ci.yml

# Copyright © Michal Čihař <michal@weblate.org>
#
# SPDX-License-Identifier: MIT

name: CI

on:
  push:
    branches:
    - main
    tags:
    - '*'
  pull_request:
  workflow_dispatch:

permissions:
  contents: read

jobs:
  test:
    runs-on: ${{ matrix.os }}
    strategy:
      matrix:
        os:
        - ubuntu-latest
        python-version:
        - '3.10'
        - '3.11'
        - '3.12'
        - '3.13'
        - '3.14'
        include:
        - os: windows-latest
          python-version: '3.14'
        - os: macos-latest
          python-version: '3.14'
        - os: ubuntu-24.04-arm
          python-version: '3.14'
    name: Tests, Python ${{ matrix.python-version }}, ${{ matrix.os }}
    steps:
    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      with:
        persist-credentials: false
    - name: Set up Python ${{ matrix.python-version }}
      uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
      id: setup_python
      with:
        python-version: ${{ matrix.python-version }}
    - uses: astral-sh/setup-uv@803947b9bd8e9f986429fa0c5a41c367cd732b41 # v7.2.1 # zizmor: ignore[cache-poisoning]
      # The cache is stored only on main branch and not used for publishing
      with:
        save-cache: ${{ github.ref == 'refs/heads/main' }}
        cache-suffix: ${{ steps.setup_python.outputs.python-version }}
        version: 0.9.28
        activate-environment: 'true'
    - run: uv sync
    - name: Run tests
      run: pytest


  linux:
    runs-on: ${{ matrix.platform.runner }}
    name: Package linux, ${{ matrix.platform.target }}, ${{ matrix.platform.runner }}
    strategy:
      matrix:
        platform:
        - runner: ubuntu-latest
          target: x86_64
        - runner: ubuntu-latest
          target: x86
        - runner: ubuntu-24.04-arm
          target: aarch64
        - runner: ubuntu-latest
          target: armv7
        - runner: ubuntu-latest
          target: s390x
        - runner: ubuntu-latest
          target: ppc64le
    steps:
    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      with:
        persist-credentials: false
    - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
      with:
        python-version: 3.x
    - name: Build wheels
      uses: PyO3/maturin-action@86b9d133d34bc1b40018696f782949dac11bd380 # v1.49.4
      with:
        target: ${{ matrix.platform.target }}
        args: --release --out dist
        sccache: false
        manylinux: auto
    - name: Build free-threaded wheels
      uses: PyO3/maturin-action@86b9d133d34bc1b40018696f782949dac11bd380 # v1.49.4
      with:
        target: ${{ matrix.platform.target }}
        args: --release --out dist -i python3.14t
        sccache: false
        manylinux: auto
    - name: Build free-threaded wheels
      uses: PyO3/maturin-action@86b9d133d34bc1b40018696f782949dac11bd380 # v1.49.4
      with:
        target: ${{ matrix.platform.target }}
        args: --release --out dist -i python3.13t
        sccache: false
        manylinux: auto
    - name: Upload wheels
      uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
      with:
        name: wheels-linux-${{ matrix.platform.target }}
        path: dist

  musllinux:
    runs-on: ${{ matrix.platform.runner }}
    name: Package musllinux, ${{ matrix.platform.target }}, ${{ matrix.platform.runner }}
    strategy:
      matrix:
        platform:
        - runner: ubuntu-latest
          target: x86_64
        - runner: ubuntu-latest
          target: x86
        - runner: ubuntu-latest
          target: aarch64
        - runner: ubuntu-latest
          target: armv7
    steps:
    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      with:
        persist-credentials: false
    - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
      with:
        python-version: 3.x
    - name: Build wheels
      uses: PyO3/maturin-action@86b9d133d34bc1b40018696f782949dac11bd380 # v1.49.4
      with:
        target: ${{ matrix.platform.target }}
        args: --release --out dist
        sccache: false
        manylinux: musllinux_1_2
    - name: Build free-threaded wheels
      uses: PyO3/maturin-action@86b9d133d34bc1b40018696f782949dac11bd380 # v1.49.4
      with:
        target: ${{ matrix.platform.target }}
        args: --release --out dist -i python3.13t

        sccache: false
        manylinux: musllinux_1_2
    - name: Build free-threaded wheels
      uses: PyO3/maturin-action@86b9d133d34bc1b40018696f782949dac11bd380 # v1.49.4
      with:
        target: ${{ matrix.platform.target }}
        args: --release --out dist -i python3.14t

        sccache: false
        manylinux: musllinux_1_2
    - name: Upload wheels
      uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
      with:
        name: wheels-musllinux-${{ matrix.platform.target }}
        path: dist

