Test Git tag / package version coherence

Put this check as the last step of the `test` job and have it
conditioned by the workflow being launched on a Git tag, in order to
easily factor it out among the 3 potential target release "channels"
(GitHub, Test PyPI, and PyPI).

Author: popescu-v

.github/workflows/pip.yml

@@ -90,6 +90,9 @@ jobs:
           name: pip-package
       - name: Install package
         run: |
+          # Allow Pip to write to its cache
+          mkdir -p /github/home/.cache/pip
+          chown -R $(whoami) /github/home/.cache/pip
           pip install --upgrade pip
           pip install $(ls khiops*.tar.gz)
       - name: Run tests
@@ -120,6 +123,21 @@ jobs:
           # The MPI command is not always named mpiexec, but can be orterun etc
           # (as given by khiops_env)
           kh-status | grep "MPI command" | grep -vwq "<empty>"
+      - name: Test package / Git tag version coherence
+        shell: bash
+        if: github.ref_type == 'tag'
+        run: |
+          # Don't exit on first error: print relevant error message
+          set +e
+          PACKAGE_VERSION=$(pip show khiops | awk 'BEGIN {FS = ": "} $1 ~ /^Version$/ {print $2}')
+          # Convert pre-release version specification to the Pip format
+          echo ${{ github.ref_name }} | tr -d '-' | rev | sed 's/\.//' | rev | \
+            grep -wq $PACKAGE_VERSION
+          if [[ $? -ne 0 ]]
+          then
+            echo "::error::Python package version $PACKAGE_VERSION does not match Git tag ${{ github.ref_name }}"
+            false
+          fi
   # The implementation of a unique release job with multiple conditional steps
   # for each publishing mode is not chosen
   # because of the required job environment verified for Trusted Publishing