ci-stable.yml

name: CI (stable)

on:
  push:
    branches: [ "main" ]
  pull_request:
    branches: [ "main" ]
  schedule:
    - cron: "0 3 * * *"

permissions:
  contents: read

jobs:
  lint:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-python@v5
        with:
          python-version: "3.12"
          cache: pip
      - name: Install tooling
        run: |
          python -m pip install --upgrade pip
          pip install ruff mypy
      - name: Ruff check
        run: ruff check automation_file tests
      - name: Ruff format check
        run: ruff format --check automation_file tests
      - name: Mypy
        run: mypy automation_file

  pytest:
    needs: lint
    runs-on: windows-latest
    strategy:
      fail-fast: false
      matrix:
        python-version: [ "3.10", "3.11", "3.12" ]
    steps:
      - uses: actions/checkout@v4
      - name: Set up Python ${{ matrix.python-version }}
        uses: actions/setup-python@v5
        with:
          python-version: ${{ matrix.python-version }}
          cache: pip
      - name: Install dependencies
        run: |
          python -m pip install --upgrade pip wheel
          pip install -r requirements.txt
          pip install pytest pytest-cov
      - name: Run pytest with coverage
        run: python -m pytest tests/ -v --tb=short --cov=automation_file --cov-report=term-missing --cov-report=xml
      - name: Upload coverage artifact
        if: matrix.python-version == '3.12'
        uses: actions/upload-artifact@v4
        with:
          name: coverage-xml
          path: coverage.xml

  publish:
    needs: pytest
    if: github.event_name == 'push' && github.ref == 'refs/heads/main'
    runs-on: ubuntu-latest
    permissions:
      contents: write
    steps:
      - uses: actions/checkout@v4
        with:
          token: ${{ secrets.GITHUB_TOKEN }}
      - name: Set up Python
        uses: actions/setup-python@v5
        with:
          python-version: "3.12"
          cache: pip
      - name: Install build tools
        run: |
          python -m pip install --upgrade pip
          pip install build twine
      - name: Bump patch version in stable.toml and dev.toml
        id: version
        run: |
          python - <<'PY'
          import os
          import pathlib
          import re

          def bump(path: pathlib.Path) -> str:
              text = path.read_text(encoding="utf-8")
              match = re.search(r'^version = "(\d+)\.(\d+)\.(\d+)"', text, re.MULTILINE)
              if match is None:
                  raise SystemExit(f"no version line found in {path}")
              major, minor, patch = (int(g) for g in match.groups())
              new = f"{major}.{minor}.{patch + 1}"
              path.write_text(text.replace(match.group(0), f'version = "{new}"', 1), encoding="utf-8")
              return new

          stable_version = bump(pathlib.Path("stable.toml"))
          dev_version = bump(pathlib.Path("dev.toml"))
          with open(os.environ["GITHUB_OUTPUT"], "a", encoding="utf-8") as fp:
              fp.write(f"version={stable_version}\n")
              fp.write(f"dev_version={dev_version}\n")
          print(f"stable.toml -> {stable_version}")
          print(f"dev.toml    -> {dev_version}")
          PY
      - name: Commit bumped versions back to main
        run: |
          git config user.name "github-actions[bot]"
          git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
          git add stable.toml dev.toml
          git commit -m "Bump version to v${{ steps.version.outputs.version }} [skip ci]"
          git push origin HEAD:main
      - name: Use stable.toml as pyproject.toml
        run: cp stable.toml pyproject.toml
      - name: Build sdist and wheel
        run: python -m build
      - name: Twine check
        run: twine check dist/*
      - name: Twine upload to PyPI
        env:
          TWINE_USERNAME: __token__
          TWINE_PASSWORD: ${{ secrets.PYPI_API_TOKEN }}
        run: twine upload --non-interactive dist/*
      - name: Create GitHub Release
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: |
          gh release create "v${{ steps.version.outputs.version }}" dist/* \
            --title "v${{ steps.version.outputs.version }}" \
            --generate-notes