  windows:
    runs-on: ${{ matrix.platform.runner }}
    name: Package windows, ${{ matrix.platform.target }}, ${{ matrix.platform.runner }}
    strategy:
      matrix:
        platform:
        - runner: windows-latest
          target: x64
        - runner: windows-latest
          target: x86
    steps:
    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      with:
        persist-credentials: false
    - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
      with:
        python-version: 3.x
        architecture: ${{ matrix.platform.target }}
    - name: Build wheels
      uses: PyO3/maturin-action@86b9d133d34bc1b40018696f782949dac11bd380 # v1.49.4
      with:
        target: ${{ matrix.platform.target }}
        args: --release --out dist
        sccache: false
    - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
      with:
        python-version: 3.13t
        architecture: ${{ matrix.platform.target }}
    - name: Build free-threaded wheels
      uses: PyO3/maturin-action@86b9d133d34bc1b40018696f782949dac11bd380 # v1.49.4
      with:
        target: ${{ matrix.platform.target }}
        args: --release --out dist -i python3.13t
        sccache: false
    - name: Build free-threaded wheels
      uses: PyO3/maturin-action@86b9d133d34bc1b40018696f782949dac11bd380 # v1.49.4
      with:
        target: ${{ matrix.platform.target }}
        args: --release --out dist -i python3.14t
        sccache: false
    - name: Upload wheels
      uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
      with:
        name: wheels-windows-${{ matrix.platform.target }}
        path: dist

  macos:
    runs-on: ${{ matrix.platform.runner }}
    name: Package macos, ${{ matrix.platform.target }}, ${{ matrix.platform.runner }}
    strategy:
      matrix:
        platform:
        - runner: macos-15-intel
          target: x86_64
        - runner: macos-15
          target: aarch64
    steps:
    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      with:
        persist-credentials: false
    - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
      with:
        python-version: 3.x
    - name: Build wheels
      uses: PyO3/maturin-action@86b9d133d34bc1b40018696f782949dac11bd380 # v1.49.4
      with:
        target: ${{ matrix.platform.target }}
        args: --release --out dist
        sccache: false
    - name: Build free-threaded wheels
      uses: PyO3/maturin-action@86b9d133d34bc1b40018696f782949dac11bd380 # v1.49.4
      with:
        target: ${{ matrix.platform.target }}
        args: --release --out dist -i python3.13t

        sccache: false
    - name: Build free-threaded wheels
      uses: PyO3/maturin-action@86b9d133d34bc1b40018696f782949dac11bd380 # v1.49.4
      with:
        target: ${{ matrix.platform.target }}
        args: --release --out dist -i python3.14t

        sccache: false
    - name: Upload wheels
      uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
      with:
        name: wheels-macos-${{ matrix.platform.target }}
        path: dist

  sdist:
    runs-on: ubuntu-24.04
    name: Package sdist
    steps:
    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      with:
        persist-credentials: false
    - name: Build sdist
      uses: PyO3/maturin-action@86b9d133d34bc1b40018696f782949dac11bd380 # v1.49.4
      with:
        command: sdist
        args: --out dist
    - name: Upload sdist
      uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
      with:
        name: wheels-sdist
        path: dist

  all-tests:
    needs:
    - test
    - linux
    - musllinux
    - windows
    - macos
    - sdist
    name: CI passed
    runs-on: ubuntu-slim
    steps:
    - run: echo

  release:
    name: Release
    runs-on: ubuntu-24.04
    if: ${{ startsWith(github.ref, 'refs/tags/') || github.event_name == 'workflow_dispatch' }}
    needs: all-tests
    permissions:
      # Use to sign the release artifacts
      id-token: write
      # Used to upload release artifacts
      contents: write
      # Used to generate artifact attestation
      attestations: write
    steps:
    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      with:
        persist-credentials: false
    - uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
    - name: Generate artifact attestation
      uses: actions/attest-build-provenance@96278af6caaf10aea03fd8d33a09a777ca52d62f # v3.2.0
      with:
        subject-path: wheels-*/*
    - name: Publish to PyPI
      if: ${{ startsWith(github.ref, 'refs/tags/') }}
      uses: PyO3/maturin-action@86b9d133d34bc1b40018696f782949dac11bd380 # v1.49.4
      with:
        command: upload
        args: --non-interactive --skip-existing wheels-*/*

  release_github:
    runs-on: ubuntu-24.04
    name: Create release on GitHub
    permissions:
      contents: write
    needs: all-tests
    if: ${{ startsWith(github.ref, 'refs/tags/') || github.event_name == 'workflow_dispatch' }}
    steps:
    - uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
    - uses: ncipollo/release-action@b7eabc95ff50cbeeedec83973935c8f306dfcd0b # v1.20.0
      with:
        generateReleaseNotes: true
        artifacts: wheels-*/*