release.yml

name: Run tests and release

on:
  push:
    tags:
      - "*"
  workflow_dispatch:
  workflow_call:

jobs:
  build-python-wheel:
    name: "🐍 Python Wheel"
    uses: ./.github/workflows/wheel.yml
    secrets: inherit

  release-pypi:
    name: "🐍 Release on PyPI"
    runs-on: ubuntu-latest
    needs: [build-python-wheel]
    if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags/')
    environment:
      name: pypi
      url: https://pypi.org/p/${{ github.event.repository.name }}
    permissions:
      id-token: write
      contents: write

    steps:
      - name: Retrieve artifact from Python build
        uses: actions/download-artifact@v8
        with:
          name: python_wheel
          path: dist/

      - name: upload release asset
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: gh release upload --repo ${{ github.repository_owner }}/${{ github.event.repository.name }} ${{ github.ref_name }} "dist/${{ github.event.repository.name }}-${{ github.ref_name }}.tar.gz"

      - name: Deploy to PyPI
        uses: pypa/gh-action-pypi-publish@release/v1