclusion == 'success' }} | |
| steps: | |
| - uses: actions/checkout@v6 | |
| - name: Set up Python | |
| uses: actions/setup-python@v6 | |
| with: | |
| python-version: '3.13' | |
| - name: Set up Poetry | |
| uses: abatilo/actions-poetry@v4 | |
| with: | |
| poetry-version: '1.4.1' | |
| - name: Install dependencies | |
| run: poetry install --without test | |
| - name: Publish distribution to PyPI | |
| run: poetry publish --build -u __token__ -p '${{ secrets.PYPI_API_TOKEN }}' |