pypi_upload.yml

name: build and publish

on:
  release:
    types: [published]
  pull_request:
  push:
    branches:
      - main

permissions: {}

env:
  PROJECT: https://pypi.org/p/black

jobs:
  configure:
    name: generate wheels matrix
    runs-on: ubuntu-latest
    outputs:
      include: ${{ steps.set-matrix.outputs.include }}
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          persist-credentials: false

      - name: Set up latest Python
        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
        with:
          python-version: "3.13"
          pip-version: "25.3"
          pip-install: --group wheels

      - name: generate matrix
        if: |
          github.event_name != 'pull_request' || contains(github.event.pull_request.labels.*.name, 'ci: build all wheels')
        run: |
          {
            cibuildwheel --print-build-identifiers --platform linux \
            | pyp 'json.dumps({"only": x, "os": "ubuntu-latest"})' \
            && cibuildwheel --print-build-identifiers --platform macos \
            | pyp 'json.dumps({"only": x, "os": "macos-latest"})' \
            && cibuildwheel --print-build-identifiers --platform windows \
            | pyp 'json.dumps({"only": x, "os": "windows-latest"})' \
            && cibuildwheel --print-build-identifiers --platform windows --archs ARM64 \
            | pyp 'json.dumps({"only": x, "os": "windows-11-arm"})'
          } | pyp 'json.dumps(list(map(json.loads, lines)))' > /tmp/matrix
        env:
          CIBW_ARCHS_LINUX: x86_64
          CIBW_ARCHS_MACOS: x86_64 arm64
          CIBW_ARCHS_WINDOWS: AMD64

      - name: generate matrix (PR)
        if: |
          github.event_name == 'pull_request' && !contains(github.event.pull_request.labels.*.name, 'ci: build all wheels')
        run: |
          {
            CIBW_BUILD="cp310-*" cibuildwheel --print-build-identifiers --platform linux | pyp 'json.dumps({"only": x, "os": "ubuntu-latest"})'
            CIBW_BUILD="cp314-*" cibuildwheel --print-build-identifiers --platform windows | pyp 'json.dumps({"only": x, "os": "windows-latest"})'
          } | pyp 'json.dumps(list(map(json.loads, lines)))' > /tmp/matrix
        env:
          CIBW_ARCHS_LINUX: x86_64

      - id: set-matrix
        run: echo "include=$(cat /tmp/matrix)" | tee -a $GITHUB_OUTPUT

  mypyc:
    name: mypyc wheels ${{ matrix.only }}
    needs: configure
    runs-on: ${{ matrix.os }}
    strategy:
      matrix:
        include: ${{ fromJson(needs.configure.outputs.include) }}

    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          persist-credentials: false

      # Keep cibuildwheel version in sync with pyproject.toml
      - uses: pypa/cibuildwheel@298ed2fb2c105540f5ed055e8a6ad78d82dd3a7e # v3.3.1
        with:
          only: ${{ matrix.only }}

      - name: Upload wheels as workflow artifacts
        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
        with:
          name: ${{ matrix.only }}-mypyc-wheels
          path: wheelhouse/

  hatch:
    name: sdist + pure wheel
    runs-on: ubuntu-latest

    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          persist-credentials: false

      - name: Set up latest Python
        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
        with:
          python-version: "3.13"
          pip-version: "25.3"
          pip-install: --group build

      - name: Build wheel and source distributions
        run: python -m hatch build

      - name: Store the distribution packages
        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
        with:
          name: sdist-and-pure-wheel
          path: dist/

  publish-mypyc:
    if: github.event_name == 'release'
    needs: mypyc
    runs-on: ubuntu-latest
    environment:
      name: release
      url: ${{ env.PROJECT }}
    permissions:
      id-token: write # Required for PyPI trusted publishing
    steps:
      - uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
        with:
          pattern: "*-mypyc-wheels"
          path: wheelhouse/
          merge-multiple: true

      - name: Publish package distributions to PyPI
        uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e # v1.13.0
        with:
          packages-dir: wheelhouse/
          verbose: true

  publish-hatch:
    if: github.event_name == 'release'
    needs: hatch
    runs-on: ubuntu-latest
    environment:
      name: release
      url: ${{ env.PROJECT }}
    permissions:
      id-token: write # Required for PyPI trusted publishing
    steps:
      - uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
        with:
          name: sdist-and-pure-wheel
          path: dist/

      - name: Publish package distributions to PyPI
        uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e # v1.13.0
        with:
          verbose: true

  update-stable:
    name: update stable branch
    needs: [publish-mypyc, publish-hatch]
    runs-on: ubuntu-latest
    if: github.event_name == 'release' && github.event.release.prerelease != 'true'
    permissions:
      contents: write

    steps:
      - name: Checkout stable branch
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          ref: stable
          fetch-depth: 0
          persist-credentials: true # needed for `git push` below

      - name: Update stable branch to release tag & push
        run: |
          git reset --hard "${TAG_NAME}"
          git push
        env:
          TAG_NAME: ${{ github.event.release.tag_name }}