fix(ci): keep lockfile in sync

  during releases

Author: alexandreteles

.github/workflows/release.yml

@@ -44,10 +44,10 @@ jobs:
     permissions:
       contents: write
     outputs:
-      commit_sha: ${{ steps.semantic-release.outputs.commit_sha }}
-      released: ${{ steps.semantic-release.outputs.released }}
-      tag: ${{ steps.semantic-release.outputs.tag }}
-      version: ${{ steps.semantic-release.outputs.version }}
+      commit_sha: ${{ steps.release-metadata.outputs.commit_sha }}
+      released: ${{ steps.release-plan.outputs.released }}
+      tag: ${{ steps.release-plan.outputs.tag }}
+      version: ${{ steps.release-plan.outputs.version }}
     steps:
       - uses: actions/checkout@v4
         with:
@@ -80,12 +80,41 @@ jobs:
             exit 0
           fi
           echo "ready=true" >> "$GITHUB_OUTPUT"
-      - name: Semantic release
+      - name: Plan release
         if: steps.release-baseline.outputs.ready == 'true'
-        id: semantic-release
-        uses: python-semantic-release/python-semantic-release@v10.4.1
-        with:
-          github_token: ${{ secrets.GITHUB_TOKEN }}
+        id: release-plan
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          current_version="$(python - <<'PY'
+          from pathlib import Path
+          import tomllib
+
+          pyproject = tomllib.loads(Path("pyproject.toml").read_text())
+          print(pyproject["project"]["version"])
+          PY
+          )"
+          next_version="$(uv run --python 3.14 semantic-release version --print)"
+
+          if [ "$next_version" = "$current_version" ]; then
+            echo "released=false" >> "$GITHUB_OUTPUT"
+            echo "version=$current_version" >> "$GITHUB_OUTPUT"
+            echo "tag=v$current_version" >> "$GITHUB_OUTPUT"
+            exit 0
+          fi
+
+          echo "released=true" >> "$GITHUB_OUTPUT"
+          echo "version=$next_version" >> "$GITHUB_OUTPUT"
+          echo "tag=v$next_version" >> "$GITHUB_OUTPUT"
+      - name: Run semantic release
+        if: steps.release-baseline.outputs.ready == 'true' && steps.release-plan.outputs.released == 'true'
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: uv run --python 3.14 semantic-release version --strict
+      - name: Capture release metadata
+        if: steps.release-baseline.outputs.ready == 'true' && steps.release-plan.outputs.released == 'true'
+        id: release-metadata
+        run: echo "commit_sha=$(git rev-parse HEAD)" >> "$GITHUB_OUTPUT"
 
   publish-package:
     if: needs.release.outputs.released == 'true'
@@ -104,7 +133,7 @@ jobs:
         with:
           python-version: "3.14"
       - name: Install dependencies
-        run: uv sync --python 3.14 --frozen
+        run: uv sync --python 3.14 --locked
       - name: Build package
         run: uv build
       - name: Install Twine
@@ -133,7 +162,7 @@ jobs:
           python-version: "3.14"
       - uses: actions/configure-pages@v5
       - name: Install dependencies
-        run: uv sync --python 3.14 --frozen
+        run: uv sync --python 3.14 --locked
       - name: Build docs
         run: uv run --python 3.14 mkdocs build --strict
       - name: Upload Pages artifact

pyproject.toml

@@ -51,6 +51,11 @@ dev = [
 ]
 
 [tool.semantic_release]
+build_command = """
+uv lock
+uv build
+uv run --python 3.14 mkdocs build --strict
+"""
 commit_message = "chore(release): v{version}"
 commit_parser = "conventional"
 tag_format = "v{version}"
@@ -74,4 +79,3 @@ minor_tags = ["feat"]
 patch_tags = ["fix", "perf"]
 parse_squash_commits = true
 ignore_merge_commits = true
-