release.yml

name: Release
on:
  push:
    tags:
      - "v*.*.*"
  workflow_dispatch:

permissions:
  contents: write
  id-token: write

jobs:
  release:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-python@v5
        with:
          python-version: "3.13"
      - run: pip install build twine
      - run: rm -rf dist/ && python -m build
      - uses: softprops/action-gh-release@v2
        with:
          generate_release_notes: true
          files: dist/*
          fail_on_unmatched_files: false
      - run: twine upload dist/*
        env:
          TWINE_USERNAME: __token__
          TWINE_PASSWORD: ${{ secrets.PYPI_API_TOKEN }}

  docker:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - id: lower
        run: echo "repo=${GITHUB_REPOSITORY,,}" >> $GITHUB_OUTPUT
      - id: token
        env:
          GHCR_PAT: ${{ secrets.GHCR_PAT }}
        run: echo "value=${GHCR_PAT:-${{ secrets.GITHUB_TOKEN }}}" >> $GITHUB_OUTPUT
      - uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ steps.token.outputs.value }}
      - uses: docker/build-push-action@v5
        with:
          context: .
          push: true
          tags: ghcr.io/${{ steps.lower.outputs.repo }}:latest,ghcr.io/${{ steps.lower.outputs.repo }}:${{ github.ref_name }}